
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
File: h6XSzfwKU6WS2h-P8ndToSk0N_g.mft (raw, json)
Hash identifier: DvUroUCRgAes6w7G0+5zWm7vqHmFna9E3pyxcmp6A2E=
Subject key identifier: BE:09:76:22:61:29:BE:04:A0:51:AB:A6:64:CB:27:38:1A:4A:58:89
Authority key identifier: 87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
Certificate issuer: /CN=A91E1BB0/serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
Manifest number: 37
Signing time: Sun 01 Mar 2026 09:57:08 +0000
Manifest this update: Sun 01 Mar 2026 09:57:08 +0000
Manifest next update: Sun 08 Mar 2026 09:57:08 +0000
Files and hashes: 1: h6XSzfwKU6WS2h-P8ndToSk0N_g.crl (hash: o0zLpHNEX/9FnsPVvErDBAW638F9cmiW2wHhUMfg5cc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1BB0, serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Validity
Not Before: Mar 1 09:57:08 2026 GMT
Not After : Mar 8 09:57:08 2026 GMT
Subject: CN=69a40d74-95ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:08:96:39:97:34:b2:7a:0f:67:d8:3a:e2:a1:
45:51:75:6e:73:44:db:bd:45:87:50:3e:a8:2b:d9:
0d:d9:30:a3:e4:bc:4f:71:10:1a:22:2d:e3:3d:be:
fb:50:58:14:db:80:24:30:8f:16:81:f6:22:5a:7d:
a2:88:50:b5:a8:1e:9e:01:ae:12:5c:07:97:e8:48:
7a:ad:74:b6:0b:d5:c2:b1:85:8e:60:12:e5:d9:86:
d4:e3:2b:02:cc:d4:20:4e:ab:f0:b6:ad:67:55:fc:
ee:6b:a4:8c:ed:b5:3f:22:bf:39:e0:54:a9:cd:75:
63:c5:d8:aa:a1:ec:77:6a:4e:14:bf:b1:18:fa:56:
13:be:ff:66:4c:69:aa:65:f1:f1:e2:b4:c5:a9:31:
e0:16:70:91:9e:37:d1:59:d5:4c:23:29:f1:e8:44:
01:4b:f1:81:8d:78:90:f6:6a:e8:01:64:f8:82:8c:
75:a9:d3:23:12:13:b8:0c:db:ae:70:a0:31:bf:7d:
af:93:78:eb:76:8e:df:55:a5:75:6b:ad:41:1f:68:
e3:01:a5:ca:9d:cc:8d:ad:fd:df:a5:70:8f:34:59:
a3:59:49:3e:29:a0:5c:25:b8:4d:a2:8c:3c:42:ce:
5a:f1:8c:32:ad:56:33:d6:9c:86:73:7f:cf:69:9f:
52:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:09:76:22:61:29:BE:04:A0:51:AB:A6:64:CB:27:38:1A:4A:58:89
X509v3 Authority Key Identifier:
keyid:87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:49:bb:35:02:32:e4:a5:ec:0c:ef:89:ad:7c:7d:97:72:0d:
9d:4b:c0:56:25:e0:8d:fe:8a:1e:bc:49:fa:b1:7d:fc:66:81:
a6:98:d1:9e:f8:c7:4f:33:99:db:bb:4e:ca:28:ab:e2:a2:8b:
74:28:ca:f0:c2:1a:ed:de:1b:a1:17:86:61:0f:44:5e:70:67:
15:5c:32:2f:d9:64:1c:de:7f:69:27:eb:7f:17:77:38:2d:cc:
7c:6e:36:7a:6f:8e:46:d7:67:be:a3:dd:65:cb:8f:b3:3c:36:
5a:01:d2:d6:16:05:c6:d6:61:74:48:fe:75:24:62:df:a7:d4:
80:be:20:ff:6a:de:0e:21:c1:42:3c:9f:ae:bb:9c:59:1d:66:
3c:55:3d:4c:ab:5c:05:56:52:fc:62:00:54:a1:20:70:b6:fb:
c4:84:2e:94:ba:98:6d:5c:89:c8:9c:e9:ee:e0:8a:97:98:f7:
3b:5e:0f:94:90:f6:35:1c:d3:dc:ff:da:04:c1:b7:55:ff:6c:
70:88:8e:91:53:63:f8:65:cc:f0:34:50:5e:bf:8f:cf:be:b0:
43:69:f2:bc:a9:06:81:bb:92:ca:96:de:ff:90:c0:64:ec:dd:
fb:42:5c:83:69:1b:55:46:8a:cb:0e:9a:31:cc:13:3c:8a:7b:
6c:56:06:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:08 2026 by rpki-client