
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
File: hsI8F7xNIO4W8JLTWiz2VU_scRk.mft (raw, json)
Hash identifier: HKXF0Rly9N5eSpiReZ21uEcQCsF7qtecwFuIbdbiVt0=
Subject key identifier: E3:14:95:59:67:8F:5E:70:9C:26:5C:97:61:C9:F1:FF:F8:F5:0E:24
Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19
Certificate issuer: /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
Certificate serial: 099F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
Manifest number: 0995
Signing time: Thu 16 Apr 2026 19:55:03 +0000
Manifest this update: Thu 16 Apr 2026 19:55:03 +0000
Manifest next update: Thu 23 Apr 2026 19:55:03 +0000
Files and hashes: 1: hsI8F7xNIO4W8JLTWiz2VU_scRk.crl (hash: OABP5LBWc4/eWSMFigxigC5ACB+BjBMPQ4PhS8yujVA=)
2: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (hash: 5NKCQJLuqvr9nbUC17fmFGMoTVPmZp3opZKxATu37k8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl
rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2463 (0x99f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1D77, serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
Validity
Not Before: Apr 16 19:55:03 2026 GMT
Not After : Apr 23 19:55:03 2026 GMT
Subject: CN=69e13e97-d996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:40:eb:46:5e:00:13:0a:29:89:78:c5:08:1e:
24:ba:61:d9:3e:0e:c0:c0:b8:a7:69:cd:eb:ab:1d:
97:a9:31:f8:cb:5d:d5:18:fb:a5:0f:16:ba:b0:0c:
78:36:c5:b5:f4:8d:43:09:65:fc:8b:39:ac:20:ea:
61:88:18:33:c9:4e:6e:45:d5:08:9d:24:8f:f9:a4:
7d:e2:c9:b1:7e:6c:76:d0:5f:17:ae:3a:fe:b3:5c:
f8:a7:a8:42:8a:c2:c5:c6:cf:b5:aa:28:35:1e:d4:
b4:f9:63:21:0d:89:51:c2:52:3c:7a:f5:79:d1:40:
18:f4:9d:01:29:11:60:c3:08:91:a7:45:c1:33:74:
34:be:4c:99:d5:56:12:f3:dd:ff:3c:b3:c5:c9:19:
dd:00:bc:e9:92:a0:98:07:a6:dc:74:0b:4b:88:c1:
f1:25:0e:fb:47:2d:67:38:47:60:a0:3a:26:9c:f6:
fd:a8:cf:84:07:af:d6:01:e5:be:10:02:c4:f3:e9:
1f:36:2e:7c:ff:63:ed:6c:21:98:a3:99:f8:de:b7:
ce:36:d8:ca:65:7b:f6:9d:78:77:c7:c1:10:b9:29:
e6:7d:c6:8f:5a:91:52:c2:96:d8:8a:0f:d1:89:f0:
e6:49:f3:1f:29:a3:55:3a:79:2c:42:4b:fc:e4:62:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:14:95:59:67:8F:5E:70:9C:26:5C:97:61:C9:F1:FF:F8:F5:0E:24
X509v3 Authority Key Identifier:
keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:19:85:c5:e3:81:99:62:f8:45:46:a7:0d:ae:d7:46:95:8b:
99:bd:b5:0b:55:b9:85:9d:dc:2a:2f:30:ba:2b:99:7f:48:3e:
0d:9d:d7:95:b0:89:16:fe:f8:66:0a:f6:84:f1:62:5a:bf:f3:
6d:73:a4:a8:0e:c5:13:55:da:de:12:73:43:9a:96:43:fa:dc:
5f:23:73:35:48:ef:1f:fa:71:39:af:ba:83:eb:5a:07:8b:5c:
d2:08:5b:93:a2:0e:73:51:ce:0d:a1:41:71:7d:27:a2:79:b7:
8b:90:e6:a9:64:ad:1b:69:4b:58:86:df:27:f4:46:e8:b8:85:
2d:f6:1a:01:1e:fc:c1:9d:da:eb:3c:bb:5f:41:0d:88:39:07:
bf:f6:9f:9d:d1:9e:49:d9:fc:98:05:7d:a8:35:3c:7e:9a:ea:
f6:2b:99:0e:f7:c0:77:de:3e:7b:0c:ec:0a:34:84:95:8f:f8:
bf:08:ad:59:7c:87:3b:5c:45:b8:49:68:1d:35:05:05:1f:8f:
88:53:73:97:68:22:bc:13:94:c6:74:23:bc:55:1a:bc:8d:76:
15:33:a7:68:fd:f0:4e:15:e1:ca:ff:cc:e8:20:cd:a9:26:9b:
b4:5b:4d:59:88:33:b3:a0:fa:8d:64:2d:8b:9e:f9:f4:fc:cf:
bd:0e:14:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFENzcxMTAvBgNVBAUTKDg2QzIzQzE3QkM0RDIwRUUxNkYwOTJEMzVBMkNGNjU1
NEZFQzcxMTkwHhcNMjYwNDE2MTk1NTAzWhcNMjYwNDIzMTk1NTAzWjAYMRYwFAYD
VQQDEw02OWUxM2U5Ny1kOTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1kDrRl4AEwopiXjFCB4kumHZPg7AwLinac3rqx2XqTH4y13VGPulDxa6sAx4
NsW19I1DCWX8izmsIOphiBgzyU5uRdUInSSP+aR94smxfmx20F8Xrjr+s1z4p6hC
isLFxs+1qig1HtS0+WMhDYlRwlI8evV50UAY9J0BKRFgwwiRp0XBM3Q0vkyZ1VYS
893/PLPFyRndALzpkqCYB6bcdAtLiMHxJQ77Ry1nOEdgoDomnPb9qM+EB6/WAeW+
EALE8+kfNi58/2PtbCGYo5n43rfONtjKZXv2nXh3x8EQuSnmfcaPWpFSwpbYig/R
ifDmSfMfKaNVOnksQkv85GKmEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOMUlVln
j15wnCZcl2HJ8f/49Q4kMB8GA1UdIwQYMBaAFIbCPBe8TSDuFvCS01os9lVP7HEZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ3Ny80QjY0MjdFMkFC
RjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklPNFc4SkxUV2l6MlZVX3Nj
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hzSThGN3hOSU80VzhKTFRXaXoyVlVfc2NSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUQ3Ny80QjY0MjdFMkFCRjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklP
NFc4SkxUV2l6MlZVX3NjUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARxmFxeOBmWL4RUanDa7XRpWLmb21C1W5hZ3cKi8wuiuZf0g+DZ3XlbCJFv74
Zgr2hPFiWr/zbXOkqA7FE1Xa3hJzQ5qWQ/rcXyNzNUjvH/pxOa+6g+taB4tc0ghb
k6IOc1HODaFBcX0nonm3i5DmqWStG2lLWIbfJ/RG6LiFLfYaAR78wZ3a6zy7X0EN
iDkHv/afndGeSdn8mAV9qDU8fprq9iuZDvfAd94+ewzsCjSElY/4vwitWXyHO1xF
uEloHTUFBR+PiFNzl2givBOUxnQjvFUavI12FTOnaP3wThXhyv/M6CDNqSabtFtN
WYgzs6D6jWQti5759PzPvQ4UDw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:14 2026 by rpki-client