
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
File: hDJHwKwYH8NmZqRDchryHZ2mUNo.mft (raw, json)
Hash identifier: 7fCnKuxiEwZVyHQRgRrcpckTTa6/v7WHNMidhYE/yhk=
Subject key identifier: E2:A0:42:E1:46:88:B8:C8:11:86:44:C0:49:F1:D8:33:40:B3:3C:40
Authority key identifier: 84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA
Certificate issuer: /CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
Manifest number: 0153
Signing time: Mon 02 Mar 2026 15:14:00 +0000
Manifest this update: Mon 02 Mar 2026 15:14:00 +0000
Manifest next update: Mon 09 Mar 2026 15:14:00 +0000
Files and hashes: 1: hDJHwKwYH8NmZqRDchryHZ2mUNo.crl (hash: jBP4A6jxyNL+92pt0c39Gtn7RK8TcArrKps7w67CuHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl
rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAE0, serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA
Validity
Not Before: Mar 2 15:14:00 2026 GMT
Not After : Mar 9 15:14:00 2026 GMT
Subject: CN=69a5a938-bb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:bb:76:71:9f:50:19:28:59:5a:dc:c1:74:
83:fb:1a:0a:17:59:7c:65:17:36:24:35:0a:b1:06:
0b:f4:38:45:65:66:8a:fe:2a:47:7e:91:bc:5a:17:
db:4f:54:05:47:1a:54:36:97:be:87:c5:91:21:56:
d2:81:79:1c:d4:f2:73:6e:64:73:3e:e7:dd:37:1c:
40:55:2d:65:f7:35:39:14:b2:bf:c5:0e:a9:f8:0c:
11:51:39:61:68:97:0c:57:be:46:37:fd:32:c0:84:
49:7a:d6:a9:46:2e:d5:68:8b:20:7b:06:bd:43:0e:
9b:01:1c:16:be:2c:84:f4:d5:e8:8b:ec:ce:4a:3f:
a6:13:5e:35:79:05:1c:70:f8:71:e1:98:20:a7:83:
a0:71:ae:a4:98:5d:b6:fa:ed:05:ea:e7:cd:17:cc:
15:d6:61:52:56:d8:0d:96:60:7a:bb:44:41:a6:19:
91:2b:40:7c:ce:30:9b:79:c0:64:0a:0e:08:56:e5:
cb:44:e2:9e:dc:48:43:10:c1:ac:49:b3:05:e1:e6:
e7:70:1a:35:f4:69:d4:34:1c:a4:cf:d6:b6:6a:cc:
a5:6c:03:a7:b0:ba:73:7a:87:dc:6b:ba:ea:0e:4f:
95:0f:5f:ea:ff:45:e9:87:c6:23:59:ed:72:ba:52:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A0:42:E1:46:88:B8:C8:11:86:44:C0:49:F1:D8:33:40:B3:3C:40
X509v3 Authority Key Identifier:
keyid:84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:35:8d:2b:5e:dd:a1:e1:b1:e0:79:08:61:21:07:77:ce:b8:
e3:5f:74:9f:d8:85:67:61:6e:3f:5a:04:74:6b:4e:93:4c:a6:
b8:f0:44:07:a4:d0:77:11:a7:a5:76:7e:ca:ec:ef:12:e1:d0:
2a:d9:b4:0f:93:92:b6:82:7b:f1:72:47:96:ed:d7:91:e1:37:
1c:ae:0c:b9:66:19:c7:55:e8:20:cc:0f:57:5b:5d:a6:95:a1:
88:6e:0b:00:f7:87:d2:c3:d7:6b:2d:57:dd:38:9e:8a:f0:a6:
64:1e:d4:0c:cc:02:56:ec:a4:c5:07:c4:e8:08:12:89:7d:07:
09:15:d9:18:00:94:5e:ee:7e:4e:6a:0b:b3:4e:00:d3:3d:71:
87:f9:11:99:ba:07:cf:81:45:ac:3e:e0:46:2f:16:1e:dd:20:
ae:d4:47:f4:e8:66:79:23:c0:57:33:6e:aa:15:c5:e2:26:de:
cb:dd:a9:14:92:1e:0d:e0:a9:99:1c:09:a3:0c:71:0d:ef:57:
40:9e:bb:02:e2:39:8e:6b:8d:2e:af:02:7f:6d:b4:7a:34:69:
14:c5:b6:47:e5:cb:6f:a7:a9:3d:01:4d:ec:75:ed:22:d8:c5:
de:bb:d3:2c:52:7f:f2:1e:36:93:07:d8:b9:0f:ca:39:a0:00:
6d:78:5b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:35:15 2026 by rpki-client