
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
File: hkuImlN4cQmFJlQfDrkSVv2vp7E.mft (raw, json)
Hash identifier: k14SEVtERuWUC5G9ufduHfhL1LtgU5ipNofMKU3vPeM=
Subject key identifier: D3:67:D9:37:52:63:39:15:76:C0:70:B8:67:0D:2E:4B:9F:44:0C:C5
Authority key identifier: 86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1
Certificate issuer: /CN=A91DB53B/serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
Manifest number: 94
Signing time: Fri 25 Sep 2026 07:36:41 +0000
Manifest this update: Fri 25 Sep 2026 07:36:40 +0000
Manifest next update: Fri 02 Oct 2026 07:36:40 +0000
Files and hashes: 1: hkuImlN4cQmFJlQfDrkSVv2vp7E.crl (hash: D+TaWsAhxoLwD8krxp2L4NeLCwCFey3m/tuKGadN9V4=)
2: 53F3631AE09A11F0A599D036446F56BC.roa (hash: WoFjSSb7IQkAQ4Xj41j5FesrpjNa8U4BYhsQXgjZdyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl
rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB53B, serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
Validity
Not Before: Sep 25 07:36:40 2026 GMT
Not After : Oct 2 07:36:40 2026 GMT
Subject: CN=6ab62489-7d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4a:ec:22:b0:32:07:82:38:73:7c:8c:f3:82:
a3:82:fa:d6:86:c8:ab:60:02:eb:fb:8b:4b:08:e1:
d7:6f:bd:6d:3e:c6:39:89:ae:e1:f3:d1:4f:50:cc:
27:87:a6:fd:a6:ed:ef:7f:8d:da:99:0e:52:dd:84:
88:07:1f:f4:1a:b7:53:13:2d:c9:0f:9c:4f:1c:d8:
a8:07:6c:88:0a:39:a3:fa:2b:47:1c:32:64:be:45:
26:91:b4:17:9d:ae:a7:14:04:65:23:49:d5:ba:77:
cb:1b:f5:7c:4a:72:bc:d9:b0:b6:3d:5a:4c:33:7a:
a2:cc:ba:4e:64:1a:cc:b6:0f:74:9e:f1:4f:ff:d0:
76:ef:dd:71:b3:0a:98:95:5a:82:7e:3e:6a:fe:73:
3b:2d:07:5f:7a:c5:33:c6:b7:eb:d5:c4:fe:7c:6e:
18:0e:94:84:94:d4:46:8b:89:74:69:4c:b7:b1:af:
db:7b:53:f5:5b:f8:3e:a1:2a:8e:2f:6b:15:4c:f7:
63:10:40:c9:6b:b0:3d:b3:22:ae:18:2c:ef:9e:a6:
68:87:cb:c8:42:ce:81:ae:d6:3c:5a:c1:7f:a6:77:
76:63:20:7b:45:3f:63:84:57:44:1e:19:86:ef:1e:
a2:bc:4b:32:cd:ed:b5:55:01:62:53:99:06:7e:8b:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:67:D9:37:52:63:39:15:76:C0:70:B8:67:0D:2E:4B:9F:44:0C:C5
X509v3 Authority Key Identifier:
keyid:86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ca:be:2b:c6:80:1d:2e:19:a7:71:0a:62:4d:89:8d:2d:a0:
a5:03:b1:61:bf:12:bf:b6:89:d0:df:ed:e6:56:ed:77:be:e8:
ad:af:48:f6:2e:92:2a:cf:92:7e:ac:03:b0:b8:52:a2:5a:3d:
67:2e:96:ed:22:1a:0b:2d:d3:67:be:5a:38:cf:b7:2b:84:c5:
20:dd:22:92:cc:a2:f7:d5:fb:95:7d:91:07:ac:f3:8e:aa:0f:
cc:6a:87:d6:bb:6f:c4:de:0f:4e:4d:35:fe:50:ea:23:53:24:
b2:ce:fd:5c:46:3c:ee:af:d1:12:a4:9d:42:9d:43:74:99:7a:
42:ad:fc:c5:54:96:86:12:f5:dc:35:84:a4:94:9b:5c:ea:b0:
ce:b5:16:fc:6b:91:4b:79:6f:a5:93:1b:08:8d:b8:a8:1e:32:
16:fd:91:ad:fe:cc:fd:fa:ea:04:83:57:1b:c7:62:3d:34:45:
03:f6:3b:c0:58:93:e9:da:17:3d:05:a1:a7:65:1f:68:55:f7:
ca:3d:e8:94:39:89:81:bc:10:df:e9:13:08:64:79:71:21:ce:
3b:61:14:74:91:29:50:cf:64:5f:4b:ac:20:ca:83:1b:ab:18:
ca:05:68:0a:66:23:02:3c:24:dc:59:21:da:6d:90:a8:25:78:
88:57:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:11:39 2026 by rpki-client