
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
File: hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft (raw, json)
Hash identifier: Zm7pH5fJ9nwA6WdCjOCezpPL7zCgAsooQgMgEkmhkMo=
Subject key identifier: D0:75:9F:7A:C3:2E:C4:B9:C7:C3:24:77:E0:10:74:4A:DC:1B:B1:BE
Authority key identifier: 85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
Certificate issuer: /CN=A91AC567/serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
Manifest number: 60
Signing time: Sun 01 Mar 2026 09:27:46 +0000
Manifest this update: Sun 01 Mar 2026 09:27:46 +0000
Manifest next update: Sun 08 Mar 2026 09:27:46 +0000
Files and hashes: 1: hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl (hash: XHZwUHa5FeiD62raXNeT678p0AG84lOCIDzZVREflIo=)
2: 3014B5BC86D011F08795B91FC4F9AE02.roa (hash: icWxf2EeuNRrL9AzCEZgALKnzPw6palewZWFR0NzHmQ=)
3: 675D716092EE11F0990BEA65C4F9AE02.roa (hash: F/yniYuZFpGynCu35Clniv/S+sipN7kzwj3zVvT9o2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl
rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC567, serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
Validity
Not Before: Mar 1 09:27:46 2026 GMT
Not After : Mar 8 09:27:46 2026 GMT
Subject: CN=69a40692-693e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:51:28:44:60:fc:ee:ed:03:16:41:b0:09:b2:
f8:bd:ba:55:c0:67:1d:10:01:d9:6a:5b:b1:91:31:
24:e4:9b:ca:4d:1a:1a:a0:61:8b:1b:a5:ab:3f:17:
62:42:94:47:ec:80:b3:6a:56:3b:27:ad:d0:ce:fd:
32:ad:55:ac:a0:5f:d3:c7:c3:05:4a:fa:47:5a:81:
f0:a3:0b:95:ba:8a:c9:5b:02:19:3b:59:52:ba:cf:
be:fa:2f:8b:2d:3d:a1:76:c7:7a:23:ea:59:75:10:
1d:ff:ec:c0:f0:3e:92:52:9e:f8:77:37:4f:d1:54:
ec:15:b4:cd:3e:68:1a:7b:18:50:a8:0c:0d:cd:8d:
25:61:04:c4:a7:f3:5a:e7:a7:36:a2:f8:dc:80:13:
d9:61:d5:b6:31:ea:93:ee:e9:f4:93:1c:ea:47:74:
f1:1b:2a:67:8c:fc:11:89:23:cc:23:6c:9d:6d:e9:
70:0b:c7:74:b0:d3:fd:7b:36:2b:bb:8f:1c:cd:ba:
8e:7e:45:2b:20:e6:c2:b7:f8:67:2e:ec:32:f8:e7:
4a:dd:6f:d0:9c:a9:36:d8:98:53:62:c8:da:38:45:
b1:2e:53:f7:74:a8:8a:16:0d:8f:b7:06:c1:fe:e2:
fd:4a:37:e4:4d:22:d1:2f:96:19:ce:3b:ea:01:b2:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:75:9F:7A:C3:2E:C4:B9:C7:C3:24:77:E0:10:74:4A:DC:1B:B1:BE
X509v3 Authority Key Identifier:
keyid:85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:48:2b:a5:f5:e6:e6:69:ea:62:44:b9:8f:29:61:1b:90:c2:
