
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
File: hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft (raw, json)
Hash identifier: nSPg26WnHhJJX/Aq/slVq5UxJoMJ8mUxnUMLlv8+qUU=
Subject key identifier: A8:7F:08:4B:E5:7E:2A:C4:C8:22:D9:D7:FD:BA:FB:B3:35:62:89:06
Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78
Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
Manifest number: 015F
Signing time: Sun 01 Mar 2026 05:59:28 +0000
Manifest this update: Sun 01 Mar 2026 05:59:27 +0000
Manifest next update: Sun 08 Mar 2026 05:59:27 +0000
Files and hashes: 1: hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl (hash: MrmyqxYseYvYN3fvIpDcl+ZgGcqSZOaSKgx8vwnSzL8=)
2: 61A59876012A11EFB75C350FC4F9AE02.roa (hash: WAA42IzaA5d5k/IY8QrF44XXEAbChLYtWjBVuWwrVBk=)
3: 612992C6012A11EFB75C350FC4F9AE02.roa (hash: FmAu1+agMeZ0VUhV+3w3+uo72UBKyPI2du/6wqmQecc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl
rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D894F, serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78
Validity
Not Before: Mar 1 05:59:27 2026 GMT
Not After : Mar 8 05:59:27 2026 GMT
Subject: CN=69a3d5c0-39e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:8b:6d:47:a5:d2:1e:33:eb:69:31:7f:79:
23:00:a8:ae:f2:d2:28:0f:8d:df:a9:f1:d1:ee:a6:
90:69:3c:79:83:84:15:f8:d0:9e:88:0f:3d:41:5a:
28:e8:af:57:33:2e:e8:db:69:de:9e:6e:1b:c2:57:
0e:f1:fd:c2:a1:dd:8f:af:ce:8a:d7:3d:1f:ae:f1:
c1:11:fe:d8:d8:2f:67:cb:e7:6e:3a:34:93:12:06:
e2:35:be:f9:6e:27:26:c0:87:9a:4a:ef:5b:c1:98:
72:ae:0c:d7:3d:00:61:83:bd:4f:25:e2:1f:2b:0e:
25:b5:c4:b3:14:bd:06:ed:81:7d:61:81:a9:ca:1a:
44:30:25:ee:84:d8:7d:14:2a:e1:4d:48:bd:8e:62:
77:b9:aa:88:86:f0:e8:5a:a1:48:90:35:0e:7b:75:
83:d8:79:bc:dc:df:64:fa:9e:05:a6:eb:b7:ef:2b:
95:db:5c:28:2c:9d:04:98:c8:89:11:1d:8f:3f:63:
41:58:e1:0f:57:42:51:84:44:ec:6e:5f:41:13:b4:
9f:e6:48:8c:8f:00:2c:b4:bf:da:9b:fe:08:17:89:
94:99:d2:76:a6:9b:60:17:1b:72:e0:c9:f4:70:ba:
b4:93:cf:03:62:07:9f:3f:66:1b:b0:b0:e4:5b:a6:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7F:08:4B:E5:7E:2A:C4:C8:22:D9:D7:FD:BA:FB:B3:35:62:89:06
X509v3 Authority Key Identifier:
keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bd:2f:57:b7:b1:4f:6d:1a:ee:9a:8d:a8:92:7c:fd:83:37:
5b:56:c9:6b:ad:74:53:29:9a:88:6c:5f:af:f8:fd:3c:e5:64:
5b:fa:a6:61:fc:f0:47:cf:1f:5f:64:30:a7:91:cd:91:84:6e:
44:a7:c1:6e:43:b2:4d:d3:85:96:8b:18:25:3a:72:84:11:21:
11:86:4e:19:17:de:29:fc:6f:91:80:c9:d3:a9:23:88:8a:f5:
96:e3:ad:cd:96:96:eb:e6:a2:24:49:63:b6:d8:bb:a0:2e:d9:
06:32:98:78:a8:98:d3:8f:d2:0c:54:98:75:09:11:d6:d4:00:
63:fb:ec:e7:2f:18:f8:5e:e1:82:d8:dc:43:19:f0:4d:81:74:
f5:db:4e:e7:9f:2c:72:8a:fa:f2:28:b9:ff:f4:99:4f:61:d2:
75:94:49:43:1b:d3:db:6d:f2:16:ca:47:91:76:b6:31:a9:d8:
a5:83:6e:06:46:51:34:64:42:4c:bd:52:86:85:5a:67:a0:c1:
06:9c:cf:04:82:62:f0:89:cc:2e:a4:c2:0d:ee:a0:58:1b:7a:
93:e4:e7:0b:ec:d1:6e:54:f0:9f:c7:80:f0:a9:0c:ef:b2:d5:
4d:fc:15:27:fc:15:1f:4d:3a:ba:1f:b3:43:be:93:88:aa:f7:
03:2b:8b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:16 2026 by rpki-client