
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
File: hmRWQenizPzosun9-5X-a_CfBcU.mft (raw, json)
Hash identifier: GjU2fx/cMLAr3tYm10JQHqZjj0tlFYDYgGJlbE9EyvY=
Subject key identifier: 5E:AC:E4:8E:E7:A3:A7:3C:30:EF:7F:E6:EB:14:B5:C0:D6:12:9C:A2
Authority key identifier: 86:64:56:41:E9:E2:CC:FC:E8:B2:E9:FD:FB:95:FE:6B:F0:9F:05:C5
Certificate issuer: /CN=A91C3DEA/serialNumber=86645641E9E2CCFCE8B2E9FDFB95FE6BF09F05C5
Certificate serial: 5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
Manifest number: 5E
Signing time: Mon 27 Jul 2026 10:23:58 +0000
Manifest this update: Mon 27 Jul 2026 10:23:58 +0000
Manifest next update: Mon 03 Aug 2026 10:23:58 +0000
Files and hashes: 1: hmRWQenizPzosun9-5X-a_CfBcU.crl (hash: +qzPXacIc4m+sWTwqqy12aTGcSEbM1gDNcIc6Qg+WGI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.crl
rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3DEA, serialNumber=86645641E9E2CCFCE8B2E9FDFB95FE6BF09F05C5
Validity
Not Before: Jul 27 10:23:58 2026 GMT
Not After : Aug 3 10:23:58 2026 GMT
Subject: CN=6a6731be-f8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:90:9d:88:19:f6:3a:03:b7:6e:cd:7c:3c:
07:ac:10:1d:1d:52:1d:37:70:3f:30:4e:15:78:df:
39:cf:5d:a9:ef:4f:d9:4a:05:9d:00:1f:31:35:8d:
a9:4a:e5:31:e2:d5:85:58:7f:e3:a4:64:b5:19:96:
a0:44:50:29:16:02:ee:bd:05:25:dc:f1:ca:dc:6e:
05:79:25:1e:c3:09:3e:d3:1a:c7:35:1f:e1:a1:a8:
62:15:ea:69:8e:d8:f0:13:31:24:24:c7:0e:e4:9a:
68:92:22:25:9a:9e:19:0a:06:eb:43:73:dc:85:b5:
1e:37:4c:d6:6b:b6:d2:55:50:3a:93:0e:a3:91:4f:
c3:ac:14:d1:0f:3c:0f:6f:38:60:51:df:32:18:f2:
3a:24:26:a8:a2:6d:e2:dd:e2:9e:45:75:82:fc:46:
35:5f:06:cc:3f:b6:b5:9f:6e:b0:7e:1f:a5:fb:33:
1e:f8:03:e8:86:87:ad:c2:03:00:68:56:31:87:7e:
44:68:41:2f:fa:f8:b8:10:72:a2:9e:d4:d2:f8:ca:
f3:04:7f:ec:35:e0:83:4a:4d:0e:cd:8a:e4:13:94:
5e:6f:a0:a3:07:b1:67:02:9d:1f:21:72:4e:79:e4:
38:db:45:66:ef:6b:75:90:30:24:5f:02:75:87:da:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AC:E4:8E:E7:A3:A7:3C:30:EF:7F:E6:EB:14:B5:C0:D6:12:9C:A2
X509v3 Authority Key Identifier:
keyid:86:64:56:41:E9:E2:CC:FC:E8:B2:E9:FD:FB:95:FE:6B:F0:9F:05:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c3:01:f5:dc:a2:1e:88:7b:cb:a3:37:b4:aa:32:ef:49:2c:
21:c6:7a:cf:92:f5:da:52:3d:86:1b:4e:2e:43:7c:6e:0b:47:
32:bb:eb:9e:12:41:aa:76:c1:cd:89:68:01:3f:31:ac:90:a6:
fe:70:d9:b6:15:cb:4f:82:af:29:2d:c8:3d:3c:7e:59:a4:9f:
bb:c8:2b:f7:77:10:72:ea:e6:50:93:64:f2:ad:00:a1:f1:e7:
fb:8c:79:50:ab:74:9a:8e:b7:61:8d:96:7f:e0:26:36:69:74:
cf:e2:74:fa:4f:aa:b0:49:7e:f9:70:3b:3f:57:c2:a0:9b:53:
46:3f:67:b0:9c:79:cc:0d:e8:ae:08:15:cb:1c:b3:8f:19:5c:
8e:1c:9e:4a:cb:00:5a:ec:66:0a:20:8d:22:a7:0f:1a:17:6b:
c2:96:d9:c8:33:53:78:46:a4:b5:60:24:8f:b6:79:a3:cd:d8:
d9:c4:61:ca:0e:69:13:a5:9e:53:97:d3:9e:22:f4:06:60:22:
b3:bc:a7:cf:fe:8c:60:f7:e4:8b:38:4f:64:f0:47:00:1c:7a:
06:45:d0:52:4d:91:e5:0b:4a:53:34:ca:2b:f0:df:82:d1:b4:
27:b5:8f:d9:4e:06:72:7a:f5:81:2d:4a:23:40:65:40:19:a8:
92:38:26:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:57 2026 by rpki-client