
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
File: hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft (raw, json)
Hash identifier: fXxW3spnr9jgiFOHDEzFOp8BjWM85p4O4OT/QWqCOsU=
Subject key identifier: 13:F8:74:9D:29:6A:B2:29:50:F2:CA:FB:4D:5D:51:1F:C9:6D:A5:8D
Authority key identifier: 85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE
Certificate issuer: /CN=A91E5EEA/serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
Manifest number: EB
Signing time: Fri 17 Apr 2026 06:08:00 +0000
Manifest this update: Fri 17 Apr 2026 06:08:00 +0000
Manifest next update: Fri 24 Apr 2026 06:08:00 +0000
Files and hashes: 1: hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl (hash: zuIfFe4pK1DbPh3I1L8pN3+InUqwzk4TkO0NuFwV82A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl
rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5EEA, serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE
Validity
Not Before: Apr 17 06:08:00 2026 GMT
Not After : Apr 24 06:08:00 2026 GMT
Subject: CN=69e1ce40-7f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:98:87:e8:0d:3e:c3:c5:49:b6:18:3d:18:
93:c8:e1:4a:84:8a:bf:cf:e3:62:b7:5e:4e:b2:e4:
2f:42:2c:35:66:92:f0:2c:91:17:11:55:eb:63:83:
54:55:5f:98:a3:13:de:2b:4a:2f:ad:19:a7:9a:42:
cd:16:04:21:42:c5:70:5d:f7:cf:46:c5:3d:6f:ae:
99:8e:8e:5d:f4:2a:29:5c:69:58:79:58:13:8a:a2:
51:51:08:1b:5f:2c:4b:3c:6a:5e:91:9d:73:a1:bc:
b5:e6:cb:af:35:0f:d0:c5:8d:23:7f:f6:22:f8:09:
21:a3:24:69:85:bf:84:84:af:96:f9:86:2c:7f:b9:
4b:81:c2:5c:07:1f:a1:67:47:b2:9f:7a:f0:13:da:
28:23:ba:62:1d:fa:e6:64:35:3c:81:4c:76:00:0d:
89:b9:47:9d:5e:3e:cf:2d:73:44:d3:66:ed:e7:19:
3a:30:bf:a0:e4:ec:5c:a6:26:f0:3e:2f:82:c8:b6:
e6:bb:df:22:61:8c:0e:aa:09:33:a6:50:b6:76:2a:
db:ab:bf:4f:66:8a:a1:c4:95:cb:91:1a:5e:7d:7b:
29:f1:b6:9e:cc:24:7f:09:d3:34:b1:e0:63:9f:d4:
1a:46:5d:93:7f:de:3e:af:fb:3b:f6:5a:27:e0:e3:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F8:74:9D:29:6A:B2:29:50:F2:CA:FB:4D:5D:51:1F:C9:6D:A5:8D
X509v3 Authority Key Identifier:
keyid:85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:8a:6c:e7:06:5b:2c:f0:10:2c:86:ae:f1:e8:d3:2a:95:67:
3c:e4:c4:01:56:b9:1f:75:7b:29:a6:b4:69:a6:9e:36:47:5d:
81:7c:48:6b:4d:15:9a:6b:93:84:d7:d2:fd:5b:9c:50:15:5b:
43:7c:36:0b:44:50:aa:4c:35:e4:69:f5:3a:eb:3c:02:44:b9:
60:ac:db:24:b7:bc:7d:7e:1f:2b:19:ad:5c:47:63:9f:88:8c:
9f:08:47:12:a2:3c:63:ca:37:06:18:6b:c7:dc:5d:27:1a:d7:
0e:ef:81:be:22:89:05:6c:80:3c:b9:37:b4:19:13:57:9f:83:
36:28:0c:41:01:70:73:4b:26:93:2f:dd:5f:ad:b0:80:f2:36:
d9:6a:2f:b6:fd:c9:5f:01:5a:eb:b9:09:c2:d1:d2:f7:99:a5:
bd:fa:ad:85:6c:e6:74:b5:e3:32:8b:46:69:c3:1e:4b:ca:08:
e4:58:89:4d:b0:45:0d:ef:f8:77:56:8d:9d:c7:6c:6f:b2:63:
54:5c:b7:7a:7b:69:0f:8a:d3:91:7b:e0:ef:6c:69:7f:13:4f:
26:b8:d7:a9:44:dd:60:75:3b:11:dd:e2:b2:25:8f:de:3f:6e:
ed:73:d3:7a:d8:94:2e:38:a5:6e:6c:5e:57:56:d2:bc:bf:b0:
f8:85:86:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:17 2026 by rpki-client