
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft
File: hxSXyIUOQWJXlcT42UXHs9BBbB8.mft (raw, json)
Hash identifier: Fan5j997SAfHyg5HGbaE+KgcXuUtNnOTDdcmvQDgtU8=
Subject key identifier: 17:34:6E:74:35:E1:AD:8C:D7:0D:8F:52:FC:6C:D2:13:E3:B8:2E:8F
Authority key identifier: 87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F
Certificate issuer: /CN=A91C6825/serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F
Certificate serial: 0709
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft
Manifest number: 0701
Signing time: Tue 28 Jul 2026 22:41:21 +0000
Manifest this update: Tue 28 Jul 2026 22:41:21 +0000
Manifest next update: Tue 04 Aug 2026 22:41:21 +0000
Files and hashes: 1: hxSXyIUOQWJXlcT42UXHs9BBbB8.crl (hash: kHQlzMEpweWKDS6QBKzYHKC78WOX9EGK9zTtrkXdrvc=)
2: 925B815E9ABE11EBA445A74FC4F9AE02.roa (hash: 5YAjbk8gVmeDfdIGGQU28GyyYyx56OcJBfHArp8itRY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl
rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1801 (0x709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6825, serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F
Validity
Not Before: Jul 28 22:41:21 2026 GMT
Not After : Aug 4 22:41:21 2026 GMT
Subject: CN=6a693011-fcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:40:6f:50:4b:f8:2a:76:58:ec:9a:88:00:
b0:66:33:89:ad:0e:8c:7e:49:ca:fb:0f:cc:a1:4f:
20:41:6b:a3:8d:36:b4:65:22:39:03:a6:c4:6f:57:
07:13:e5:3e:67:01:f9:aa:6a:c1:7a:e0:91:af:b8:
52:c0:9e:ea:4c:e2:2b:f6:68:c8:5a:b3:5b:67:7f:
26:c2:8a:84:ba:2a:c0:e7:95:cc:2e:bd:a6:3e:fc:
eb:11:42:94:c0:b3:9c:7b:ea:a3:b8:60:5d:e1:e9:
1c:1c:98:3c:93:4a:6b:99:68:79:a6:25:5d:a9:1b:
b9:9c:7e:18:c0:3c:e1:fd:43:96:c6:0f:7a:91:1c:
25:a1:ac:f6:b3:9d:8b:47:72:fe:62:8c:09:19:bd:
5b:cf:fd:b5:c5:f2:26:0b:9b:06:d5:e3:21:79:da:
83:ff:ac:54:d5:a9:fb:bb:f7:70:3d:b7:33:4c:03:
c0:10:a8:86:6d:66:9c:6b:89:bf:07:84:cb:c6:01:
84:35:57:e6:8a:3f:02:30:1e:80:32:83:39:c9:42:
3c:d5:92:4d:56:af:f3:9d:6b:f7:d8:17:de:18:ce:
73:7c:07:eb:09:11:08:a9:b0:a2:db:fe:20:da:2e:
36:4f:7b:5a:9b:e7:71:08:ed:c0:1b:03:a6:fe:4a:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:34:6E:74:35:E1:AD:8C:D7:0D:8F:52:FC:6C:D2:13:E3:B8:2E:8F
X509v3 Authority Key Identifier:
keyid:87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cd:32:ce:c7:f7:61:f9:28:57:39:a4:63:b0:06:c9:50:1c:
c6:64:1f:45:ee:a4:4a:9e:ba:3d:4d:2c:ba:b7:2b:60:3e:65:
54:98:79:43:a0:de:e5:3c:4e:bc:37:36:8e:d1:6e:0f:51:69:
86:e8:d3:a6:d2:46:2e:b8:e8:45:54:98:1c:1b:67:60:79:43:
33:0d:6d:4a:24:13:98:cd:49:1a:04:19:c0:e7:9c:bb:d4:66:
af:1b:84:e9:51:fd:e9:63:f3:79:4e:54:89:f2:81:97:60:a5:
f0:de:b7:7f:ef:ef:4d:a6:9d:0f:34:da:dc:35:b1:63:99:b9:
9a:aa:b4:19:f1:ac:be:90:2c:93:1a:58:2f:0a:3b:e8:04:bb:
1a:48:d4:cd:e7:1c:79:bf:e2:72:a7:ff:d7:d6:68:78:04:29:
5b:0b:4d:85:b3:c5:d1:9e:d6:27:6a:19:9a:eb:33:0a:0a:da:
54:94:c9:70:2f:bd:6a:b0:3a:3a:29:12:45:8b:7f:4e:92:6d:
fc:a9:0f:56:a8:8f:3c:a8:80:07:f1:e7:22:58:c7:68:d6:1b:
71:55:23:61:9d:42:41:fb:38:81:f4:c9:89:2d:83:e2:29:2d:
19:ca:e2:fc:d8:da:28:a6:9c:d2:89:11:bf:b1:0f:b6:cf:68:
4e:b1:93:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:09:01 2026 by rpki-client