
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
File: hIP9VFfRHgUTVSER9bovNxLphfc.mft (raw, json)
Hash identifier: 90mJAgWIHQDWpshbZ/DWq4h/ygfBQ541BRsnzIxe3IY=
Subject key identifier: 6D:42:6B:25:08:2A:45:64:4D:7D:B3:70:5B:1B:15:FB:09:53:1D:48
Authority key identifier: 84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7
Certificate issuer: /CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
Certificate serial: 0284
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
Manifest number: 027B
Signing time: Sun 01 Mar 2026 02:30:13 +0000
Manifest this update: Sun 01 Mar 2026 02:30:12 +0000
Manifest next update: Sun 08 Mar 2026 02:30:12 +0000
Files and hashes: 1: hIP9VFfRHgUTVSER9bovNxLphfc.crl (hash: 7xN1nXywArk0XtrFSTOCnKdX4yRQMqQ79E+b34R8VcA=)
2: 153EBE3ADEF711EF84C57421C4F9AE02.roa (hash: d2fZwjk/kReWJf7o+GQOO5RAjKTwIQ1B0ld4lPrAcBY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl
rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC9C4, serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
Validity
Not Before: Mar 1 02:30:12 2026 GMT
Not After : Mar 8 02:30:12 2026 GMT
Subject: CN=69a3a4b5-85f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:0e:d1:00:1b:71:35:28:e8:e5:30:cb:d3:
d6:a4:30:39:41:c8:4f:60:62:94:4b:5c:f9:b1:84:
64:c3:55:06:28:e3:45:ec:2f:6c:b2:d1:92:4a:a1:
66:cf:97:28:90:80:ec:a4:b6:cf:9a:18:9b:2b:d9:
37:0d:3c:bd:1f:eb:08:75:03:c9:33:2d:7b:35:65:
ba:a1:55:5b:ae:ce:1c:bd:0e:36:b8:42:d3:24:8f:
02:b2:b7:ac:ee:48:2b:29:d2:0e:d5:d9:d0:86:11:
84:14:33:a3:d5:7b:c6:8b:f0:0f:4e:14:89:0b:50:
34:61:25:5d:6f:fd:29:42:46:89:94:52:96:1b:ce:
a6:a7:26:4b:97:eb:f6:16:cb:de:52:c4:4b:f6:f5:
04:d5:d1:1b:6d:46:89:b7:53:8b:d3:36:2d:36:ab:
fb:dd:4f:f0:f1:10:fb:bf:c1:33:67:e7:14:8b:23:
af:f5:c7:8d:89:81:01:0c:90:ce:f7:12:24:e9:3b:
2f:f7:7b:4a:04:dc:82:08:3e:38:b7:17:fa:cc:fc:
ac:f8:18:ca:84:1e:57:2d:a8:0f:88:45:28:db:10:
7a:f5:f6:5b:52:43:94:01:47:dd:61:43:e6:36:89:
e0:1b:cc:66:d3:5f:63:e2:20:58:bf:38:0a:d1:dd:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:42:6B:25:08:2A:45:64:4D:7D:B3:70:5B:1B:15:FB:09:53:1D:48
X509v3 Authority Key Identifier:
keyid:84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:f6:91:bc:bd:38:e4:3f:f2:4c:22:e7:c8:03:6e:78:b6:da:
f7:95:9e:28:b1:43:cd:ab:b8:3d:65:21:71:08:8c:0d:ea:49:
dc:39:e0:26:61:56:f7:e1:24:e4:b6:77:53:1a:e0:4f:a8:33:
25:8b:aa:e2:0b:a9:49:00:8d:9c:f5:a8:d3:1d:06:1b:a7:e4:
67:31:0a:42:77:f1:63:40:63:6a:3a:0f:bf:b0:59:e4:7b:01:
86:26:f3:3c:24:df:ae:8e:73:82:af:22:99:7a:3e:80:49:cf:
37:1c:79:86:82:93:43:61:f5:44:fb:9f:38:86:ba:43:b0:39:
78:f5:bc:ae:03:3b:37:8a:5d:08:b2:7b:8b:65:06:be:11:47:
94:81:ed:2e:57:98:7c:0e:e2:8c:c5:a1:36:d8:79:78:98:05:
7d:da:43:bd:b4:52:86:e5:9c:b3:07:13:86:32:5e:4e:25:b9:
4a:6b:3f:98:b2:e6:1e:36:85:a8:01:56:5c:c9:80:c7:1c:87:
e9:6b:95:cb:ba:0b:e6:95:39:ac:0d:2f:bc:34:5e:79:22:f4:
3b:a8:e0:63:ff:61:ba:92:18:f5:f7:36:c0:3b:c1:37:e3:be:
a5:10:67:0b:b7:57:22:b0:62:99:bf:c0:6a:32:5c:fe:23:ca:
d4:99:97:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:48 2026 by rpki-client