
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
File: HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft (raw, json)
Hash identifier: Fo6/CWx1FThbVboisvBwXP/pjAPurcMS0hRcqTLwhPc=
Subject key identifier: A9:AB:A3:29:9D:C5:6B:0C:3F:C2:5E:35:6A:B5:5C:D0:14:E6:60:87
Authority key identifier: 1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08
Certificate issuer: /CN=A91B6066/serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
Manifest number: F0
Signing time: Sat 13 Jun 2026 06:29:39 +0000
Manifest this update: Sat 13 Jun 2026 06:29:38 +0000
Manifest next update: Sat 20 Jun 2026 06:29:38 +0000
Files and hashes: 1: HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl (hash: SznXcl6A/fDtd0flOiXdvCAokdGrlEWC0d4Lk9J5D8I=)
2: CB16EA82FB6411EF90E1E429C4F9AE02.roa (hash: J85gs2PwspStHZ1QSJgFlpSUo7AYF6KcJxoS8YQ7YiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl
rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6066, serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
Validity
Not Before: Jun 13 06:29:38 2026 GMT
Not After : Jun 20 06:29:38 2026 GMT
Subject: CN=6a2cf8d3-ca3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:a2:e4:2a:0c:cb:6e:8d:7a:a6:c1:75:bc:
d4:1d:af:62:dc:a8:5b:b2:14:00:56:7e:b5:9c:3a:
b0:de:eb:15:62:b0:7e:e2:5e:9f:d5:92:a9:a5:db:
38:be:2e:cc:23:27:1a:50:b7:b3:7e:14:26:30:53:
c7:5a:cd:3a:d9:83:91:80:a4:11:50:12:30:43:69:
6e:9a:50:6c:76:8c:45:a3:25:d1:ea:8f:6d:b2:a8:
04:6c:0b:84:26:df:15:f9:66:14:92:81:b3:77:4a:
0d:63:26:73:0a:90:08:56:49:1a:e9:65:13:cb:df:
39:99:91:3a:c3:78:07:27:52:85:16:5d:df:fb:b6:
76:b1:83:61:71:f8:e6:0c:bf:ed:df:b8:13:86:67:
a1:6c:53:d1:ed:a5:88:ff:a6:0e:9c:30:63:86:77:
cb:59:92:9b:bf:88:c8:4a:1f:f4:0c:83:7c:57:ed:
bd:5e:5f:16:ba:3e:aa:cc:9c:ae:59:ed:31:88:21:
9b:54:ef:74:96:83:c9:41:48:6b:a8:a5:5b:df:59:
a0:2f:29:a7:32:c3:0d:9f:6b:3b:d4:2c:09:9e:47:
56:aa:dc:84:78:ff:8c:6b:94:ed:eb:3e:27:ce:e6:
16:27:b2:54:06:7e:1a:76:b1:83:05:16:30:b8:7e:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AB:A3:29:9D:C5:6B:0C:3F:C2:5E:35:6A:B5:5C:D0:14:E6:60:87
X509v3 Authority Key Identifier:
keyid:1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:3f:ed:a6:3a:a5:b4:55:3d:df:42:a2:98:57:06:b8:c5:68:
95:4d:ae:f0:26:aa:39:98:1f:c8:1f:a2:54:f7:6d:eb:a0:cc:
33:2d:52:6f:28:d1:eb:db:30:13:bd:a3:64:f0:d2:aa:c0:f2:
f7:b8:67:d0:93:6f:50:1b:97:27:48:d1:5c:f3:b6:14:b0:a2:
1c:04:a3:ea:8d:5c:1f:b3:77:7f:78:de:d8:9e:42:6d:b2:9f:
dd:6c:13:70:08:f7:f9:8b:4c:4d:64:a7:6b:76:2c:d5:c8:6c:
77:fd:77:aa:80:83:e7:84:8f:9c:6f:8f:fe:1c:b3:77:e3:51:
1e:f3:1b:ba:5b:a3:58:36:eb:9a:f7:ef:26:22:29:c0:95:5a:
1e:26:0c:7b:77:62:b2:2b:f9:0c:df:0b:9d:a2:2a:f6:d7:59:
89:f5:c9:75:24:33:f9:f9:4d:ed:b3:40:e2:e1:c8:d4:c0:f0:
a3:42:bd:0c:a8:08:59:38:16:df:b8:0b:a9:26:5a:ab:fe:c8:
c9:5b:50:20:dc:e6:e3:37:ee:e6:b2:94:f7:06:18:8c:41:99:
d0:62:57:af:ad:32:5f:49:e9:ae:68:4f:42:8e:a0:e8:ea:0a:
0f:9c:a3:f9:d5:24:c0:81:34:58:3e:1c:8b:80:5e:e0:4a:4c:
6e:9c:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:23:04 2026 by rpki-client