
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
File: hkuImlN4cQmFJlQfDrkSVv2vp7E.mft (raw, json)
Hash identifier: HpZeHM0AULLVMv3OhbxNlwITcNfXw+HQ0LQmxPCYxrw=
Subject key identifier: 04:9A:4E:5A:17:4F:88:02:91:AE:FF:D6:7F:42:31:2A:F2:4D:EB:E4
Authority key identifier: 86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1
Certificate issuer: /CN=A91DB53B/serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
Manifest number: 5B
Signing time: Thu 11 Jun 2026 10:28:40 +0000
Manifest this update: Thu 11 Jun 2026 10:28:40 +0000
Manifest next update: Thu 18 Jun 2026 10:28:40 +0000
Files and hashes: 1: hkuImlN4cQmFJlQfDrkSVv2vp7E.crl (hash: rKH9x3i1tib6B294BPKHNiH5VLGC7tRW1mtrOimU9Q0=)
2: 53F3631AE09A11F0A599D036446F56BC.roa (hash: oVM32N+EaxRSiza2FT5vk20qgpzDKgkN9n1AMpDCt+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl
rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB53B, serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
Validity
Not Before: Jun 11 10:28:40 2026 GMT
Not After : Jun 18 10:28:40 2026 GMT
Subject: CN=6a2a8dd8-ab5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:f1:e6:88:d8:12:3d:c9:03:34:7b:bd:f8:
13:97:80:48:dc:58:d9:cb:95:b9:32:11:2a:fb:2f:
3d:f6:62:72:36:21:15:d9:3d:b0:a1:fa:2b:52:f3:
5b:74:72:28:86:a3:e8:a1:32:6d:66:49:92:c0:1e:
59:1d:a7:3b:0e:3f:c0:09:e5:6c:08:7b:09:16:7c:
68:a1:0a:77:77:6d:13:11:c5:d3:69:f8:3e:24:0d:
f1:fb:f9:c2:2e:26:53:29:5d:ed:46:7b:da:6a:14:
5a:5d:47:c8:56:2c:12:7e:32:84:0e:93:0f:c0:ef:
d8:61:a9:47:94:dc:91:8d:8a:d1:61:c0:bf:18:89:
d9:28:5c:0d:d7:ee:dd:da:29:b3:a5:d6:2a:91:ad:
4e:61:e6:0e:7c:65:9e:2b:cb:45:fb:24:97:8b:8f:
63:f8:c2:37:02:f8:ba:5a:d7:4b:93:71:30:ad:a0:
07:86:ff:39:3c:d7:f8:20:96:9c:2c:dd:ad:5c:b4:
30:81:99:df:f6:a8:88:4f:58:0c:21:3f:09:6f:2b:
2f:2d:88:73:00:35:6a:4e:b2:88:86:c8:f5:77:d8:
61:89:f1:a0:b9:77:f2:2d:ae:e4:a6:55:6f:8f:56:
2d:93:8e:91:fa:c1:d3:d3:22:bf:50:17:98:c7:bc:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9A:4E:5A:17:4F:88:02:91:AE:FF:D6:7F:42:31:2A:F2:4D:EB:E4
X509v3 Authority Key Identifier:
keyid:86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ce:1f:82:6a:22:30:98:0d:63:99:3e:e8:26:3b:3e:c8:d8:
15:c6:9f:24:d4:0d:dd:75:d1:4e:d8:48:a6:5c:e0:23:2e:75:
d5:cf:4e:eb:09:89:5a:4d:a5:bd:3f:95:e2:7a:33:30:b5:0b:
12:b5:c2:19:39:40:42:3f:ae:63:45:ea:71:16:19:03:62:4e:
46:0b:83:a1:80:77:05:c5:3b:e5:51:ea:b3:40:92:c0:29:80:
f0:82:a0:2c:96:5e:33:bb:5b:23:51:e6:c7:90:25:5a:f8:79:
dc:12:db:14:73:d7:18:12:01:8a:73:33:89:62:19:0e:e3:5f:
34:61:26:fb:e1:e5:3c:70:4b:30:0b:9d:9c:12:4d:d6:c3:62:
d7:99:c5:7d:7b:fc:a9:2c:5d:2f:e0:e2:d1:e6:ce:c9:03:2f:
bc:49:02:03:9b:11:77:66:1b:29:b9:18:73:95:e7:47:40:48:
4d:85:fd:d8:04:4b:f7:19:17:02:99:3d:fe:5c:cd:85:d4:d3:
6a:99:52:a7:c2:74:c4:de:c4:ba:e4:6e:b1:16:50:23:b7:82:
88:fc:76:a2:01:fd:91:8a:17:b2:50:06:8c:4e:2c:20:66:d9:
18:c9:a1:b3:16:8c:12:0b:d6:39:54:42:ea:f9:ee:3a:33:64:
5e:f5:84:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:25 2026 by rpki-client