
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
File: hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft (raw, json)
Hash identifier: slIVZW+/Oj4Zk+sE1VV30bjXePdMCmUETRPokPfChqI=
Subject key identifier: B2:59:04:07:BD:50:65:E2:EB:D6:F4:9D:45:83:81:31:44:2A:D5:B8
Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78
Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
Manifest number: 0195
Signing time: Sat 13 Jun 2026 04:21:53 +0000
Manifest this update: Sat 13 Jun 2026 04:21:53 +0000
Manifest next update: Sat 20 Jun 2026 04:21:53 +0000
Files and hashes: 1: hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl (hash: Esg8nArqTwVujki1d8vmkzndPldWLbEgcVqgAHFNOL4=)
2: 612992C6012A11EFB75C350FC4F9AE02.roa (hash: c1ZdxCR5jy+2u4016P6OO4rIgFkE6Ob/aP92Gxo47WA=)
3: 61A59876012A11EFB75C350FC4F9AE02.roa (hash: z1kC7ixKWc94mNbOx5wcAEuMc543/xXPe6FxxWEqPQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl
rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D894F, serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78
Validity
Not Before: Jun 13 04:21:53 2026 GMT
Not After : Jun 20 04:21:53 2026 GMT
Subject: CN=6a2cdae1-9c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:0d:42:49:9d:b0:e7:e0:37:74:a5:5a:2b:
b8:da:3d:64:d4:bc:80:d7:0b:bc:44:81:04:86:2e:
a1:af:23:63:8a:a9:6b:00:3e:24:82:fa:af:93:42:
ad:55:05:62:bf:5d:77:b9:2c:b4:c1:6e:68:a6:df:
3a:16:87:ab:0f:0d:48:a7:98:38:09:e1:eb:29:e5:
3b:af:04:c1:a0:8a:46:2f:c5:dc:38:b3:56:32:d0:
09:d9:be:6b:f8:cc:e2:a4:eb:fb:6d:cd:84:c9:cb:
d9:e2:85:09:83:93:84:e1:e9:25:12:af:f3:cd:24:
f9:cd:37:7c:73:13:5a:a5:87:bb:70:8e:f8:71:f7:
f4:90:e5:d8:80:a3:e6:33:4e:b5:96:3f:47:9a:ae:
e1:fc:06:b4:47:13:a9:d4:d4:77:f8:a1:f2:ce:f1:
cf:ea:af:c3:52:af:75:ec:07:88:bb:37:c3:47:c4:
c4:aa:c6:33:04:6d:4c:5e:2f:29:54:6a:ac:a9:0f:
a2:80:0c:c9:5e:61:25:b6:bc:5e:2a:fc:43:c2:a9:
22:ae:e1:f4:f8:37:21:9e:9a:66:43:e1:c9:59:4c:
73:95:32:3f:83:50:b5:31:d6:5c:31:b7:20:b6:f0:
65:74:f6:2c:bf:c6:db:bd:44:dc:d2:e9:4f:1a:7e:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:59:04:07:BD:50:65:E2:EB:D6:F4:9D:45:83:81:31:44:2A:D5:B8
X509v3 Authority Key Identifier:
keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2a:00:83:b1:4c:0c:2a:e3:f7:56:5f:c0:4b:40:ed:ef:46:
5e:a8:d2:cc:25:35:67:54:24:fa:bc:40:af:06:c5:9e:b6:5c:
b2:b3:8c:dc:df:eb:ea:11:53:3c:e9:93:5e:25:45:40:4c:2d:
c4:4d:cd:2a:3e:a8:00:a9:ed:ee:98:97:e9:c2:cd:8f:ea:8c:
62:01:fc:dd:29:e6:09:40:f7:9b:fc:14:c2:ca:ff:02:38:ba:
26:a5:cd:42:69:c3:f8:15:5d:0e:89:77:f3:94:84:d2:76:67:
7a:c7:78:b6:00:48:26:16:44:cc:90:c5:cd:b7:ff:cb:e2:39:
94:68:fb:20:4d:31:0f:9d:0e:ca:b3:47:6a:92:ce:fe:47:4a:
8a:5c:78:76:74:be:ea:34:06:17:d3:96:cc:70:94:c6:06:29:
70:13:b7:20:da:e1:22:db:10:d0:e7:e0:7b:31:9f:eb:c6:b0:
ac:da:bc:75:78:96:b7:0c:a7:cb:20:19:d3:dd:3b:98:e2:aa:
63:a5:ef:cb:af:72:6b:ad:b7:f9:dc:0e:6d:a7:d1:95:6f:8e:
11:aa:81:f4:fb:c9:22:66:2d:2d:59:d0:07:59:0f:25:ae:c7:
f3:65:31:a8:81:f1:b3:1a:19:dd:89:a0:7c:b5:a2:75:99:b2:
d2:fd:13:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:41:21 2026 by rpki-client