
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
File: HdM6aLwLXJMQ__Uq1zlBINECpic.mft (raw, json)
Hash identifier: 8CG1ds8nYAYWRkpkzSejJcupYS7JEWZQKcqndEsQVt0=
Subject key identifier: B9:4B:A1:1A:AB:C6:EE:00:D3:51:96:83:63:B5:F1:D5:66:F1:42:7D
Authority key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27
Certificate issuer: /CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
Manifest number: 0103
Signing time: Sun 01 Mar 2026 07:10:52 +0000
Manifest this update: Sun 01 Mar 2026 07:10:52 +0000
Manifest next update: Sun 08 Mar 2026 07:10:52 +0000
Files and hashes: 1: HdM6aLwLXJMQ__Uq1zlBINECpic.crl (hash: 5u8BxzpuMxAt3CN79ZqM7FqqA7idyvW1F+rEOrPSBsQ=)
2: C7500EC88C2F11EF82B2F55CC4F9AE02.roa (hash: X+68fVuVtHa5fnoo84w/HjubbFGCJvnyWNu2O/OuVfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl
rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5319, serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627
Validity
Not Before: Mar 1 07:10:52 2026 GMT
Not After : Mar 8 07:10:52 2026 GMT
Subject: CN=69a3e67c-5004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:ad:0e:4c:26:9d:5b:49:13:63:2b:85:1a:
9b:50:48:ba:4f:89:37:c1:9a:ed:a0:09:be:c7:5f:
95:0a:bc:e6:ac:f4:8c:da:24:b7:23:d1:b7:60:6b:
32:1d:66:e9:47:6e:f5:ee:58:9c:7a:58:e2:e4:4a:
7e:4e:b5:0a:be:7a:8f:e8:cc:88:5a:43:d3:02:f6:
74:57:b1:8e:b3:97:4c:63:80:a8:59:5f:bd:79:63:
a3:fb:4a:bf:ad:94:06:2a:13:99:94:fc:9a:5f:6f:
08:1b:4b:8f:aa:1c:0d:e1:2e:3a:be:c5:44:43:13:
ee:81:56:3d:96:47:3c:b8:17:a6:df:46:94:dd:f4:
9a:d2:a3:02:84:1a:93:ec:a2:47:cf:d1:7e:7c:71:
19:f3:c0:1c:9f:87:98:fb:cd:0d:3c:60:c0:8f:3d:
a2:7e:8c:9d:91:51:df:1f:d3:1d:f5:21:2f:a5:a6:
28:db:8b:45:86:08:bf:c2:5e:b6:a6:9e:01:f3:ba:
a9:93:f7:f6:a2:b0:e8:d8:ba:b0:7a:b4:99:48:11:
28:34:a1:35:fc:da:78:30:c3:bc:8f:97:b9:c2:3b:
b7:ee:2d:fd:24:72:d6:d7:63:c5:86:df:a7:9b:fe:
53:e3:a4:c3:b6:b5:72:e0:e0:20:e5:69:f5:b5:1c:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4B:A1:1A:AB:C6:EE:00:D3:51:96:83:63:B5:F1:D5:66:F1:42:7D
X509v3 Authority Key Identifier:
keyid:1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2b:5b:22:93:f5:11:02:23:40:a8:eb:dd:97:2e:f7:64:2c:
7b:bc:b9:8a:3a:f3:17:ef:47:3a:d8:50:07:47:e5:72:fa:a4:
f0:e6:12:9e:11:78:4c:09:29:6a:8b:b1:68:12:47:36:d8:1f:
a8:b4:ab:7a:e0:0c:3a:9e:79:db:10:96:c9:16:53:04:91:a8:
25:ff:85:1c:03:ef:ee:4b:dd:ec:07:69:a0:05:67:08:4d:fd:
58:fa:8d:47:66:66:b2:c8:db:dc:55:e5:6e:bc:ca:cb:b0:aa:
3b:b0:de:6f:54:1d:88:55:ed:cd:05:ad:50:d4:9e:3d:d2:c0:
40:83:8e:cd:f2:46:70:c2:6f:e5:0d:5b:d3:8a:39:22:03:e2:
1d:7a:1b:60:9c:65:74:be:e3:5d:c9:5e:50:52:1a:75:e2:34:
d9:de:26:81:e2:32:ce:b6:3e:fd:53:be:0b:37:9d:cd:03:31:
25:6a:35:6f:d6:ae:15:9e:2e:e5:62:cb:64:c6:e1:1b:f1:24:
b5:6f:be:8b:0e:b1:94:3c:ac:a6:2a:95:71:79:b7:90:3f:86:
61:cc:9e:47:c5:fb:5f:07:30:26:24:d0:32:6a:f3:36:a0:a9:
45:dc:af:42:91:79:a7:da:13:68:1f:1c:74:0f:0c:ea:9e:d3:
8c:58:25:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:57 2026 by rpki-client