
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
File: hbfttaaEvj2aYpdZkKcdmY3vUYs.mft (raw, json)
Hash identifier: GevFd/PX7pTh3nR9lU3OMHm/zkG5ZcivBebwYHlxzEM=
Subject key identifier: 75:6F:4F:3E:82:73:D6:82:FF:12:2B:FE:AD:09:8C:6B:3B:76:39:07
Authority key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B
Certificate issuer: /CN=A91B62E1/serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
Manifest number: 68
Signing time: Sat 13 Jun 2026 07:59:49 +0000
Manifest this update: Sat 13 Jun 2026 07:59:48 +0000
Manifest next update: Sat 20 Jun 2026 07:59:48 +0000
Files and hashes: 1: hbfttaaEvj2aYpdZkKcdmY3vUYs.crl (hash: TqdX0wWPKOQnTP9IN+2xIxIdZCm1ZfTyGVKVqWeVWo4=)
2: 146F4288C8E711F0A7C33B4CC4F9AE02.roa (hash: mWJy1v+ne8mjUCBxQ8B6n5ShRR6xhgziEl5EgVMvzV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl
rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B
Validity
Not Before: Jun 13 07:59:48 2026 GMT
Not After : Jun 20 07:59:48 2026 GMT
Subject: CN=6a2d0df5-aac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:79:56:b6:57:a7:91:09:d5:9b:f8:65:2c:39:
73:f8:00:e0:8c:1b:96:86:6a:20:1c:00:7c:a0:5a:
20:40:fe:62:24:ac:82:28:30:ff:19:bd:71:d4:21:
30:1e:29:49:cd:a8:fa:29:e7:10:87:c4:c1:3c:84:
04:16:b0:b1:de:33:f7:db:92:0f:8e:b1:c0:ea:10:
11:2e:59:60:70:cc:a7:de:a2:bc:e1:80:dc:02:bd:
de:60:b2:1e:8e:34:a7:d2:ef:44:22:02:88:2f:8b:
05:a3:22:31:0d:c2:e4:f0:e0:f5:49:1b:14:46:f1:
fc:c0:47:2d:ff:38:15:bc:82:6e:99:18:ff:2d:4c:
c9:4f:c5:c9:2a:6a:f6:91:b2:cd:c1:34:b4:64:ec:
e7:1f:23:18:f2:f2:7c:15:55:4b:c0:ba:7c:38:0b:
e2:d0:0e:d5:50:3b:6e:c7:23:32:f2:10:2d:9b:2c:
0d:64:52:17:5a:ba:94:ec:23:17:e1:7e:1b:d8:0f:
5d:cc:3a:b0:96:e3:62:cb:7c:c8:ed:dc:db:7a:f3:
75:06:52:6b:51:76:a9:94:89:06:25:cb:10:4d:f7:
ff:24:ac:d6:0b:98:8f:a7:4d:0e:db:65:9d:37:5e:
99:4a:7d:49:a2:24:65:c1:38:1d:08:b5:8d:b9:21:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6F:4F:3E:82:73:D6:82:FF:12:2B:FE:AD:09:8C:6B:3B:76:39:07
X509v3 Authority Key Identifier:
keyid:85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:cc:5e:b5:9c:62:60:44:b3:da:57:38:5b:58:d3:5f:6c:7b:
7c:a0:de:ef:1f:0f:19:a5:00:0d:57:76:ef:d6:58:88:b5:4a:
62:ac:76:05:eb:cf:03:09:c6:3b:4d:fd:3c:75:c7:48:e2:40:
0a:f9:33:7e:8c:66:4b:5f:42:c3:25:a6:f4:66:31:73:fa:cc:
67:c9:8a:c9:3a:7a:37:09:e4:91:ec:1f:62:84:be:a7:bd:35:
4e:bc:3e:e8:2d:41:f9:96:1a:28:c2:55:58:6c:c7:31:ab:4d:
6e:63:8f:6b:26:c5:ed:11:76:2e:f6:b1:fa:9d:2f:e4:0a:2d:
44:13:3e:39:72:0b:3c:e7:da:0a:4c:c8:ea:71:e4:a6:fe:3d:
2c:41:f1:f3:07:a9:f6:bf:aa:cc:70:e6:b0:53:5b:a6:b4:cc:
b0:bc:1f:b4:85:48:a1:13:74:d5:e9:73:e5:c2:56:d4:78:8a:
7a:ba:d5:94:99:b7:78:35:19:e6:16:bf:80:7f:d1:47:69:2e:
8d:09:82:95:42:ba:e0:26:b6:aa:d7:9e:56:82:5b:c7:2e:a2:
76:f2:a1:3c:80:32:e5:c0:51:04:f0:71:c1:a4:b8:a8:8f:82:
5d:52:76:3b:33:c6:54:72:74:5b:ef:ca:69:87:92:08:ee:19:
0b:c0:5c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:37:17 2026 by rpki-client