
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft
File: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft (raw, json)
Hash identifier: IISOl1tnuVzEgXAdBA/iHDTtPUhaXt0qQJsI96rtPtc=
Subject key identifier: 7E:CA:4A:A7:E3:F9:0C:A6:58:D2:9D:1D:FC:83:D5:3A:0C:DF:22:A3
Authority key identifier: 1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74
Certificate issuer: /CN=A91B7046/serialNumber=1EFE829F160078C06C9A15696542579687450B74
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft
Manifest number: 0161
Signing time: Sun 01 Mar 2026 01:26:07 +0000
Manifest this update: Sun 01 Mar 2026 01:26:07 +0000
Manifest next update: Sun 08 Mar 2026 01:26:07 +0000
Files and hashes: 1: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl (hash: zZHQ3+2aUERzOx5tiMTV+/S/auPG2Atrw0ai5HqnOoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl
rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7046, serialNumber=1EFE829F160078C06C9A15696542579687450B74
Validity
Not Before: Mar 1 01:26:07 2026 GMT
Not After : Mar 8 01:26:07 2026 GMT
Subject: CN=69a395af-bcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:5d:cb:b4:e6:c4:86:00:ee:a5:9c:88:39:
94:c7:e7:f6:50:af:ef:f3:a1:4c:b6:60:84:88:69:
54:82:03:75:78:82:d8:1b:82:36:0f:94:0a:c2:63:
2a:12:58:6b:35:73:48:3a:d8:60:6f:53:93:7e:04:
d2:eb:30:f1:48:c7:0c:46:19:44:36:df:96:36:a7:
0b:93:ef:64:eb:fe:dd:e2:20:dc:ae:7d:08:20:8a:
5c:eb:d8:39:8a:eb:0b:a9:06:56:f9:f7:47:a5:20:
48:33:89:ef:ff:de:65:e7:60:d0:64:e0:43:04:c5:
1a:cd:78:5a:95:05:0f:14:b3:c9:a0:cc:e8:4e:d6:
ac:4a:db:07:c0:a9:2b:9f:9d:46:17:7e:60:9f:5e:
da:8f:e9:07:b4:9b:94:a3:ce:e4:84:46:ee:49:1a:
e1:84:4f:71:bd:b9:b3:ac:66:b9:d2:8f:63:df:62:
dc:23:c6:74:5b:cd:5c:93:b1:a3:b6:50:1b:5d:e6:
57:cb:18:aa:cc:5a:73:eb:d2:f1:dd:ed:10:99:23:
7f:07:5c:c4:ae:3a:be:e4:55:72:89:9c:23:d1:bb:
49:4f:61:79:19:28:cc:e3:1e:32:4d:5f:1a:d5:47:
13:62:28:71:cf:92:75:3f:d3:b8:9b:9f:b9:d3:d2:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CA:4A:A7:E3:F9:0C:A6:58:D2:9D:1D:FC:83:D5:3A:0C:DF:22:A3
X509v3 Authority Key Identifier:
keyid:1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:3a:db:c6:f5:ce:f0:91:19:73:b4:1b:5f:7d:6c:17:b2:ad:
3b:d2:1f:9e:03:aa:9a:11:c5:5c:e5:ef:53:13:0c:d4:b9:8a:
65:b7:de:67:b5:a2:fc:01:de:e3:5b:01:f9:fd:76:db:a4:2b:
84:7f:31:a3:9e:65:62:78:04:aa:b4:33:d4:3f:49:dc:9a:34:
a4:db:e7:67:1a:e5:de:04:c0:df:84:5c:7a:12:31:88:9e:18:
13:99:c3:cf:ab:37:71:71:38:fd:6b:51:eb:a3:3a:61:3a:d1:
38:9e:00:62:e5:41:20:b4:57:ba:d1:d3:b4:ed:14:d5:e6:5a:
3b:98:e5:67:de:81:37:d5:c6:6c:f3:8b:34:b5:10:b0:e3:26:
82:68:ce:ee:2a:bf:94:70:b0:06:06:e1:f3:b6:09:d1:36:6d:
33:67:a6:e3:b7:74:ff:ef:80:51:02:20:2c:36:73:9c:be:1b:
9f:34:69:04:3a:87:d4:9e:3a:f6:07:34:99:40:0f:92:5d:f9:
87:58:61:16:14:93:88:b5:c9:43:36:7b:0b:40:f4:43:fe:22:
a4:98:dd:55:4f:6c:bd:9c:93:74:56:42:a7:c6:8d:91:8e:e4:
6a:84:d8:a1:a5:74:b7:33:c2:08:13:ef:53:cf:b7:87:00:44:
52:f4:f6:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjcwNDYxMTAvBgNVBAUTKDFFRkU4MjlGMTYwMDc4QzA2QzlBMTU2OTY1NDI1Nzk2
ODc0NTBCNzQwHhcNMjYwMzAxMDEyNjA3WhcNMjYwMzA4MDEyNjA3WjAYMRYwFAYD
VQQDEw02OWEzOTVhZi1iY2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp3Bdy7TmxIYA7qWciDmUx+f2UK/v86FMtmCEiGlUggN1eILYG4I2D5QKwmMq
ElhrNXNIOthgb1OTfgTS6zDxSMcMRhlENt+WNqcLk+9k6/7d4iDcrn0IIIpc69g5
iusLqQZW+fdHpSBIM4nv/95l52DQZOBDBMUazXhalQUPFLPJoMzoTtasStsHwKkr
n51GF35gn17aj+kHtJuUo87khEbuSRrhhE9xvbmzrGa50o9j32LcI8Z0W81ck7Gj
tlAbXeZXyxiqzFpz69Lx3e0QmSN/B1zErjq+5FVyiZwj0btJT2F5GSjM4x4yTV8a
1UcTYihxz5J1P9O4m5+509KI1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7KSqfj
+QymWNKdHfyD1ToM3yKjMB8GA1UdIwQYMBaAFB7+gp8WAHjAbJoVaWVCV5aHRQt0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzA0Ni9BMjIwMDNEMkZE
RkIxMUVFQTkxMEQ3ODdDNEY5QUUwMi9IdjZDbnhZQWVNQnNtaFZwWlVKWGxvZEZD
M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h2NkNueFlBZU1Cc21oVnBaVUpYbG9kRkMzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NzA0Ni9BMjIwMDNEMkZERkIxMUVFQTkxMEQ3ODdDNEY5QUUwMi9IdjZDbnhZQWVN
QnNtaFZwWlVKWGxvZEZDM1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzTrbxvXO8JEZc7QbX31sF7KtO9IfngOqmhHFXOXvUxMM1LmKZbfeZ7Wi/AHe
41sB+f1226QrhH8xo55lYngEqrQz1D9J3Jo0pNvnZxrl3gTA34RcehIxiJ4YE5nD
z6s3cXE4/WtR66M6YTrROJ4AYuVBILRXutHTtO0U1eZaO5jlZ96BN9XGbPOLNLUQ
sOMmgmjO7iq/lHCwBgbh87YJ0TZtM2em47d0/++AUQIgLDZznL4bnzRpBDqH1J46
9gc0mUAPkl35h1hhFhSTiLXJQzZ7C0D0Q/4ipJjdVU9svZyTdFZCp8aNkY7kaoTY
oaV0tzPCCBPvU8+3hwBEUvT2oA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:48 2026 by rpki-client