
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
File: hHdPRraSCgXa3UJHe6qzbucka5Q.mft (raw, json)
Hash identifier: p+7BAQ568MylpJ5b2dw2aM0/ciEqmTEORxLt3AwbFwo=
Subject key identifier: F4:FC:D9:40:25:09:4B:54:7A:DC:46:8C:5F:19:68:EC:D1:45:10:87
Authority key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
Certificate issuer: /CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
Certificate serial: 0DC0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
Manifest number: 0DB5
Signing time: Thu 16 Apr 2026 17:49:53 +0000
Manifest this update: Thu 16 Apr 2026 17:49:53 +0000
Manifest next update: Thu 23 Apr 2026 17:49:53 +0000
Files and hashes: 1: hHdPRraSCgXa3UJHe6qzbucka5Q.crl (hash: 1YXhjhl3Ttn3PFKzgkxHR0/uSxGDvMS2TmUyxU1tG5I=)
2: E727A05600FD11EB9286115AC4F9AE02.roa (hash: osTG3y7Aw7NEIaD/HGEqWnzu7+4Rus4i5AaVvHjByPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl
rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3520 (0xdc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9162, serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
Validity
Not Before: Apr 16 17:49:53 2026 GMT
Not After : Apr 23 17:49:53 2026 GMT
Subject: CN=69e12141-1a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:3c:52:7d:20:5c:56:c6:bd:22:cc:77:60:
ac:4b:88:37:a2:a2:fd:cf:bd:7d:c9:c9:bf:58:c2:
e9:00:87:25:23:a1:e8:de:32:d4:08:e1:8b:8c:91:
05:41:64:c3:bf:2f:76:8c:86:37:29:e3:e3:17:d2:
bf:dc:51:38:ed:0d:df:29:fa:4d:0e:42:4f:74:a4:
d6:3a:c6:4e:30:8b:95:7e:e2:4f:b4:99:d5:a4:15:
3a:79:2e:53:67:75:4d:c0:37:25:30:4f:3a:82:43:
e2:77:80:8d:e6:f2:72:66:f1:16:6d:a7:84:a6:9b:
6c:64:e6:a4:27:f0:74:2e:51:60:50:54:69:6d:25:
0c:31:e5:d6:b8:b3:38:05:5d:e8:9e:d5:28:ee:8d:
72:14:e9:46:56:5e:d8:55:7f:6d:13:d1:40:a0:13:
c2:73:3d:d1:8b:31:f9:da:1c:4b:22:d1:ba:b2:2d:
1c:46:26:00:22:25:ce:96:e1:3c:44:ea:80:94:ee:
47:9c:9a:1d:61:dd:d3:1b:b0:81:63:b8:67:f2:22:
cd:31:f7:98:5d:80:ea:77:36:ab:56:2a:e7:a6:a3:
8a:70:ea:a3:0e:73:88:29:da:1c:c2:d8:c2:bc:05:
69:6b:a5:0a:55:47:17:eb:13:4b:69:19:4b:5d:df:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FC:D9:40:25:09:4B:54:7A:DC:46:8C:5F:19:68:EC:D1:45:10:87
X509v3 Authority Key Identifier:
keyid:84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5d:f7:65:e8:ed:c7:77:5c:29:af:91:b7:18:04:91:4c:e8:
a4:a5:46:45:0c:0c:d3:bf:93:14:8c:c0:d4:a6:72:29:9e:87:
8f:46:d4:d6:05:9c:15:30:c2:81:1d:56:ca:6b:d8:b0:01:5c:
53:50:37:89:37:c7:6d:41:fd:e0:ba:c1:18:c8:59:c8:75:e5:
81:d0:1e:58:97:10:14:e5:ac:33:22:fb:fe:a7:ed:40:20:5d:
b1:68:bd:f2:89:d5:05:00:9d:a1:de:57:ac:45:85:84:20:8e:
64:3e:42:f6:68:ca:92:4b:90:65:67:2e:0b:fe:ad:49:9e:80:
48:40:da:a4:bb:f3:cf:58:6c:df:9b:ab:8d:bb:ab:56:f8:63:
4d:90:44:75:a5:f2:63:44:5b:1d:7b:95:d1:bf:db:fd:2f:52:
7b:72:f4:85:f9:59:54:e3:56:9a:90:5b:9c:b5:32:a4:e6:01:
0d:c9:ba:2e:a5:0e:92:a7:71:32:e9:ca:60:c9:19:6b:fd:c6:
8e:47:65:a9:43:49:55:69:61:37:f4:24:76:9d:62:d4:3f:9a:
b9:1f:85:d8:f6:b2:4c:78:5e:d1:e1:b6:82:ef:07:ff:7c:9c:
ac:37:5e:ce:21:a3:b1:76:73:73:96:7f:30:57:4f:88:57:f5:
81:e1:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:43 2026 by rpki-client