
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
File: HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft (raw, json)
Hash identifier: YvH5g4P6QrL1tFrwlaxisIJilCf6/0/VYVVRFGpypM0=
Subject key identifier: 39:C8:E9:9B:46:A2:86:1D:DB:76:4C:7B:FF:82:82:BF:45:06:A8:F9
Authority key identifier: 1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08
Certificate issuer: /CN=A91B6066/serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
Certificate serial: BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
Manifest number: B9
Signing time: Sun 01 Mar 2026 08:16:08 +0000
Manifest this update: Sun 01 Mar 2026 08:16:07 +0000
Manifest next update: Sun 08 Mar 2026 08:16:07 +0000
Files and hashes: 1: HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl (hash: 1X9FN2c5ypBjojoqLJRnV2Eh4WUUIVXSHM0tWLEBZH0=)
2: CB16EA82FB6411EF90E1E429C4F9AE02.roa (hash: 0M63JvIdFfuu35AAppLF2AY+BsaEXFTD4uLQ+gUHRuM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl
rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6066, serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
Validity
Not Before: Mar 1 08:16:07 2026 GMT
Not After : Mar 8 08:16:07 2026 GMT
Subject: CN=69a3f5c8-222d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:02:fb:52:a1:8c:a5:3e:03:46:e9:87:ba:
fa:e1:62:7a:9d:7c:e2:f5:be:3d:a9:d7:8c:d3:68:
c8:b2:11:7e:89:09:5c:8c:5f:27:2d:55:3f:62:ed:
c6:62:a2:49:26:ff:17:5f:bb:77:5c:58:5e:a0:42:
95:3c:bf:7c:79:a6:9f:34:37:f4:d6:d2:21:17:f7:
9c:9e:a9:5e:14:a5:e3:25:73:69:8e:4f:16:6d:19:
a4:61:ac:b6:29:61:fa:43:b9:f5:1c:22:f7:0f:6c:
03:8c:56:84:cd:39:c6:a9:3b:7a:58:55:ce:4e:07:
6a:63:7e:34:67:aa:62:c2:2b:77:fe:be:ca:29:27:
22:4e:3a:b7:88:c0:63:2f:7b:22:da:7c:22:e5:b1:
94:ae:71:1e:e0:9a:79:a5:64:02:fb:d7:2c:b5:c5:
84:46:1e:29:d8:a1:3c:a4:dd:8c:00:44:57:96:c2:
f6:36:6a:68:d1:1e:ba:c7:34:42:2c:90:88:d5:7f:
1b:68:33:cf:ee:d1:6a:57:98:82:fb:c2:6f:d2:b5:
66:5e:cb:a8:ee:df:e4:7a:7f:27:aa:00:d1:62:c0:
c6:f2:8f:26:0a:b1:da:0a:2b:68:64:75:19:ed:91:
b8:2d:03:90:0e:28:f8:af:4c:ab:12:2c:c6:aa:27:
34:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C8:E9:9B:46:A2:86:1D:DB:76:4C:7B:FF:82:82:BF:45:06:A8:F9
X509v3 Authority Key Identifier:
keyid:1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:86:fc:2b:84:82:be:f3:4c:d6:64:1e:5e:5d:df:ff:e9:e1:
12:87:05:b7:ec:8d:a3:b0:6f:7c:c5:97:98:14:d9:ec:ed:bc:
bf:6a:98:ca:70:44:63:5a:82:40:1b:21:e4:36:86:a7:7d:95:
eb:95:07:a0:27:96:62:65:a6:d6:0e:2c:05:ab:3f:f8:48:8a:
75:c6:f2:8a:38:e1:17:95:ce:e7:9b:ef:67:f8:ff:93:8e:85:
d8:f1:41:df:b4:e1:4e:c9:c0:40:bf:f2:e4:f6:27:b8:50:5d:
d8:1e:2b:3e:a8:e1:1b:f1:5b:45:0c:59:bb:ee:c4:4b:f0:0f:
f0:93:a0:77:2f:38:16:ed:cd:90:ac:77:bb:93:0f:f4:6d:bc:
4a:24:bb:ff:d7:87:a8:06:f0:5d:c7:cf:63:1b:c5:e0:90:ec:
8c:77:57:44:23:cf:68:4d:62:79:58:4a:0c:97:9e:d3:f2:c2:
0e:93:02:36:d7:cc:ab:65:a5:7f:62:61:3d:6c:62:be:7e:e7:
c8:90:fe:9b:ee:59:11:a1:8a:82:bf:01:cd:96:94:32:ff:5d:
dc:da:48:85:2d:03:ad:ef:63:b0:44:f7:d2:e2:84:47:bf:d9:
6f:0b:ed:66:59:cd:27:d4:8c:61:9f:ad:b4:4a:22:8c:50:0c:
77:48:43:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:31 2026 by rpki-client