d2:33:99:cc:e7:23:20:eb:73:e4:a9:a9:9f:88:49:51:b1:b0:
af:75:cc:55:cc:df:b5:1f:f7:4f:68:39:72:85:59:df:ed:76:
d0:b4:18:38:10:77:9a:16:18:28:26:d0:a9:9a:c1:93:52:de:
c0:ea:d3:de:97:c3:a4:c1:de:87:96:60:f2:6a:c5:a6:f1:8e:
73:bc:c3:73:f3:3e:c5:94:26:55:bc:7d:8d:e5:d6:36:3b:48:
e5:ef:7b:90:47:f3:55:03:67:be:ae:f3:7c:a7:4d:03:ab:c5:
27:b0:db:c3:a1:d1:db:8e:55:4b:9b:ce:39:52:cd:ba:9e:8e:
30:e9:8e:0e:d6:f8:cc:0e:be:f7:68:74:78:d8:2f:f2:44:5c:
d3:d6:ae:e9:3d:5a:75:21:e2:21:e8:c4:69:e6:27:eb:b3:bd:
bf:59:7b:35:48:9c:f0:15:8f:e0:d5:af:7d:22:98:b5:d6:b2:
73:31:79:ce:c7:16:4a:51:bb:5d:c8:38:62:84:ba:f9:3a:ab:
09:b3:9a:2f:d8:f8:98:50:fa:14:57:70:69:33:bc:6c:6f:26:
bd:db:47:8d:6a:6f:06:0f:9f:a4:0c:8b:22:28:45:e2:b9:17:
ae:33:0a:b2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QzU2NzExMC8GA1UEBRMoODU2QkMxOUZFRUJFQjBCNTU5NUYwM0JCMTIxNDgzRTUz
QTgxMDNDQzAeFw0yNjAzMDEwOTI3NDZaFw0yNjAzMDgwOTI3NDZaMBgxFjAUBgNV
BAMTDTY5YTQwNjkyLTY5M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDnUShEYPzu7QMWQbAJsvi9ulXAZx0QAdlqW7GRMSTkm8pNGhqgYYsbpas/F2JC
lEfsgLNqVjsnrdDO/TKtVaygX9PHwwVK+kdagfCjC5W6islbAhk7WVK6z776L4st
PaF2x3oj6ll1EB3/7MDwPpJSnvh3N0/RVOwVtM0+aBp7GFCoDA3NjSVhBMSn81rn
pzai+NyAE9lh1bYx6pPu6fSTHOpHdPEbKmeM/BGJI8wjbJ1t6XALx3Sw0/17Niu7
jxzNuo5+RSsg5sK3+Gcu7DL450rdb9CcqTbYmFNiyNo4RbEuU/d0qIoWDY+3BsH+
4v1KN+RNItEvlhnOO+oBsj7vAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0HWfesMu
xLnHwyR34BB0Stwbsb4wHwYDVR0jBBgwFoAUhWvBn+6+sLVZXwO7EhSD5TqBA8ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNTY3LzQwRUYyRkQwODZD
RjExRjBCODcwN0E1NEM0RjlBRTAyL2hXdkJuLTYtc0xWWlh3TzdFaFNENVRxQkE4
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaFd2Qm4tNi1zTFZaWHdPN0VoU0Q1VHFCQTh3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD
NTY3LzQwRUYyRkQwODZDRjExRjBCODcwN0E1NEM0RjlBRTAyL2hXdkJuLTYtc0xW
Wlh3TzdFaFNENVRxQkE4dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAFSCul9ebmaepiRLmPKWEbkMLSM5nM5yMg63PkqamfiElRsbCvdcxVzN+1H/dP
aDlyhVnf7XbQtBg4EHeaFhgoJtCpmsGTUt7A6tPel8Okwd6HlmDyasWm8Y5zvMNz
8z7FlCZVvH2N5dY2O0jl73uQR/NVA2e+rvN8p00Dq8UnsNvDodHbjlVLm845Us26
no4w6Y4O1vjMDr73aHR42C/yRFzT1q7pPVp1IeIh6MRp5ifrs72/WXs1SJzwFY/g
1a99Ipi11rJzMXnOxxZKUbtdyDhihLr5OqsJs5ov2PiYUPoUV3BpM7xsbya920eN
am8GD5+kDIsiKEXiuReuMwqy
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:35 2026 by rpki-client