
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
File: hCMykdLcashg9UvuzoHVSwNEA78.mft (raw, json)
Hash identifier: Asx3hVJuvpJQPho9cAUMXiCgr1JxWzw8mkbDybgY3Jc=
Subject key identifier: C8:49:F7:AD:5B:96:5D:DC:F3:9E:5C:7C:AD:95:F8:B8:3C:5E:62:02
Authority key identifier: 84:23:32:91:D2:DC:6A:C8:60:F5:4B:EE:CE:81:D5:4B:03:44:03:BF
Certificate issuer: /CN=A91CAA8A/serialNumber=84233291D2DC6AC860F54BEECE81D54B034403BF
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
Manifest number: 66
Signing time: Mon 27 Jul 2026 10:19:32 +0000
Manifest this update: Mon 27 Jul 2026 10:19:32 +0000
Manifest next update: Mon 03 Aug 2026 10:19:32 +0000
Files and hashes: 1: hCMykdLcashg9UvuzoHVSwNEA78.crl (hash: VbeiFu+n+S/3DiHH7DrpnWpprzhgo26/f1gRmHMhyxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.crl
rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAA8A, serialNumber=84233291D2DC6AC860F54BEECE81D54B034403BF
Validity
Not Before: Jul 27 10:19:32 2026 GMT
Not After : Aug 3 10:19:32 2026 GMT
Subject: CN=6a6730b4-dc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bf:3a:7e:7f:89:9a:07:91:85:c7:2c:ef:f1:
26:fa:dd:87:d1:8e:9e:da:94:67:47:0e:eb:20:42:
cd:ad:7c:2c:22:05:ab:82:ca:f1:1f:81:64:15:13:
6c:37:25:e9:57:92:35:cc:45:51:87:b4:8a:10:f4:
0c:32:a5:86:93:c9:68:e8:f3:5d:3d:45:4a:bf:75:
76:be:18:d2:18:19:8f:4b:cb:75:02:5d:f8:6f:e6:
26:ea:90:ea:53:d9:3d:99:cd:66:e6:c5:b7:1d:93:
0a:24:ad:16:65:b1:a4:7a:ff:fe:12:e9:0f:cb:de:
c1:cb:42:cc:75:4e:4f:eb:0d:e7:5e:c9:80:78:be:
8e:bf:0e:37:78:fb:f0:0b:a7:56:e3:11:8d:ca:55:
bb:b2:a6:20:18:4d:74:45:ed:cb:81:71:5d:66:4b:
c8:ff:f4:55:65:c5:5a:f7:1d:7e:e6:e2:6d:8c:e2:
30:fe:c5:49:cd:d6:21:54:f7:10:57:f1:f3:59:27:
b7:7f:34:a8:a6:3a:9a:11:fe:cc:14:50:93:11:ee:
9e:41:f1:86:1e:7c:0f:48:c8:19:fb:20:8e:9a:df:
e6:e5:e3:a1:2e:04:d4:a3:d1:9e:d5:8a:b3:46:62:
2f:9f:ec:4d:22:d7:1e:39:b4:ff:74:20:70:1f:4d:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:49:F7:AD:5B:96:5D:DC:F3:9E:5C:7C:AD:95:F8:B8:3C:5E:62:02
X509v3 Authority Key Identifier:
keyid:84:23:32:91:D2:DC:6A:C8:60:F5:4B:EE:CE:81:D5:4B:03:44:03:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a4:b6:e9:dc:bf:f9:18:97:a2:91:bb:81:38:23:37:a9:e1:
66:54:fd:4e:1f:8e:09:42:56:bc:db:3d:77:df:d9:80:a1:ca:
3b:0e:1f:38:b6:02:85:47:c3:71:3e:ce:c1:a6:a7:b5:95:a7:
24:d7:dc:d5:86:19:6e:14:f9:77:f4:97:49:91:41:1f:fe:2e:
bc:7b:96:78:7d:fb:f6:d7:ac:af:13:10:95:e2:dc:5b:09:d5:
a8:1d:f8:c9:da:3f:ad:7a:a2:27:23:de:41:e7:a4:ad:d3:4b:
74:0d:66:11:a4:46:f4:09:da:57:d7:f7:0b:14:12:57:b5:92:
1f:03:e4:b6:b1:54:fe:d7:58:90:58:be:d9:f7:8f:05:bd:0e:
34:91:cb:58:d5:09:53:a6:12:3e:c0:fc:58:57:02:3b:4a:4e:
c9:4e:cd:e3:04:e4:fd:21:f5:42:0d:01:86:fc:6c:04:8a:f2:
78:6c:e3:71:89:20:06:37:8b:71:c6:e9:5a:a2:ee:62:95:69:
e6:c6:6b:e2:85:db:65:2d:25:bf:81:ce:6b:1f:be:be:6f:d8:
04:b5:e0:81:81:6c:76:73:2b:61:9d:3c:90:e3:4d:e7:09:75:
14:88:87:e9:6f:86:f3:06:76:7d:be:c2:59:d3:50:3e:28:fd:
f7:e1:06:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:13 2026 by rpki-client