
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
File: hsI8F7xNIO4W8JLTWiz2VU_scRk.mft (raw, json)
Hash identifier: W9dQQncXRen193pY7AGq7xZTAB89Add48HJ+owbBni0=
Subject key identifier: B5:47:23:6E:AC:2C:62:36:9A:4F:EA:C5:A4:99:80:26:7D:63:E4:D5
Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19
Certificate issuer: /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
Certificate serial: 09F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
Manifest number: 09E6
Signing time: Fri 18 Sep 2026 19:48:59 +0000
Manifest this update: Fri 18 Sep 2026 19:48:59 +0000
Manifest next update: Fri 25 Sep 2026 19:48:59 +0000
Files and hashes: 1: hsI8F7xNIO4W8JLTWiz2VU_scRk.crl (hash: Xob6UxwptA2ZLq9XL6WrZucW58s9NunT0aU4oFik2Cw=)
2: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (hash: +4O58+8Be0EvFE4iAXiTAOaPh0BL/Et1xJp3uENJQz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl
rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2545 (0x9f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1D77, serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
Validity
Not Before: Sep 18 19:48:59 2026 GMT
Not After : Sep 25 19:48:59 2026 GMT
Subject: CN=6aad95ab-e1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:4b:ef:44:fa:d3:c7:8b:f3:e8:e0:33:63:
ea:63:b4:8a:43:61:6a:2e:46:58:41:8e:e4:3e:a0:
ae:78:c1:fb:be:63:91:b4:63:75:67:20:4d:47:69:
a8:a1:d1:81:3c:4e:e1:1f:f3:c0:af:cb:69:69:b7:
b9:e4:b0:2d:21:db:2d:ea:c3:9b:ac:16:e2:ab:ff:
d6:96:42:0d:d4:86:dd:1c:b8:50:87:28:8c:08:12:
b0:30:c7:4c:12:d2:e1:c1:c7:12:08:23:3f:d0:e1:
0f:e8:39:8e:fa:a2:b1:2b:d1:70:c7:1f:55:bd:84:
9e:f5:24:57:86:ad:64:70:67:61:61:97:53:fc:2a:
d3:72:6d:11:cb:88:e7:01:19:ac:71:e0:dc:6c:9b:
77:94:6c:50:02:50:fe:0c:bc:d8:51:7e:80:d4:c9:
8d:bf:4a:16:36:97:29:c6:af:9b:f0:6f:1c:d5:22:
9a:a6:96:72:2f:a7:2d:9a:21:5d:15:0a:50:0e:76:
a5:57:cc:cf:77:10:09:28:5e:83:1d:40:fc:38:6b:
2f:a7:15:16:d1:f4:1b:0a:d8:0f:95:36:5c:ac:4c:
e2:0a:c0:0c:88:0e:c0:ad:98:cf:18:1f:61:04:e1:
65:d2:20:9c:e7:f2:3e:c2:b3:3f:a1:dd:8c:aa:4a:
2e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:47:23:6E:AC:2C:62:36:9A:4F:EA:C5:A4:99:80:26:7D:63:E4:D5
X509v3 Authority Key Identifier:
keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:23:af:51:37:43:b1:e6:eb:6f:f7:c8:8b:7c:f9:d6:d1:32:
38:08:2f:0f:1c:90:5f:37:2f:3e:fd:09:f5:85:57:92:98:fb:
0e:d8:5f:ef:c6:12:ed:8d:fd:bd:e6:be:a2:dc:8a:5d:5f:f8:
0f:14:c9:29:9c:3c:1d:b2:c9:bd:08:27:95:d0:5c:21:c6:91:
62:21:0b:56:9f:df:46:1a:44:5a:50:92:82:97:3a:9b:e5:37:
99:2d:51:6b:56:69:a6:94:c8:5b:d2:85:52:b5:bc:90:71:14:
fe:b1:a2:10:20:ea:2d:94:d4:9d:b2:cd:fe:61:d6:bf:e1:c3:
20:69:45:dc:a0:81:38:6d:0d:d6:17:05:41:71:1e:63:bf:22:
20:d2:0f:6e:ab:d6:73:96:d5:41:f5:d0:70:d7:3a:58:a1:1d:
4c:cc:0c:4d:cb:5b:60:af:d3:99:8b:3a:a9:8b:af:39:b6:ad:
01:47:9a:09:bc:fc:62:83:b6:82:fd:5d:2c:dc:b2:be:e9:a1:
57:97:4a:49:1e:6b:46:64:9b:fe:c0:3c:36:10:4d:de:66:a8:
f8:09:f1:ab:c7:24:f6:26:37:fb:b9:68:eb:57:a6:a1:cd:29:
22:18:d2:d3:4b:e2:c8:13:03:9c:d5:7c:ba:db:f3:b2:fe:03:
d4:b3:33:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:36:40 2026 by rpki-client