
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
File: hkuImlN4cQmFJlQfDrkSVv2vp7E.mft (raw, json)
Hash identifier: dXBEoI5GjMocozTZgTiBTnuzHFcOD5mweWMcz8SoQaE=
Subject key identifier: BE:13:9B:25:BB:3C:89:15:12:F9:CB:E9:8A:FC:6A:95:21:99:5A:0B
Authority key identifier: 86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1
Certificate issuer: /CN=A91DB53B/serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
Manifest number: 72
Signing time: Mon 27 Jul 2026 10:08:18 +0000
Manifest this update: Mon 27 Jul 2026 10:08:17 +0000
Manifest next update: Mon 03 Aug 2026 10:08:17 +0000
Files and hashes: 1: hkuImlN4cQmFJlQfDrkSVv2vp7E.crl (hash: 0xMQrRQUGevsYAH/gCbCq3i5+668TZbxLYepq+VZmx4=)
2: 53F3631AE09A11F0A599D036446F56BC.roa (hash: oVM32N+EaxRSiza2FT5vk20qgpzDKgkN9n1AMpDCt+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl
rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB53B, serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
Validity
Not Before: Jul 27 10:08:17 2026 GMT
Not After : Aug 3 10:08:17 2026 GMT
Subject: CN=6a672e12-3749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:30:fa:c4:62:e6:4d:3f:16:7c:cf:5a:33:1c:
af:91:fc:e7:75:f2:37:2b:76:9c:80:77:bc:a9:9d:
29:20:08:8f:a0:93:6c:72:92:db:57:91:89:be:b2:
b4:8e:82:b1:44:2c:30:97:22:fa:94:f1:1d:67:db:
d8:f1:d1:fc:da:bf:7a:4e:d9:28:dc:9e:3b:15:ab:
40:8a:1d:54:28:7f:ad:d5:48:3e:c5:4d:74:7e:e8:
23:de:4e:52:9b:9d:79:60:32:78:5b:4d:62:01:7b:
d4:db:eb:30:4c:ac:97:b1:66:df:12:88:c6:0e:ee:
5f:96:0d:5c:53:60:31:4d:90:d9:44:5a:48:17:62:
b0:da:65:7c:03:1e:09:d4:60:05:39:33:ab:da:a8:
40:06:53:46:5d:8f:a0:0a:a1:61:5d:c7:ce:f1:d1:
dc:73:b5:e4:a8:74:9a:a8:52:40:46:25:18:51:14:
79:89:ac:13:83:f7:14:14:48:4b:e4:7c:4f:ef:52:
ad:c2:0e:99:05:e2:e1:47:f5:c7:5e:b9:7d:20:3c:
46:02:84:be:4a:bb:65:0c:fa:7b:3c:fd:5f:6d:e0:
a4:33:4f:54:2e:72:45:31:4b:fd:dd:e3:7e:7f:20:
59:bc:bd:99:4a:23:a3:68:62:15:6a:dc:71:ad:f4:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:13:9B:25:BB:3C:89:15:12:F9:CB:E9:8A:FC:6A:95:21:99:5A:0B
X509v3 Authority Key Identifier:
keyid:86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a7:6f:a5:33:04:b9:3b:78:d5:be:b7:2b:e7:58:83:2a:c4:
98:c9:43:cc:ea:dd:0b:0e:01:f7:7b:44:74:1f:40:2f:43:7d:
7f:66:94:46:94:b2:54:cb:d3:89:b3:ae:ca:06:f1:e4:c2:48:
b9:ea:37:a6:24:0e:bc:9a:f5:ff:6d:9d:03:c8:b9:66:81:d3:
b4:8c:66:a1:d9:0b:06:8c:de:a8:d2:49:22:78:7f:f1:86:57:
be:d9:40:b2:15:f5:55:e2:1e:ca:ab:7f:30:4a:e8:75:b8:34:
4d:12:b2:57:45:92:13:b6:97:2f:f7:5d:bb:0d:ff:99:eb:30:
da:70:5a:47:d7:bd:d4:3c:fa:ee:3b:fa:6a:f6:b1:b4:4c:96:
8d:57:f8:f0:08:f9:5c:01:77:d4:6e:75:06:ff:23:c8:7a:31:
91:8e:ac:79:cc:89:bf:8e:d3:be:aa:26:16:55:bf:ff:31:f2:
00:1b:4f:d1:1b:da:ac:26:ad:43:78:ff:c9:7a:21:0f:96:7d:
ab:e5:27:9d:64:79:69:7f:96:96:73:15:21:28:2e:8a:67:d0:
38:2a:b8:a7:d3:ba:69:8d:a0:b9:4d:9a:6d:a8:6e:78:09:3c:
03:06:e8:5e:01:8f:16:c0:72:a1:49:6a:80:9d:7e:75:0e:2c:
af:b7:a6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:25:23 2026 by rpki-client