
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
File: hXm-LYNFaC8nrucGK71O92ZOVxs.mft (raw, json)
Hash identifier: FLA9ncJ7mcOBww7/XWf+t+Z9BgqSlQE5KkRgni2mJJI=
Subject key identifier: C1:C0:3B:9C:52:72:ED:76:C6:B0:5A:EC:68:40:0B:96:F5:B5:EB:01
Authority key identifier: 85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B
Certificate issuer: /CN=A91D0B6B/serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
Manifest number: 0107
Signing time: Mon 27 Jul 2026 08:13:02 +0000
Manifest this update: Mon 27 Jul 2026 08:13:02 +0000
Manifest next update: Mon 03 Aug 2026 08:13:02 +0000
Files and hashes: 1: hXm-LYNFaC8nrucGK71O92ZOVxs.crl (hash: EWFj3a8+jU9pq05ef4nXQIy4JMqrGKbtXmsNJZHAEZE=)
2: 73DC435A39F511F09F296862C4F9AE02.roa (hash: kSc2xHms3sPfHeZuP4LV3Eoyr2OjFjDeReRTh5WRY7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl
rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B6B, serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B
Validity
Not Before: Jul 27 08:13:02 2026 GMT
Not After : Aug 3 08:13:02 2026 GMT
Subject: CN=6a67130e-d7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7b:5b:27:97:60:44:f2:2b:97:1f:5a:58:2c:
c5:3f:27:cf:57:42:e6:c5:ff:52:72:80:3a:55:e4:
d8:c6:53:d9:22:75:08:8a:d4:37:3e:b8:d9:23:b7:
4d:f5:b0:c5:d3:00:ed:e3:c8:46:ce:32:5e:cd:77:
04:66:a3:08:84:4c:7e:22:59:53:12:fa:38:81:36:
fc:95:4d:91:f1:d7:c2:a4:38:5d:3c:9a:8e:a5:b2:
b2:d6:4a:a5:1a:f5:9f:36:9d:01:67:11:26:8d:62:
be:df:a8:84:fc:dc:4c:9e:c0:c0:b1:9f:ee:4b:c1:
15:60:c0:d2:b3:0b:68:43:50:62:15:0c:5e:8e:4c:
3f:69:4d:1f:a7:b5:05:37:55:5f:5e:15:ed:9b:b9:
19:30:fb:92:a8:89:24:60:28:a8:23:bf:e0:fe:16:
cb:65:6d:f4:2d:7b:85:75:63:85:7d:3d:ec:58:a4:
a2:fe:64:e3:61:d2:e6:02:e6:13:8e:55:d2:16:aa:
ba:46:21:6a:28:5e:1f:08:ad:42:98:63:8a:81:ca:
06:79:d3:89:99:d3:79:68:37:a9:64:49:a4:45:2f:
bb:92:6f:6f:05:9b:09:2a:78:d6:64:1b:2b:f3:a5:
28:78:bf:c8:6c:a8:43:26:a2:6d:87:ec:df:a4:52:
9e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C0:3B:9C:52:72:ED:76:C6:B0:5A:EC:68:40:0B:96:F5:B5:EB:01
X509v3 Authority Key Identifier:
keyid:85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:7a:f8:8f:ff:e5:96:b6:a7:7f:fa:36:ab:8b:4c:ae:b8:8f:
88:b0:d1:1e:66:54:df:1f:84:02:5e:ba:50:ec:d2:5e:27:0f:
9e:40:69:5f:91:61:2d:4a:d2:a5:ee:4e:fc:5e:32:66:95:b3:
74:f8:9e:3e:ad:45:ac:af:07:58:44:e9:4b:d0:27:bc:c6:31:
8d:8c:ce:fe:bc:bc:ff:04:71:6c:d1:86:55:ba:7c:df:72:be:
03:18:5f:dd:05:80:7f:2c:32:86:fb:df:3e:d7:70:d7:51:70:
bc:0d:bb:3a:14:06:f3:56:a4:ee:34:dd:a6:f4:8d:31:ac:75:
da:6a:7a:67:dc:16:d4:c8:f8:11:b4:10:34:3a:53:75:90:19:
db:19:00:1c:fa:9e:35:e2:1a:7d:2d:17:03:72:07:10:29:27:
2f:16:4d:02:1e:fc:e2:0d:f2:37:50:4b:b6:b1:32:0c:d1:cc:
b6:eb:ae:ae:31:69:88:b8:b9:3c:5b:57:62:59:8b:fe:d1:73:
4e:ff:ad:ff:17:19:61:84:ed:2d:25:48:6f:b8:d3:11:62:f0:
38:3f:f6:0e:4b:b8:c6:45:1e:81:3c:00:ce:2b:c5:d3:8c:06:
4c:4c:84:35:51:dc:8b:2d:8f:b1:d4:99:9f:fe:82:39:48:b4:
66:42:fa:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:34 2026 by rpki-client