
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft
File: HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft (raw, json)
Hash identifier: XuCwF2S6yz7nYOYJocPoYs20ogvJ/2q9D/QX0dor0VQ=
Subject key identifier: D0:C4:2A:29:31:9A:E7:F4:B9:2B:C2:86:A8:DA:F7:17:94:92:3B:64
Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E
Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E
Certificate serial: 0710
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft
Manifest number: 06F8
Signing time: Mon 02 Mar 2026 00:16:10 +0000
Manifest this update: Mon 02 Mar 2026 00:16:08 +0000
Manifest next update: Mon 09 Mar 2026 00:16:08 +0000
Files and hashes: 1: HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl (hash: 6BNuir1LDs9Kxh9x4m3LDoS2mfaXnEL8AHU1Mrrsvmc=)
2: C28841A201DB11EDA4B7F257C4F9AE02.roa (hash: yYTtvE7CXHf8fnX9NjEKKec9Ps0u8GPKEPqTfsvne5k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl
rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1808 (0x710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E
Validity
Not Before: Mar 2 00:16:08 2026 GMT
Not After : Mar 9 00:16:08 2026 GMT
Subject: CN=69a4d6c9-2052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1d:89:7a:9a:7b:0e:19:da:58:ef:a9:65:fe:
87:39:24:da:75:b0:28:08:9c:ce:b4:3b:9f:33:5c:
92:68:bd:20:bd:c2:09:ea:69:f4:ab:33:f8:8a:89:
bd:5e:cd:a9:2c:e4:cb:87:de:6b:69:5b:36:d4:09:
0a:44:2c:1d:6b:90:bf:7c:79:a1:64:16:47:6b:2f:
2a:ca:82:79:2d:01:ad:63:fc:fe:84:a5:6d:c1:5c:
4c:5c:50:73:c6:1a:6d:e4:65:65:16:d1:3c:fc:92:
bf:1c:fa:f5:59:04:20:5e:70:e0:a1:dc:93:17:f1:
26:92:f7:ca:2d:e1:6f:ab:b4:cd:02:2f:3d:f7:ce:
09:2c:6c:23:5b:fd:dc:06:e8:be:8a:7c:0f:12:c1:
66:4e:50:04:16:dd:9d:cd:b9:a8:92:13:64:a5:f3:
32:16:ea:25:0a:8f:6b:e6:c9:af:bd:a3:0d:7e:b8:
4e:dd:05:a1:9a:70:f2:5b:65:11:4a:4f:d1:c7:50:
a9:7d:88:0d:ad:f3:42:f5:7a:c3:ee:22:f4:0b:12:
25:03:2d:52:a6:fa:c3:f8:4e:11:12:72:3e:f1:fe:
36:11:79:30:6d:23:dd:4c:b8:6d:4a:7b:69:21:1d:
d2:b5:ee:34:27:14:14:64:e9:29:c3:2a:70:ed:07:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C4:2A:29:31:9A:E7:F4:B9:2B:C2:86:A8:DA:F7:17:94:92:3B:64
X509v3 Authority Key Identifier:
keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:4b:7e:4e:1a:10:35:87:eb:1f:4e:ae:c4:02:7e:ec:bd:ee:
f6:db:fe:47:f4:ed:00:18:b0:fc:c6:8e:72:29:f2:d6:9c:bc:
bc:02:fc:c7:68:ea:45:f0:7e:14:ed:8a:96:26:a2:8d:36:ff:
77:d6:8b:5e:a2:b1:8b:c5:8b:8d:ec:26:fb:83:84:89:5f:ca:
36:4a:e0:63:23:71:79:19:f6:10:e3:85:0a:ba:36:80:7e:af:
ae:01:01:ac:d2:8b:eb:85:25:de:54:6a:d7:c6:bf:31:7c:31:
c3:a0:33:8f:82:24:66:0e:63:2e:b1:97:65:1d:e3:2a:8e:2f:
4a:19:10:a4:94:e4:94:2b:f7:73:99:7c:4f:c3:cc:f2:c9:64:
4a:d2:9f:d6:4a:8a:15:61:89:c8:80:c0:92:5c:ff:46:61:5a:
25:33:13:2a:32:9a:48:96:7d:38:6c:e3:75:ca:b4:8d:86:08:
1e:8b:04:c4:b8:6b:08:50:01:3f:66:c2:e9:65:4f:80:1a:4e:
a3:54:fc:00:fb:40:a7:71:38:d0:f9:ad:6b:80:5c:a5:3d:23:
01:7c:a4:0a:18:17:cc:ea:c2:b4:53:45:e1:86:9b:44:c2:04:
8b:df:ff:5b:cd:91:7c:0e:86:a1:b9:1d:26:92:e2:01:9b:ef:
25:47:70:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:26 2026 by rpki-client