
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
File: hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft (raw, json)
Hash identifier: L/JnUIN3YsdPvNUjwknPNK5dhWcaYtN8RsKgiluNicY=
Subject key identifier: D5:27:87:01:D1:5A:B4:41:AE:4F:F0:28:B0:E6:72:00:52:69:E3:1B
Authority key identifier: 85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE
Certificate issuer: /CN=A91E5EEA/serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
Manifest number: D2
Signing time: Sun 01 Mar 2026 07:54:08 +0000
Manifest this update: Sun 01 Mar 2026 07:54:08 +0000
Manifest next update: Sun 08 Mar 2026 07:54:08 +0000
Files and hashes: 1: hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl (hash: N0BHBjYeXys9bu+mTbU51Vpc4AKg+oz+UceGDyNGldI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl
rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:54:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5EEA, serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE
Validity
Not Before: Mar 1 07:54:08 2026 GMT
Not After : Mar 8 07:54:08 2026 GMT
Subject: CN=69a3f0a0-ec1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:e3:90:07:91:0b:70:f9:f2:96:ce:a0:12:
91:c4:18:00:41:22:f1:14:b1:92:67:d7:4b:10:90:
f8:a0:62:fa:75:2e:ab:6b:c0:19:fe:5a:66:e8:df:
92:07:02:00:c9:50:5d:68:79:2e:83:a6:ff:f9:97:
87:27:80:51:ae:e6:20:07:f1:26:a0:db:ce:c1:74:
9f:46:25:db:b1:1d:f0:4a:1a:0e:b8:34:de:11:ec:
99:3f:5f:97:29:ad:76:28:26:e2:15:77:47:bf:bb:
79:8f:57:a8:c5:9b:16:18:66:c2:58:07:29:e2:5f:
d8:5f:5d:da:44:b5:fa:c0:ce:09:14:39:4f:24:a6:
e3:67:58:8f:69:57:0f:42:e1:61:52:a2:2b:3f:31:
b8:7d:85:ad:9a:ac:d5:88:fe:b7:24:42:fc:f4:96:
0e:75:12:44:1c:f1:b3:09:f9:76:db:32:b2:1a:1d:
0a:5f:1e:98:84:f1:99:58:11:bb:c2:87:2d:76:f8:
08:93:a0:ba:73:ef:df:90:a2:21:14:6f:88:8e:c5:
78:f9:71:bb:62:0b:64:2f:cb:77:5a:b0:2a:bb:46:
2d:a0:e5:3d:5f:2c:7d:7e:31:a8:ca:38:27:39:78:
50:29:ca:fb:d9:cd:ad:ac:73:94:5b:d2:83:cf:73:
de:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:27:87:01:D1:5A:B4:41:AE:4F:F0:28:B0:E6:72:00:52:69:E3:1B
X509v3 Authority Key Identifier:
keyid:85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2a:a1:46:62:74:cd:64:29:a7:f2:39:86:e4:14:3b:41:cc:
b8:eb:83:f1:96:ba:d0:86:f9:97:97:c6:4f:e3:61:b9:11:2b:
5c:be:67:a7:a3:5b:cf:0e:6f:c9:75:58:d7:50:70:a2:de:ad:
95:27:13:29:e8:32:49:8b:dd:e7:29:f5:f5:4c:cb:bf:57:1e:
d4:f9:7e:4a:76:9a:30:c6:50:d4:1b:bc:f5:a9:94:6f:f0:b0:
3a:e3:57:8a:0f:15:ff:94:17:fd:c2:36:0f:29:32:41:02:95:
ed:0c:b3:43:8f:3a:4e:2e:45:4f:7f:c0:7f:3e:b4:ac:06:08:
e3:87:d9:d8:49:e9:fc:d5:3e:ee:f1:8f:76:ac:34:94:28:5e:
39:c7:c6:e5:f3:90:24:47:ce:fb:71:73:e8:51:eb:4e:97:1f:
85:fb:8d:fe:fc:e9:5b:7d:5f:26:cb:63:43:bb:e5:5c:6c:3f:
2b:ff:e6:2d:65:1b:9a:91:e0:02:96:31:69:99:3e:bc:83:24:
5e:85:55:32:3a:43:c6:f5:f7:8e:2c:92:67:1c:15:33:d4:91:
85:93:3c:8a:63:b9:9c:d4:74:04:a7:9a:63:70:5f:04:4b:1d:
1e:52:71:c2:2e:f9:79:73:85:d0:bd:87:fc:07:6b:67:6c:b4:
22:d2:67:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:41 2026 by rpki-client