
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
File: hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft (raw, json)
Hash identifier: beFHrzZs7rdRfucgKVQsyDffrrQUY/5kWxpXGkiXUQU=
Subject key identifier: 4C:44:BC:41:04:D4:07:C7:76:23:8A:30:57:E6:FF:AA:08:CC:41:43
Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78
Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
Manifest number: 0179
Signing time: Fri 17 Apr 2026 04:23:58 +0000
Manifest this update: Fri 17 Apr 2026 04:23:57 +0000
Manifest next update: Fri 24 Apr 2026 04:23:57 +0000
Files and hashes: 1: hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl (hash: TbHMVG8Qk2McYrffhhyVvJh1NdYMFjZDExg8CtvTlhs=)
2: 612992C6012A11EFB75C350FC4F9AE02.roa (hash: c1ZdxCR5jy+2u4016P6OO4rIgFkE6Ob/aP92Gxo47WA=)
3: 61A59876012A11EFB75C350FC4F9AE02.roa (hash: z1kC7ixKWc94mNbOx5wcAEuMc543/xXPe6FxxWEqPQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl
rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D894F, serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78
Validity
Not Before: Apr 17 04:23:57 2026 GMT
Not After : Apr 24 04:23:57 2026 GMT
Subject: CN=69e1b5de-9526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:b1:40:13:75:0e:b7:10:d5:44:a9:0b:df:
8e:87:ed:08:7e:e6:db:2b:ba:d1:ea:23:2a:73:7b:
b6:dc:ce:a9:a3:f1:e3:e6:e1:6f:19:4c:a5:a3:5c:
37:d0:c6:e6:ab:d4:ec:92:91:63:6c:84:a7:40:60:
fd:86:c3:e3:2d:ac:3b:d8:d0:ee:d6:c6:3a:4d:e6:
4c:e5:51:13:76:78:cd:93:4a:07:99:39:89:a6:59:
7a:6b:42:cc:b0:8e:09:f0:ff:70:6f:07:84:e8:30:
cd:8f:6a:49:84:36:0e:9f:11:c4:0f:fb:d0:4d:6c:
82:87:9d:39:3b:c3:77:e7:11:52:17:dc:1b:c0:f6:
81:8c:9d:22:e1:f3:68:69:22:32:bf:60:7a:cc:4f:
4c:f9:c4:4f:3e:d4:24:2a:38:84:19:54:65:1f:3c:
11:a3:ed:2c:0c:6b:dd:70:8a:97:a2:5f:54:7a:18:
be:21:57:3e:99:c9:cb:55:43:68:f2:e1:05:c7:be:
9f:7e:3a:62:b2:33:66:3f:59:d5:be:50:85:bb:b9:
40:5f:8a:3a:25:2c:48:06:65:83:18:36:54:0a:75:
4c:6f:f6:ea:4f:79:a7:43:29:ea:34:2b:0b:f7:78:
a6:b6:aa:38:ce:2f:4c:48:96:3d:97:cf:4d:81:f7:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:44:BC:41:04:D4:07:C7:76:23:8A:30:57:E6:FF:AA:08:CC:41:43
X509v3 Authority Key Identifier:
keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:00:57:f9:1b:90:08:3d:bb:f9:63:66:40:d9:50:a3:ad:5c:
6c:ae:a1:95:e4:fc:58:e8:df:83:1f:85:d4:43:38:97:c7:63:
92:a4:8c:74:38:89:9f:18:a4:62:2f:62:4b:93:7f:13:71:c8:
16:6f:58:e8:e1:58:f0:ec:80:be:a2:60:c1:ca:16:23:d1:33:
1e:ae:d9:e8:f6:2b:91:76:a1:67:32:79:3a:72:50:1c:6a:0e:
30:e5:4a:19:1f:03:ba:47:7f:62:ed:56:38:b9:a0:81:e3:d3:
a9:c3:bf:23:98:fa:36:2f:0d:b9:11:6f:5a:2d:58:51:6a:6a:
c5:50:ef:7e:f5:71:35:d3:61:42:59:da:bc:96:dd:dc:a9:c4:
94:98:19:90:d5:4c:eb:b2:6b:8d:bb:94:02:81:88:cc:75:4b:
ee:0a:86:60:b1:85:11:8d:4d:24:58:2d:37:fb:79:31:9d:8a:
10:55:51:b9:67:5f:39:3d:15:aa:40:2c:ea:2e:b2:3c:6e:41:
5c:35:8c:0e:20:9b:8a:1b:e0:83:c8:08:85:62:49:50:ee:dc:
72:9b:cb:2e:02:ae:55:86:54:73:8d:a9:b5:43:75:28:2a:15:
87:ba:b4:a0:18:a2:5f:92:c8:7f:d6:28:50:62:84:41:33:5d:
32:13:a4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:45:53 2026 by rpki-client