
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
File: HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft (raw, json)
Hash identifier: Ps9gFz7qG452A0FXRX42WVdvpb49u9O4ba6a/25xWUE=
Subject key identifier: 65:D1:E4:ED:80:A0:9B:4F:81:08:A0:9A:F0:65:60:DC:4B:81:33:BB
Authority key identifier: 1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08
Certificate issuer: /CN=A91B6066/serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
Manifest number: 0125
Signing time: Fri 25 Sep 2026 05:51:35 +0000
Manifest this update: Fri 25 Sep 2026 05:51:35 +0000
Manifest next update: Fri 02 Oct 2026 05:51:35 +0000
Files and hashes: 1: HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl (hash: Bek6UxBC9qao3SwjWXe0oRDyAuxttMtVMeDNAlrJZ9o=)
2: CB16EA82FB6411EF90E1E429C4F9AE02.roa (hash: J85gs2PwspStHZ1QSJgFlpSUo7AYF6KcJxoS8YQ7YiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl
rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6066, serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
Validity
Not Before: Sep 25 05:51:35 2026 GMT
Not After : Oct 2 05:51:35 2026 GMT
Subject: CN=6ab60be7-cdac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:33:2d:99:3b:c9:1e:15:78:c3:b6:42:f9:
8e:3e:90:96:71:74:94:54:1b:59:31:1a:c9:90:66:
8f:f3:ee:40:87:84:7a:87:e4:ce:9d:e5:e0:c2:4a:
f7:00:f0:d6:79:81:85:65:4d:bb:6c:17:66:12:94:
41:5a:54:bd:80:9a:e1:b3:f1:fe:e3:87:9a:67:1f:
5e:e3:60:94:7d:a9:01:67:e0:1c:a9:c1:cf:d0:76:
f7:e7:eb:a5:04:44:14:35:48:dd:d8:a6:44:91:aa:
e0:d2:f9:0c:44:51:2f:4a:fb:f6:50:3f:d8:ab:97:
9b:e5:fe:40:b5:f4:50:61:52:9d:cd:b6:c0:e4:07:
1b:d4:15:69:0d:b5:f7:19:e2:f0:47:81:44:93:e1:
1c:2c:ae:6a:f7:c0:9a:21:70:ab:6b:64:7c:03:7e:
fc:0c:5b:ba:2d:ad:dd:3f:b8:e5:82:fe:c5:9c:34:
13:9e:c7:ff:e5:a2:96:19:f6:a1:b7:89:36:2a:41:
57:25:98:f2:7d:f2:5b:4a:1d:6b:50:da:6e:72:5d:
cd:9e:3c:41:1f:5f:93:5f:4b:8f:60:eb:9b:f7:ac:
a0:5b:be:85:65:08:a2:31:0b:42:bd:a6:3c:b8:22:
e0:40:92:99:e7:97:b4:ad:3a:75:ac:69:b0:e6:e0:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D1:E4:ED:80:A0:9B:4F:81:08:A0:9A:F0:65:60:DC:4B:81:33:BB
X509v3 Authority Key Identifier:
keyid:1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:ab:18:46:ee:d4:e3:d5:f7:77:16:6d:e8:d8:07:62:43:41:
fb:7f:83:d1:90:c6:7c:d7:b1:67:07:61:15:b6:6a:df:fd:df:
0a:5e:b3:97:94:40:7a:00:88:0c:42:49:2e:21:e5:24:00:a3:
14:66:a5:4a:cc:a4:5d:bb:79:e4:e9:da:64:50:18:02:d8:8c:
17:05:e4:e7:95:57:84:ef:8b:9b:69:c6:3b:9e:a6:8d:77:82:
6b:df:2b:7c:8f:09:58:32:19:f5:f1:88:53:16:66:d9:3f:b5:
e3:87:c4:64:fc:89:6d:26:1e:7e:79:91:97:a1:ab:60:c4:af:
46:2f:a2:b9:dc:53:f2:54:bb:b8:bc:9b:2a:3a:d4:7b:74:f7:
8f:4b:a1:5e:ec:0c:e4:fd:fa:17:10:8f:1b:21:4c:09:5a:5b:
d1:b5:cf:6e:71:a4:4d:1c:09:d7:a8:0f:00:87:0e:c5:30:5c:
3b:fc:af:3d:76:cb:f2:db:87:11:0b:ad:b6:eb:5f:6f:8e:94:
4a:0d:1a:fe:84:f0:ef:06:46:92:a8:c0:a5:67:cf:c0:b3:37:
3d:2a:22:d7:56:f0:e9:7b:3f:7d:51:f1:d6:b3:c9:ad:ef:f6:
fd:19:8b:3a:cc:4f:a1:85:bb:d4:c3:ad:d2:d6:4d:b9:51:76:
e4:d9:de:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYwNjYxMTAvBgNVBAUTKDFENEVDNDI1MzMxM0I2MkM0ODQ0OTE2Qjg1REMwRkZF
NEIwN0Q1MDgwHhcNMjYwOTI1MDU1MTM1WhcNMjYxMDAyMDU1MTM1WjAYMRYwFAYD
VQQDEw02YWI2MGJlNy1jZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA09kzLZk7yR4VeMO2QvmOPpCWcXSUVBtZMRrJkGaP8+5Ah4R6h+TOneXgwkr3
APDWeYGFZU27bBdmEpRBWlS9gJrhs/H+44eaZx9e42CUfakBZ+AcqcHP0Hb35+ul
BEQUNUjd2KZEkarg0vkMRFEvSvv2UD/Yq5eb5f5AtfRQYVKdzbbA5Acb1BVpDbX3
GeLwR4FEk+EcLK5q98CaIXCra2R8A378DFu6La3dP7jlgv7FnDQTnsf/5aKWGfah
t4k2KkFXJZjyffJbSh1rUNpucl3NnjxBH1+TX0uPYOub96ygW76FZQiiMQtCvaY8
uCLgQJKZ55e0rTp1rGmw5uAwDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXR5O2A
oJtPgQigmvBlYNxLgTO7MB8GA1UdIwQYMBaAFB1OxCUzE7YsSESRa4XcD/5LB9UI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjA2Ni82NDhBODgzMkZC
NjQxMUVGQkM5QjM1MjlDNEY5QUUwMi9IVTdFSlRNVHRpeElSSkZyaGR3UF9rc0gx
UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hVN0VKVE1UdGl4SVJKRnJoZHdQX2tzSDFRZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjA2Ni82NDhBODgzMkZCNjQxMUVGQkM5QjM1MjlDNEY5QUUwMi9IVTdFSlRNVHRp
eElSSkZyaGR3UF9rc0gxUWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlKsYRu7U49X3dxZt6NgHYkNB+3+D0ZDGfNexZwdhFbZq3/3fCl6zl5RAegCI
DEJJLiHlJACjFGalSsykXbt55OnaZFAYAtiMFwXk55VXhO+Lm2nGO56mjXeCa98r
fI8JWDIZ9fGIUxZm2T+144fEZPyJbSYefnmRl6GrYMSvRi+iudxT8lS7uLybKjrU
e3T3j0uhXuwM5P36FxCPGyFMCVpb0bXPbnGkTRwJ16gPAIcOxTBcO/yvPXbL8tuH
EQuttutfb46USg0a/oTw7wZGkqjApWfPwLM3PSoi11bw6Xs/fVHx1rPJre/2/RmL
OsxPoYW71MOt0tZNuVF25NneHg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:13:57 2026 by rpki-client