
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
File: hmRWQenizPzosun9-5X-a_CfBcU.mft (raw, json)
Hash identifier: Q37KjeEKvwZNREEdhtJn6gJSXQh1TnYzW11eDgYLR30=
Subject key identifier: 58:36:D0:18:D4:DE:45:53:5E:02:49:12:51:FF:D1:D5:0D:16:BD:C0
Authority key identifier: 86:64:56:41:E9:E2:CC:FC:E8:B2:E9:FD:FB:95:FE:6B:F0:9F:05:C5
Certificate issuer: /CN=A91C3DEA/serialNumber=86645641E9E2CCFCE8B2E9FDFB95FE6BF09F05C5
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
Manifest number: 14
Signing time: Sun 01 Mar 2026 10:30:48 +0000
Manifest this update: Sun 01 Mar 2026 10:30:47 +0000
Manifest next update: Sun 08 Mar 2026 10:30:47 +0000
Files and hashes: 1: hmRWQenizPzosun9-5X-a_CfBcU.crl (hash: 3uN4h8FK93yQTJkjw/tUYHMpYGyNS31g0rMWCA5X1Hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.crl
rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3DEA, serialNumber=86645641E9E2CCFCE8B2E9FDFB95FE6BF09F05C5
Validity
Not Before: Mar 1 10:30:47 2026 GMT
Not After : Mar 8 10:30:47 2026 GMT
Subject: CN=69a41558-c053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:f7:49:f5:cb:7c:5b:bb:4b:29:cc:85:03:
f8:d0:d6:1b:e1:ce:3a:40:17:4a:42:31:5f:02:95:
54:94:84:36:85:89:45:2a:5a:e2:04:ed:20:cd:2d:
c9:01:e3:9f:83:9e:38:0a:75:fa:54:32:bf:0e:ff:
a7:c2:ee:3a:e6:76:18:22:28:a5:ce:d1:7b:b2:9e:
3d:80:2f:54:ea:89:8a:dd:c0:f8:c3:ec:59:79:b0:
3f:e6:29:27:93:76:ee:b6:2e:46:dc:a9:a7:ee:4a:
cd:8d:aa:82:41:c2:2d:a5:ed:14:e7:10:34:79:7c:
c7:61:66:dc:5b:33:9b:e7:6b:d0:f8:a5:b3:0d:37:
ed:42:2c:04:80:01:cb:4d:5a:43:2f:26:aa:23:1a:
2d:7d:b7:9f:7e:13:9e:f5:0f:f8:3a:f6:29:1c:9f:
25:3b:3e:1f:e5:12:0a:78:a4:26:de:07:05:40:18:
54:a3:81:12:b7:89:91:2b:61:01:f4:6c:3f:39:2d:
1b:53:7b:3d:db:9e:17:1c:35:12:bf:1d:f0:41:2f:
07:ea:33:2b:79:6f:5d:b3:97:ae:f2:ff:70:cf:00:
81:e7:9f:b4:ae:18:ad:39:e4:e3:11:7a:88:cc:2c:
00:d2:89:21:b5:b4:ae:74:28:d1:61:09:d0:50:8f:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:36:D0:18:D4:DE:45:53:5E:02:49:12:51:FF:D1:D5:0D:16:BD:C0
X509v3 Authority Key Identifier:
keyid:86:64:56:41:E9:E2:CC:FC:E8:B2:E9:FD:FB:95:FE:6B:F0:9F:05:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:35:e3:6c:49:42:af:4f:14:3d:8d:fb:9e:21:b8:d3:1e:f9:
cf:e1:f3:6a:94:df:eb:17:54:12:5f:b8:79:aa:b6:5a:86:3a:
b8:ad:a6:8e:b8:c5:05:2a:35:18:4d:14:50:a9:ae:3a:90:50:
ad:4e:73:3c:ec:32:d3:29:61:b3:5b:66:8e:29:bc:91:41:02:
57:4d:76:2f:2e:ef:0f:4f:26:b2:a7:5c:b3:b1:05:e8:2b:b4:
67:c9:78:6f:e5:0f:d4:ea:51:eb:f9:94:0c:83:f3:7a:60:16:
8c:c9:22:d7:be:19:f6:bc:1e:4e:64:56:f2:07:ce:51:a4:cc:
02:e3:a2:b5:a8:39:cf:ff:a6:c6:ad:ce:b6:64:db:49:95:27:
e8:d8:9d:e9:ab:9a:5e:ee:d4:ce:a9:92:a8:68:d3:76:35:a8:
7c:a5:7f:f4:27:94:dc:f9:7c:6d:95:a4:12:ec:45:f3:f7:20:
50:0f:62:6b:6e:d0:64:c1:a3:f3:ad:88:5d:b4:d2:ee:5f:a5:
a2:f2:15:f3:43:0a:f0:0d:93:64:0d:9e:02:5e:91:d4:79:a9:
0e:4f:56:43:08:14:3e:11:60:b2:81:2d:d4:32:a5:6d:f5:e3:
9b:7e:16:d6:98:c0:57:59:46:4d:b2:ce:2a:fb:b3:31:a6:11:
94:de:45:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:42 2026 by rpki-client