
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
File: HT4YuPamfZKWztceIZJFoygFJn0.mft (raw, json)
Hash identifier: hRG4EW9YBOb8QvCNPI238UeIUXgvUiL6Sv0v11Gk614=
Subject key identifier: 1A:CC:5D:97:53:B7:FD:AB:0F:6F:7F:11:EE:C5:86:79:9B:42:BC:B8
Authority key identifier: 1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
Certificate issuer: /CN=A91AD5C8/serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
Manifest number: 88
Signing time: Fri 25 Sep 2026 07:43:51 +0000
Manifest this update: Fri 25 Sep 2026 07:43:51 +0000
Manifest next update: Fri 02 Oct 2026 07:43:51 +0000
Files and hashes: 1: HT4YuPamfZKWztceIZJFoygFJn0.crl (hash: pZgpzU1pWuJl3XXG1YVF5jSBM6rWb+Eabh4MKkfB4nE=)
2: 40DFA7D2EF8811F0A94034DF606F56BC.roa (hash: r01cCM8Cr1fBBAypHwZvdCaBHe7BaHRTnIOSdsNilxQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD5C8, serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Validity
Not Before: Sep 25 07:43:51 2026 GMT
Not After : Oct 2 07:43:51 2026 GMT
Subject: CN=6ab62637-47cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:19:fe:dc:8e:b5:d8:50:64:f1:d7:d8:a9:
8b:58:bc:7d:46:77:b4:80:a8:97:d2:53:88:28:23:
57:43:69:d5:4a:e8:db:1d:e1:8b:d5:46:7f:6b:02:
0a:0e:6a:c8:94:08:19:46:44:33:dd:c7:d2:8b:99:
ab:c1:2d:82:cb:4a:cb:03:5d:c4:29:74:41:3a:4b:
54:da:cc:e7:20:c0:27:66:9d:91:21:b6:16:fb:d9:
cd:2f:42:8c:1a:2e:e2:96:e9:59:3a:2e:85:54:8c:
8a:bd:75:4b:f3:55:fe:24:ef:b1:f1:df:07:8a:2c:
21:48:fd:c2:a8:f0:6a:5b:29:7e:bf:b7:b7:34:0d:
4c:ae:f8:1f:a5:bb:3f:6b:1c:e0:ee:6e:1b:0d:2e:
2f:fe:d0:64:98:b8:c9:ad:86:87:ff:72:b9:5b:71:
7d:4a:88:a1:c5:c8:ae:a6:5c:fd:4c:92:1a:63:45:
99:70:b7:bf:d6:8a:b4:b2:63:5b:ce:c8:9c:14:50:
17:c7:34:74:b7:5d:a3:07:4a:24:52:0a:4d:22:4c:
ed:ea:f7:db:0a:a6:61:3b:21:90:ed:c7:51:0f:07:
84:48:9a:3b:af:16:df:27:0f:8f:e9:b4:bf:2b:b4:
cd:3c:b8:3b:08:3c:91:d9:2a:ee:bd:cc:69:aa:3a:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CC:5D:97:53:B7:FD:AB:0F:6F:7F:11:EE:C5:86:79:9B:42:BC:B8
X509v3 Authority Key Identifier:
keyid:1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:61:ae:04:97:0f:56:6d:fa:d7:14:ee:70:ec:64:0d:a0:c1:
f5:ee:5a:54:ac:3b:a7:c7:cb:53:57:61:b0:59:e7:b8:cb:3b:
90:86:78:5c:88:a9:c7:db:d1:62:2e:90:46:6c:76:9f:c4:16:
0c:59:1c:ce:93:ed:b9:f4:a9:d0:36:39:bf:04:2c:6f:46:96:
11:7d:95:c3:4c:2e:74:b3:fe:51:42:a2:65:f3:71:bd:4e:a0:
d1:b5:ad:4e:6d:83:28:04:3c:eb:87:ef:3e:b1:01:04:96:18:
cb:48:fe:66:c4:ae:20:9d:11:82:17:91:ea:97:d1:9b:f8:03:
b2:52:48:af:4a:1e:a8:e7:95:51:92:cf:9c:94:21:f6:f9:4d:
43:d8:2a:c3:7c:f4:c7:84:41:a8:3c:44:97:28:f7:f5:32:e8:
8d:6d:e3:e4:6d:b5:e3:61:27:f9:b8:58:cb:68:f1:87:c2:96:
6f:21:33:2b:63:4f:44:36:a0:79:5a:70:d8:d4:91:b3:06:76:
c4:bc:9d:85:d6:ec:c2:09:0b:03:40:5e:de:cd:0e:8f:50:be:
4f:a9:a3:da:bf:84:5f:f4:db:06:1e:14:3f:05:ed:47:2e:03:
99:5d:70:7b:f6:51:f1:a8:80:43:be:f1:e7:35:d9:4a:24:38:
e5:bf:be:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:24:24 2026 by rpki-client