
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
File: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft (raw, json)
Hash identifier: Vr5BwLHbSmY7rkzMfeWBepxXtD21FOYgQ9BCH2FjgSE=
Subject key identifier: 34:DC:4F:D1:4C:6C:1C:A2:E7:AD:48:0C:DC:3F:23:4B:FB:9F:4A:E6
Authority key identifier: 85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07
Certificate issuer: /CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
Manifest number: F2
Signing time: Fri 17 Apr 2026 06:02:29 +0000
Manifest this update: Fri 17 Apr 2026 06:02:28 +0000
Manifest next update: Fri 24 Apr 2026 06:02:28 +0000
Files and hashes: 1: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl (hash: 13JGk/jaBqzvUMmg0VGgcMjdjJjr8Y1/OtlQHqnlSq8=)
2: B710956ACD7E11EFBBAE2137C4F9AE02.roa (hash: xCTb7m70C8ktIRA0Y3XISp4G4lVWQ5RasqzMmTsyIbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl
rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAC4B, serialNumber=852046915185F855E09EB344788139430E740F07
Validity
Not Before: Apr 17 06:02:28 2026 GMT
Not After : Apr 24 06:02:28 2026 GMT
Subject: CN=69e1ccf5-0738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:e7:11:f2:b6:da:e9:98:51:e6:94:cb:02:
ff:a6:1f:9b:d9:e3:25:82:41:4d:c5:44:d5:4e:cb:
1f:ab:dc:bb:f3:26:be:d3:4f:41:59:bb:21:44:64:
67:f1:c4:b2:fa:66:63:b4:74:1b:f6:22:6c:35:aa:
a3:45:28:37:08:01:ee:0d:50:5d:76:28:65:c5:5a:
71:4a:79:d7:aa:16:a3:6e:e9:64:9f:82:c7:44:c2:
bd:a7:6a:7b:18:f1:06:78:f6:c1:2b:0a:e2:46:a2:
54:e9:ee:e1:98:17:e5:80:34:85:33:ac:75:b4:0d:
9d:30:c2:49:04:3b:14:46:df:76:0c:81:2f:d5:7e:
e0:99:90:0f:4c:b5:42:a9:c5:3d:d5:bf:36:42:0e:
62:3d:8e:45:10:30:c7:8e:1a:5c:0f:46:0d:67:a7:
d4:53:a0:b6:14:30:3c:e4:b6:bf:4b:8d:43:c0:63:
b5:ac:fe:2a:3f:71:14:32:34:7a:1e:25:bd:fb:9b:
9b:88:81:e9:df:fd:da:5b:b5:e5:74:05:d4:9a:0e:
cc:cf:92:e7:a1:5e:a9:56:28:ff:2f:d3:0f:06:93:
53:6e:9c:91:df:7a:94:1a:1d:aa:fe:fa:ef:c5:76:
5b:88:42:28:d1:f8:d0:09:f3:8c:d9:b8:17:1c:fd:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DC:4F:D1:4C:6C:1C:A2:E7:AD:48:0C:DC:3F:23:4B:FB:9F:4A:E6
X509v3 Authority Key Identifier:
keyid:85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:de:55:0f:cd:3d:15:df:2a:fb:7d:88:d9:9e:cb:8b:28:a9:
66:6c:46:38:95:38:58:ef:ad:11:64:e8:8e:e2:5f:7d:d3:82:
58:e2:66:7e:2e:65:67:1f:f1:42:5f:7d:a3:1d:19:ea:79:8f:
e3:a9:9e:c7:91:f7:e8:2c:a8:9b:90:6e:fb:ae:b3:07:93:71:
4f:5f:40:56:74:f3:3f:bb:fe:60:1b:f7:bc:92:d1:d7:2b:a5:
46:85:51:d2:04:2b:bb:72:36:71:49:2d:cf:75:58:fd:77:0d:
2e:63:0e:37:b1:f5:e2:c9:9d:c4:30:33:df:9a:ee:f1:cc:5b:
be:1a:5e:d4:74:56:02:3a:52:5f:ff:18:f3:95:ab:28:83:19:
a3:ad:67:d3:16:f2:c6:0f:84:f5:9d:f9:48:40:33:4f:d6:fe:
d3:58:f8:ef:de:ad:79:73:80:d4:97:0d:70:5e:0a:f3:b6:af:
2e:c8:5d:9d:7b:09:ed:c7:54:50:33:c9:b3:bd:55:30:65:db:
9e:e5:eb:78:04:68:9a:6f:a4:b8:3e:46:db:ec:d7:e4:2d:0f:
5b:30:15:97:65:a8:5e:be:81:70:2a:c8:0f:56:55:12:db:d5:
18:16:8a:b6:5a:76:01:89:36:68:1a:9a:8c:ab:fb:1f:c3:12:
07:a0:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:14:17 2026 by rpki-client