
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft
File: MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft (raw, json)
Hash identifier: EMopui2dX0Rzrvd7ahP+ntZoD77q2YXjDV53tDzRAlc=
Subject key identifier: 51:05:73:09:41:A6:11:D8:3E:51:72:39:C8:88:DF:7C:E8:A1:8C:27
Authority key identifier: 30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D
Certificate issuer: /CN=A91B4F3C/serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D
Certificate serial: 3516
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft
Manifest number: 3516
Signing time: Sat 28 Feb 2026 15:11:54 +0000
Manifest this update: Sat 28 Feb 2026 15:11:54 +0000
Manifest next update: Sat 07 Mar 2026 15:11:54 +0000
Files and hashes: 1: MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl (hash: W8pJFmVbdmeTiO/9qKPznyNBTl+zDKIjNDj6PTMi2Bs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl
rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13590 (0x3516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4F3C, serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D
Validity
Not Before: Feb 28 15:11:54 2026 GMT
Not After : Mar 7 15:11:54 2026 GMT
Subject: CN=69a305ba-165d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:61:ab:98:4e:b5:7d:22:dc:7b:10:29:83:
96:ad:5e:a6:09:f0:f9:ee:ae:c6:c1:7a:a6:59:a1:
1a:2f:ff:5b:b8:47:04:e8:0c:45:61:10:50:39:3c:
1b:bd:e8:0f:61:63:60:bd:a3:e9:16:a2:aa:f1:24:
e4:c5:fa:8b:38:55:b1:32:fa:5e:22:65:90:28:33:
41:04:88:9e:7d:c6:de:c7:7c:c0:b6:3b:25:7f:99:
19:41:2d:c2:bf:25:ec:d8:64:24:87:ae:62:6b:35:
32:f2:66:44:65:a3:53:a4:91:6f:77:7b:e8:75:b3:
81:d8:a2:86:45:1e:79:2f:8d:08:ae:85:a0:e6:fc:
61:98:0c:1d:a9:73:33:3f:22:9d:a2:e9:80:4c:e7:
26:d8:01:fd:e1:69:5d:94:72:47:f8:2e:06:d1:85:
de:9f:8c:d1:2b:4a:9f:dd:1a:11:75:9a:08:73:ec:
7f:cb:f3:64:17:88:e8:22:67:e1:d2:bf:33:86:61:
ea:bb:db:dd:28:b3:06:ef:38:44:18:e8:f6:ad:23:
a1:d5:9e:a5:05:bf:2e:4d:9d:76:bd:c7:5b:d0:23:
c6:69:66:55:38:8b:08:0e:44:f0:e0:de:58:b9:8e:
dd:01:94:4d:f5:5f:b2:2b:e7:ea:b8:55:c6:07:07:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:05:73:09:41:A6:11:D8:3E:51:72:39:C8:88:DF:7C:E8:A1:8C:27
X509v3 Authority Key Identifier:
keyid:30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:34:7a:6b:f1:26:8b:d1:c9:03:f2:e5:7e:84:0d:4c:ee:00:
5a:6b:a8:24:44:41:c7:4f:5d:e1:d5:07:4a:b1:4f:58:82:04:
71:52:51:45:25:a5:5b:90:9b:1a:58:22:42:ff:3b:57:9a:98:
46:a5:b9:b5:6c:1d:60:a2:96:4f:1d:3a:0e:a4:f8:d2:c1:f3:
0e:a7:da:a5:5f:54:62:45:08:7d:a9:dc:a6:54:aa:e3:64:f8:
82:43:a7:1f:51:ea:e1:87:8e:52:c2:45:25:26:ad:60:5b:74:
aa:49:84:23:af:4d:46:87:dc:4a:aa:64:75:0e:0a:67:86:2b:
5e:a4:35:49:b3:be:4e:1d:50:86:33:e8:fe:f7:ef:28:bf:10:
1d:cd:64:1e:df:32:71:d1:8a:b4:6d:bd:6b:33:c2:ba:e6:f9:
3d:14:5a:b2:83:04:57:78:75:4c:ea:21:47:d9:96:c5:39:da:
bd:67:f9:d6:13:ec:53:5d:b6:68:dd:30:d2:85:e0:96:31:26:
a9:dc:a7:9a:62:cf:59:e5:05:2e:41:5c:8d:d8:b7:f8:03:26:
fc:e0:c5:25:68:aa:85:2f:b5:a5:fa:9a:d8:3f:72:8f:02:e5:
be:72:1e:de:83:92:4b:3b:5f:f8:e8:25:cf:c6:73:d7:bc:b7:
f8:9c:4c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:21 2026 by rpki-client