
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
File: hXm-LYNFaC8nrucGK71O92ZOVxs.mft (raw, json)
Hash identifier: XHhp1IhEjil11z5cM8wW/Q6mZr+uP2OcBZZtTf4+CIU=
Subject key identifier: F2:8A:B0:F2:68:76:64:02:FC:D9:04:47:3B:71:AA:D0:BB:D5:E9:9B
Authority key identifier: 85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B
Certificate issuer: /CN=A91D0B6B/serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
Manifest number: BB
Signing time: Sun 01 Mar 2026 08:17:51 +0000
Manifest this update: Sun 01 Mar 2026 08:17:50 +0000
Manifest next update: Sun 08 Mar 2026 08:17:50 +0000
Files and hashes: 1: hXm-LYNFaC8nrucGK71O92ZOVxs.crl (hash: 7QNAFuZMIpLsTNmdoVckTrMRb8VA9JlLQ2lT7D+y1zo=)
2: 73DC435A39F511F09F296862C4F9AE02.roa (hash: Svu2JeuZ6CYR5ygmEoE5eVNloQDdE5gMCDtzf/8+0c4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl
rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B6B, serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B
Validity
Not Before: Mar 1 08:17:50 2026 GMT
Not After : Mar 8 08:17:50 2026 GMT
Subject: CN=69a3f62f-8a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:94:ab:18:3b:db:0d:c9:1b:35:f4:0a:92:
25:76:3c:15:27:8a:43:c8:a0:be:f9:79:cb:dc:bd:
01:79:0b:1b:9e:72:f5:fd:09:c1:57:28:f4:cf:e9:
70:10:57:72:8f:94:f3:fc:6c:18:de:ea:6b:6d:df:
5c:9b:e0:b6:10:6a:28:00:93:d6:5e:e4:76:7a:0d:
3c:c2:96:f7:48:81:67:16:a6:9b:1c:ad:a2:9b:fe:
06:e5:61:ab:cf:cf:b6:16:ca:8e:31:5b:18:99:c9:
ea:6e:6c:65:23:6f:f5:98:01:8a:6c:bc:6c:b4:18:
ae:c8:af:b9:b3:b0:59:ae:f3:85:14:fb:61:21:49:
60:a6:5d:fb:03:f1:9c:e6:fd:a1:9a:ef:83:a1:d3:
9d:49:b1:e4:c5:e5:02:74:09:52:90:1c:ab:ce:af:
c5:4b:4f:f2:92:c0:49:52:ed:9b:80:64:b2:cd:08:
e1:9b:53:60:c8:be:51:54:cd:54:f3:72:be:70:ed:
1f:49:d8:5f:35:a3:47:06:05:a1:bc:a1:f4:74:d3:
d2:69:61:b5:5e:8a:2d:f9:0a:f0:de:1a:90:d0:08:
7b:ad:08:df:e0:1e:59:88:37:b3:61:c8:b3:64:f1:
17:e1:c3:59:b8:d1:92:9e:e9:f4:07:3f:e1:7d:25:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8A:B0:F2:68:76:64:02:FC:D9:04:47:3B:71:AA:D0:BB:D5:E9:9B
X509v3 Authority Key Identifier:
keyid:85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:55:80:8d:8e:27:52:04:80:d4:98:32:e8:b6:ad:26:61:46:
c2:9a:68:d1:f3:8e:d0:89:ec:47:35:3c:69:b1:b1:43:ec:f3:
04:ac:01:a5:0f:4d:1f:02:52:c7:9d:72:a7:b7:a2:6f:a8:f3:
67:b2:57:f0:a3:35:ea:c1:a5:73:a9:49:7b:c0:00:68:40:e5:
f5:97:f7:24:6b:75:0d:69:82:c7:cd:eb:87:5d:7c:3a:2f:c6:
e2:8d:92:cf:6b:bb:5c:12:bc:e2:91:04:0c:15:e4:33:7d:b2:
c8:7d:56:6c:e2:ca:dd:e4:9a:96:0d:5d:91:92:84:b5:a6:3f:
26:fb:de:0f:6b:ed:25:55:38:0f:e1:18:0a:55:3b:1a:ca:62:
90:7e:a5:95:c2:27:f2:34:17:c4:83:66:87:4c:55:13:96:7f:
bd:e1:7e:85:46:f7:83:9e:b0:d9:d5:4b:05:30:ac:7f:1a:27:
42:4e:e4:80:7a:aa:76:7f:54:19:03:67:47:c1:28:8d:1a:0e:
5d:be:e1:f7:ba:d8:1f:c5:1d:64:67:ca:fa:e8:43:34:c2:f7:
4d:90:d4:5f:4b:1c:c3:2c:c6:27:70:c7:ed:3f:90:fe:a6:3b:
d9:b5:90:ad:8d:2d:51:d6:ad:28:ae:f7:f0:ee:7d:e4:b5:86:
2d:0c:40:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:48:43 2026 by rpki-client