
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft
File: HUXnKUVKJCRGewPPyZfX6xhK52Y.mft (raw, json)
Hash identifier: gBCE/JhO0+iwCVG8+eZ21oIFnhC7PXTqlgzDck3N66I=
Subject key identifier: E6:6E:2E:1B:42:C5:6A:40:98:4A:A9:D0:31:13:14:99:BE:4B:2F:F1
Authority key identifier: 1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66
Certificate issuer: /CN=A91B15DC/serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft
Manifest number: F0
Signing time: Fri 17 Apr 2026 06:03:29 +0000
Manifest this update: Fri 17 Apr 2026 06:03:28 +0000
Manifest next update: Fri 24 Apr 2026 06:03:28 +0000
Files and hashes: 1: HUXnKUVKJCRGewPPyZfX6xhK52Y.crl (hash: 7mVdT0V9eZL97jCSdd5FNAnHYC9QKd53Vxs8HasChV0=)
2: 14F7BC00CEEF11EFAF6F762FC4F9AE02.roa (hash: BF86bk5wE6Zr1m3LZ6kF7qlbs43Gmk6OeQj3ok60wVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl
rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B15DC, serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766
Validity
Not Before: Apr 17 06:03:28 2026 GMT
Not After : Apr 24 06:03:28 2026 GMT
Subject: CN=69e1cd30-e7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:f7:5b:c7:11:7b:98:83:c4:8a:46:85:b0:
13:19:5b:66:e2:01:b9:a6:cf:9a:8a:eb:55:97:0e:
bb:4a:25:c2:16:dd:15:3b:c0:99:b3:a6:df:c0:86:
cb:18:33:c5:c2:89:d4:b2:35:c0:a5:f4:b3:2c:8e:
55:61:c2:a1:97:30:5a:6f:bd:0b:5f:65:f7:6e:1c:
42:02:f5:a0:4d:5a:e1:dd:f8:f7:19:f1:78:30:cb:
cc:69:f6:23:79:fa:bd:5e:28:ab:e8:b0:06:87:0b:
e3:be:ef:8e:a8:ab:68:2a:e4:02:52:dd:98:70:ce:
e7:30:92:30:72:9e:cd:9a:ac:64:e3:61:f7:9f:b1:
93:f8:27:8e:cb:59:f7:17:07:c6:02:b1:b1:ce:30:
af:43:a9:92:80:27:bc:03:75:fb:d1:ef:7a:0c:27:
97:e5:6b:3f:1d:d3:68:28:26:69:9a:10:8e:c4:d8:
80:70:cc:3f:28:24:70:2e:f8:96:cd:78:1d:66:9f:
a2:04:14:22:a8:b0:c2:09:f7:c4:24:d4:1a:96:c5:
60:c8:13:93:99:61:86:7c:92:5b:b6:64:b3:6c:80:
1a:fa:4c:ec:e0:99:34:46:c5:42:de:00:5c:7b:6f:
fc:94:c4:e2:70:a3:e4:b2:87:1a:50:4a:f4:76:ac:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6E:2E:1B:42:C5:6A:40:98:4A:A9:D0:31:13:14:99:BE:4B:2F:F1
X509v3 Authority Key Identifier:
keyid:1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e6:52:6e:83:64:29:d5:7e:e2:97:2f:19:79:79:9c:c3:a9:
12:2d:86:56:31:0c:1e:6d:0b:48:c6:75:bb:9d:6a:4d:59:6d:
a2:3a:b9:64:cf:36:13:70:08:85:8a:b7:cb:2a:6b:d5:d5:c1:
d1:ee:a8:5d:7c:c9:d1:19:7c:ba:f2:c1:2a:55:02:8b:09:8b:
af:7f:6e:ef:dc:ae:13:8d:5b:b2:e8:09:02:dc:12:4e:a2:86:
5d:c6:da:f7:f5:fc:31:ff:ee:c5:67:88:3d:9f:b0:9a:0e:96:
09:1d:32:bc:55:26:0c:a5:ab:d7:2a:ce:6d:7e:b8:d2:5c:2e:
bb:18:8e:bc:26:4d:d5:61:3f:68:b3:3d:3d:c1:77:f1:52:84:
74:08:2a:b1:f9:33:05:b2:8a:5f:df:35:49:fd:09:79:1f:f4:
25:7c:19:7b:bc:bd:dc:7c:18:34:85:0b:0d:a3:b6:8a:73:56:
77:e4:4f:90:57:18:df:54:65:a4:82:02:cd:5e:c6:5a:90:30:
48:8d:09:01:a0:f5:2e:f5:d7:0c:aa:7b:66:ee:d8:4f:93:8f:
e8:57:5f:6e:11:de:f5:05:3a:89:6b:e5:71:b4:74:4a:63:1f:
ec:d7:34:6b:35:0f:71:4c:87:f6:63:e8:21:5f:34:1f:f7:04:
a6:b6:36:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:00 2026 by rpki-client