
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft
File: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft (raw, json)
Hash identifier: gnPLwCsXGUeIfZNwK2Fx75qaftmB2cyjdoPce+lsJBQ=
Subject key identifier: 08:8F:FC:DF:0E:99:E8:E3:9E:D3:44:D2:BE:8F:6E:F2:CE:09:84:F0
Authority key identifier: 86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6
Certificate issuer: /CN=A91B3759/serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6
Certificate serial: 0832
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft
Manifest number: 082E
Signing time: Sat 28 Feb 2026 21:17:50 +0000
Manifest this update: Sat 28 Feb 2026 21:17:50 +0000
Manifest next update: Sat 07 Mar 2026 21:17:50 +0000
Files and hashes: 1: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl (hash: IX5u20d3IVDI+t5b4bLpkvXgmFFH9dP+Z4cLPh2Kb0w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl
rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2098 (0x832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3759, serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6
Validity
Not Before: Feb 28 21:17:50 2026 GMT
Not After : Mar 7 21:17:50 2026 GMT
Subject: CN=69a35b7e-91e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:d2:1e:38:63:49:49:8e:ee:70:40:2a:39:
5b:88:6d:73:3b:b3:7e:13:e2:24:7d:f2:09:aa:0d:
c4:ac:09:20:32:50:cf:49:d6:72:cc:59:5c:0a:16:
6d:50:ad:83:8b:2f:01:30:be:5b:2a:fd:92:7b:85:
a8:02:2a:30:5b:55:8e:54:c0:fb:61:21:67:b8:7a:
92:75:7a:cb:5c:5a:ba:48:3f:e6:b2:99:14:aa:a5:
8d:1e:d8:f7:5d:f8:e0:22:81:cb:78:82:0e:d9:cd:
ce:21:51:61:aa:ff:e1:4f:6e:8f:28:f4:76:0f:96:
e1:f2:6a:a9:b1:e3:30:af:17:f8:c5:a2:2f:3a:ad:
54:f1:03:5c:1e:21:14:0a:0b:99:57:c9:38:5c:ca:
b7:15:8f:ab:cc:95:3a:98:7b:23:3d:bc:ab:33:f3:
57:aa:dd:b5:96:67:9f:ce:ac:c9:4e:c2:14:c5:6c:
c4:d5:68:9b:c8:f3:4c:d0:81:db:ef:dc:39:3b:e4:
92:f6:c8:42:32:70:06:b6:63:2d:30:ee:3b:b7:b1:
78:6a:5e:db:c3:3d:ba:96:a2:c1:cf:ac:7c:bb:65:
9a:b7:62:74:ec:d3:cc:44:66:ac:2b:4e:20:4f:5b:
17:46:94:95:7f:1d:00:f0:e4:20:be:38:9d:47:94:
ee:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8F:FC:DF:0E:99:E8:E3:9E:D3:44:D2:BE:8F:6E:F2:CE:09:84:F0
X509v3 Authority Key Identifier:
keyid:86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:30:1f:cc:55:67:d5:bb:cc:5e:93:06:58:a1:97:19:a9:66:
30:2f:87:85:1e:40:f1:fc:b6:18:d4:16:12:3d:27:37:b0:e6:
8a:ef:9d:38:dc:db:88:ce:2c:f6:52:f0:c4:66:b5:d0:a5:8c:
82:25:62:26:cd:94:88:08:2e:b6:8d:1d:8a:1b:24:ea:67:a8:
ec:69:b0:6f:d8:2f:e0:1e:40:c7:32:de:23:76:8f:a4:3a:bd:
26:bf:54:98:07:bc:78:5b:09:3d:d9:70:a0:f9:e4:fd:29:2b:
21:f6:fe:12:4f:88:fa:1d:6d:6f:03:a5:42:57:92:ae:73:1e:
a2:db:3d:b3:c4:f3:97:a7:f5:63:8b:74:1c:03:40:f6:6b:03:
ab:0d:75:f0:c1:42:4e:6e:78:05:ab:68:59:5d:ae:67:22:b0:
27:1a:33:1d:a4:d4:4b:f0:dc:89:32:57:c2:27:f2:cb:80:0b:
3f:08:77:1c:2f:28:a5:43:1b:5f:50:74:91:ae:14:10:85:d8:
fc:20:0e:f0:1e:11:fd:7c:9a:cf:03:3c:1a:67:e7:11:b5:01:
4b:3c:ba:b3:a2:b2:45:86:24:97:e2:7a:9f:69:44:ff:d3:34:
66:cd:8c:41:e8:e4:0f:3f:77:24:5c:74:ec:ad:27:8e:a5:20:
f1:47:71:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:22 2026 by rpki-client