
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
File: Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft (raw, json)
Hash identifier: 8bJ/l05hc4r67dmoV3FoTafJm8yyKDqdRWeMyUYY1No=
Subject key identifier: BA:B4:1B:46:2C:44:A1:7E:25:0A:0C:6B:0C:80:44:CE:F4:4A:45:E7
Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
Certificate issuer: /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Certificate serial: 0580
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
Manifest number: 0577
Signing time: Sun 20 Sep 2026 23:09:31 +0000
Manifest this update: Sun 20 Sep 2026 23:09:31 +0000
Manifest next update: Sun 27 Sep 2026 23:09:31 +0000
Files and hashes: 1: Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl (hash: 2ensMurg4CX8nqoLGfk28lTw7am942030KGBeQ41GBk=)
2: B5F911E8429411EC8882FA1EC4F9AE02.roa (hash: /+VDsq15X1B0EicipfKhRf/bc7zJlndTh+wNdlKxteI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl
rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1408 (0x580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFC4E, serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Validity
Not Before: Sep 20 23:09:31 2026 GMT
Not After : Sep 27 23:09:31 2026 GMT
Subject: CN=6ab067ab-667a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:be:cd:17:4a:84:51:60:97:41:7e:47:a5:30:
c2:06:5a:32:64:20:ae:12:30:ed:6b:1f:c4:8c:b9:
60:30:c0:c7:c6:f6:56:e7:aa:72:82:d9:a5:56:a7:
b2:22:49:2a:2f:5a:ad:d1:c7:15:00:31:62:99:d4:
b0:e9:07:7b:3f:3d:bc:f0:f3:e3:70:b2:22:ac:4a:
2b:0e:ba:f8:b4:0e:a5:ca:5c:a7:43:68:d2:b3:5c:
3b:10:ed:a0:46:5b:5c:31:0d:cc:9f:0a:8e:c2:54:
2f:92:20:52:e3:17:9f:64:ba:85:95:d7:9a:5c:89:
77:44:80:65:b3:e4:ba:6d:3e:b4:d4:ac:71:e6:f0:
f5:fd:bf:93:4d:41:d9:13:12:9a:60:50:b3:2b:91:
ad:27:cf:fd:a2:7a:f8:65:47:b4:4b:60:94:68:ac:
8e:8b:f6:58:d5:24:bc:81:68:1c:d5:a0:3f:e5:0f:
eb:93:18:8c:04:6a:e6:2e:60:d3:40:90:21:8a:27:
d9:c3:71:47:7c:3d:22:40:04:37:18:e6:3d:03:a8:
59:3e:fd:8d:da:14:58:c1:b8:7e:ad:a7:4e:17:60:
63:a3:19:c8:61:56:66:60:b7:33:7f:9f:e7:07:19:
b7:a1:fa:bf:e0:ad:cb:cf:f6:35:40:21:d4:fb:ae:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B4:1B:46:2C:44:A1:7E:25:0A:0C:6B:0C:80:44:CE:F4:4A:45:E7
X509v3 Authority Key Identifier:
keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:26:93:26:56:75:6d:74:8c:ea:78:79:08:ee:8a:3e:cf:98:
62:27:f8:e3:db:68:11:88:c8:a3:d0:fc:c8:d4:30:e8:4e:6c:
95:16:f1:52:61:ca:b3:f1:c1:e6:80:21:ae:cb:47:17:b9:ee:
fe:36:9c:ec:5d:2d:6a:b5:b2:59:7f:af:7c:b9:05:ce:03:c7:
57:dc:49:7a:ff:85:9f:26:75:1e:7a:f1:fe:c5:7e:58:42:6c:
b2:ac:8d:cc:6a:7e:a5:ad:be:47:bb:e2:af:7b:0e:8f:c3:52:
f7:91:42:ae:2a:67:fc:62:aa:a9:dc:c1:d5:46:78:9c:15:83:
78:2c:1e:c0:d0:23:ad:fe:28:ac:5f:74:19:5f:7c:54:14:58:
2c:2f:27:e4:99:30:e2:ca:33:07:c2:fb:80:92:1f:1e:4e:16:
e6:85:13:28:6d:8e:ca:68:4c:30:9c:2f:24:ce:02:8b:03:b8:
35:c9:d7:61:88:43:3d:9a:d6:29:df:c5:56:25:f6:5d:ff:78:
28:48:40:a4:c6:de:76:b6:8f:d9:32:be:e9:4e:68:d6:5b:30:
a5:6c:86:5a:31:91:26:e5:54:42:61:88:35:90:0a:5a:5a:2b:
8a:21:38:d5:db:a0:7c:5c:0d:dd:01:3a:e4:d0:ca:b1:c7:d2:
5a:f0:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:17:54 2026 by rpki-client