
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
File: hQh9CO2zN-4B6xruuBLL7jStjmM.mft (raw, json)
Hash identifier: idgSRUj53JdMMLsbTGlrCk9OpoPmVpF832qFxUU7sko=
Subject key identifier: 37:C8:E8:D7:30:20:B5:7C:53:74:B2:39:4E:7A:BF:EC:E8:80:A0:69
Authority key identifier: 85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63
Certificate issuer: /CN=A91DE01E/serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
Manifest number: 85
Signing time: Mon 27 Jul 2026 09:46:08 +0000
Manifest this update: Mon 27 Jul 2026 09:46:08 +0000
Manifest next update: Mon 03 Aug 2026 09:46:08 +0000
Files and hashes: 1: hQh9CO2zN-4B6xruuBLL7jStjmM.crl (hash: 5i8fMQCF9zJ1La6b4wgQO6D6GJRNLie1C7bwQ0HwsoE=)
2: F7DB315EBEC811F0A266E40FC4F9AE02.roa (hash: w+kCz29PMoE0vXbHOHzh6jQZ1Wd2peHTD++7Yo/0GCA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl
rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:46:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE01E, serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63
Validity
Not Before: Jul 27 09:46:08 2026 GMT
Not After : Aug 3 09:46:08 2026 GMT
Subject: CN=6a6728e0-d7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:4f:ef:3c:99:57:9e:11:63:f6:c6:aa:8d:
9c:70:68:59:36:38:ba:60:27:5b:4c:e9:53:d6:67:
7f:2d:10:71:88:7c:74:15:4a:0a:7c:08:02:c1:d3:
43:21:d6:8e:02:fd:3e:c4:86:3c:e4:df:3b:92:14:
73:7e:80:c9:55:8a:43:a4:b4:73:24:f6:17:fa:02:
4c:d3:e0:1c:b8:94:d7:ec:15:97:83:6f:4a:c7:8d:
8c:59:99:43:35:ed:05:2a:91:8c:88:8d:78:fb:21:
ce:17:53:d1:f8:ed:2b:e3:3a:76:4f:8f:1e:db:ed:
ca:ff:a6:30:16:11:e4:d0:ce:cf:42:63:69:93:6e:
93:4c:8c:41:dd:83:26:0b:ff:ca:a1:d4:0c:77:b8:
12:37:1e:62:a2:82:12:89:04:0d:63:b5:99:88:bd:
e6:6c:cf:c1:55:4f:7d:66:36:c7:c5:fe:11:2e:98:
08:29:82:ed:f2:3e:ed:fe:d0:32:6c:cf:68:ee:ba:
f1:3a:57:e6:d8:d7:d0:c3:22:ed:df:b6:d0:27:0b:
a2:41:06:78:60:97:76:8a:30:67:2d:5a:e4:63:9c:
78:27:88:0f:db:7d:6b:dc:74:88:3d:b8:24:c3:e5:
b7:ce:0c:91:c5:c4:3b:81:18:ba:ea:d7:ea:e2:bf:
a7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C8:E8:D7:30:20:B5:7C:53:74:B2:39:4E:7A:BF:EC:E8:80:A0:69
X509v3 Authority Key Identifier:
keyid:85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:4e:ba:4d:30:d9:1e:d2:c6:94:cb:01:83:c9:de:98:f5:b6:
87:80:44:69:2a:36:a3:09:8d:78:89:1f:66:e6:b4:f7:b4:7d:
7f:29:a1:88:cb:26:2a:49:14:ab:16:fd:80:e3:6f:3d:c4:9d:
8a:34:12:c1:81:6b:76:e2:6f:2b:68:c7:39:b8:62:4c:b7:67:
ec:75:66:5a:04:4b:d0:29:7a:1e:55:39:5d:75:e4:0b:e7:d3:
07:ca:33:ce:cc:18:16:ed:20:4d:cc:63:86:98:39:bd:77:38:
01:aa:ae:98:63:66:56:db:c7:45:84:02:6e:76:d8:f4:42:03:
ca:a3:9c:99:73:c3:ee:46:62:24:85:7a:8c:6e:28:e4:ea:42:
61:7f:3c:6d:bc:d8:bf:77:85:ab:80:5c:79:61:22:37:e1:3d:
7f:ca:79:f4:68:5d:30:d5:1f:f0:2e:b2:2b:d6:3c:fe:7c:c1:
eb:e6:bb:64:12:8f:12:1e:9d:3a:b4:95:65:f9:39:f4:64:7b:
db:d2:e3:9c:43:6b:b6:f2:4d:da:fc:81:6b:01:22:28:7a:b3:
52:98:42:fd:5a:2b:4f:f2:b6:d9:f7:3f:b8:b9:c3:cb:3a:74:
cc:c9:82:57:27:e3:ee:ec:29:10:e1:44:e5:c0:fd:0e:3a:0f:
77:a0:ef:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:44 2026 by rpki-client