
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File: hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier: rXha+BDtxgVDKzBPsSqh/Vea/8o0/AvUbk6cefEfLHo=
Subject key identifier: 8C:1C:F6:2B:65:50:C7:09:B3:86:51:5D:BA:F3:91:37:F8:EF:D3:12
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer: /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial: 076C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number: 0754
Signing time: Mon 02 Mar 2026 00:02:49 +0000
Manifest this update: Mon 02 Mar 2026 00:02:48 +0000
Manifest next update: Mon 09 Mar 2026 00:02:48 +0000
Files and hashes: 1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: C1IzpCRIg/YEx4Giglt6z1VPmWagqyN/GYoMTbCYH/4=)
2: 06E6952AAB4211F08DC86D66C4F9AE02.roa (hash: Ac5D1VocSkIxBJU8V/4LRUmQRbTw+flgUSB3ZRW3o8U=)
3: 8A5AA9BAAB4111F09E531265C4F9AE02.roa (hash: uIB/iGD9NSR9Z5Dx/6iTyvp39u2y6pd5/0tMf3x9ZRE=)
4: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: kobGUu1ByDri4VT+YEcCMbSP5W+2KrXkfmSpExJ4PNQ=)
5: E658D57AAB4111F09E35ED65C4F9AE02.roa (hash: PEXjSnRuyjRlPGGQw5DqvBSsiQtAtGebvla4PdBpVog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1900 (0x76c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Validity
Not Before: Mar 2 00:02:48 2026 GMT
Not After : Mar 9 00:02:48 2026 GMT
Subject: CN=69a4d3a8-2dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ff:c8:26:e5:39:92:9d:7a:3a:f7:88:8a:e1:
dd:af:b1:64:46:36:d9:46:fc:a0:95:7a:6d:19:3b:
9b:ef:07:cf:4a:7b:90:91:2a:92:19:85:d0:e5:a0:
ca:fe:fa:55:3a:0e:8c:61:e7:33:6a:99:d4:e0:60:
fd:4f:f4:29:4a:62:33:0f:da:82:25:a6:10:d3:61:
73:d0:11:17:2f:4a:36:2b:37:07:04:6c:3e:f1:52:
92:53:a6:dd:e7:2e:5a:3e:e8:d7:9f:66:27:91:66:
f0:49:b0:06:6c:0d:a5:f0:10:ea:92:70:2c:f4:85:
eb:7f:fa:eb:ad:a9:d7:01:af:a6:a4:5c:5c:4b:a6:
95:96:56:6f:91:ff:38:d4:87:5d:81:56:4b:9e:d6:
b7:38:7c:b8:d6:ca:7b:ff:5d:27:e0:2c:fd:93:0e:
ea:27:97:2a:72:6b:10:ad:75:20:20:73:d4:bf:c7:
35:2f:ab:ae:36:db:20:a0:55:93:af:b1:53:32:ac:
ba:e4:d9:26:77:28:68:e7:e0:9d:8d:83:1f:cd:fb:
0c:23:10:5d:63:88:8a:d5:e1:a9:80:2f:d0:ad:44:
ed:30:e6:74:48:ca:84:ab:0e:e7:b8:98:d6:98:2c:
26:6b:f0:cd:93:ed:55:98:b0:43:59:42:bd:36:c0:
b5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1C:F6:2B:65:50:C7:09:B3:86:51:5D:BA:F3:91:37:F8:EF:D3:12
X509v3 Authority Key Identifier:
keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:63:38:c5:a1:14:34:8f:08:f1:21:db:83:e1:cd:ac:d9:e4:
c3:56:e0:06:85:dc:0a:e2:27:c5:41:19:27:6e:b7:d3:e9:a4:
b1:db:0d:56:2a:20:cd:dd:2c:b6:c6:e1:4b:dc:e9:be:8d:c9:
aa:17:45:99:a2:8f:f7:b5:2e:99:c0:40:88:b9:e1:08:da:5e:
3d:b7:ea:31:4d:84:1a:1e:f6:3d:9c:1e:7b:fd:fc:b2:06:5e:
96:c9:07:90:a8:b9:03:46:0a:97:4e:6c:78:ef:60:b6:7a:f9:
16:cd:51:2f:8d:f6:bf:de:e3:17:1c:ac:b5:f8:69:e7:0a:c0:
5b:4c:05:5f:42:c7:73:f4:85:80:e7:dc:26:83:a4:89:5f:f5:
a8:05:27:76:38:65:47:2e:1f:20:f0:7b:2c:74:6d:88:9b:ae:
63:8e:b8:61:c6:67:d1:d1:50:50:e2:ab:01:7d:1a:7e:ab:f3:
0c:de:c6:ee:ec:a8:35:47:35:51:fb:a2:7c:d0:b4:31:5d:d1:
dd:2e:29:c2:72:5b:11:e8:21:9a:4d:0a:39:f0:dc:02:0f:82:
00:e0:23:9c:ab:f1:6e:78:7c:f1:07:35:9b:20:dc:a7:55:58:
1b:36:6f:46:fe:7c:e6:53:52:89:4a:dc:1a:98:80:7e:de:60:
f6:45:ee:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:27 2026 by rpki-client