
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json)
Hash identifier: NC5xTgDNIHihJ5f3colXxEnsV1HOgsstvtOk5x5UW3I=
Subject key identifier: EF:21:AB:B3:8C:6E:65:04:2C:16:BA:DB:0A:0F:A5:D4:E7:C9:41:D5
Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
Manifest number: 0115
Signing time: Sat 13 Jun 2026 06:07:40 +0000
Manifest this update: Sat 13 Jun 2026 06:07:40 +0000
Manifest next update: Sat 20 Jun 2026 06:07:40 +0000
Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: y0cjznk2qoV76K5LYOtgpDVyahlm7/OKWJoavOqcCXk=)
2: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: DfxQYn473L3GRcLQOcasHyVtEcw9/bAiZQ1Qjo4k8zI=)
3: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: QhYXroPd+KBbNk/Tc/bCNExY+7W0cu8INv3BcwAJYmQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Validity
Not Before: Jun 13 06:07:40 2026 GMT
Not After : Jun 20 06:07:40 2026 GMT
Subject: CN=6a2cf3ac-8f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:fb:2a:e8:9a:f4:12:4a:cd:f6:c7:2e:47:
ac:41:45:4d:fe:09:eb:e6:17:83:9f:4e:8c:a6:77:
eb:76:ad:64:bc:8c:ff:a5:cd:73:4e:f3:37:35:41:
17:85:bc:61:b3:0e:81:d0:9b:69:ac:ec:b2:2f:8e:
9f:60:69:e2:06:de:d3:6e:32:7e:cd:ee:b5:e3:52:
f3:88:10:7c:4a:10:74:0b:bb:6b:84:27:9e:cd:c4:
13:04:f0:73:2e:c4:1f:b1:56:f5:9d:3a:4f:54:db:
f4:93:e7:f1:f5:1f:17:1e:94:88:5f:e9:88:a7:e0:
09:f4:6f:bb:fb:3e:67:9e:50:7b:ca:23:d1:11:8c:
0a:0a:78:5f:27:60:d7:1a:79:11:ae:67:88:42:0c:
c4:9b:14:7e:e3:a4:f4:e5:b7:ec:65:c2:f4:94:75:
5c:0c:89:1c:36:86:c6:62:c9:cb:f5:b1:d6:4a:9f:
71:f6:69:18:f1:bd:30:9f:67:48:43:bf:ba:27:cf:
a3:d8:f0:af:2f:f3:87:b2:e9:2a:a5:8f:2b:5e:5f:
3c:a3:ed:e5:6a:de:fc:80:f8:b9:68:96:b4:f5:a4:
04:60:9f:10:57:c3:e9:3f:02:0f:b1:54:ad:bd:cb:
df:4b:2d:54:a2:21:12:f7:39:57:39:7d:b8:cf:50:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:21:AB:B3:8C:6E:65:04:2C:16:BA:DB:0A:0F:A5:D4:E7:C9:41:D5
X509v3 Authority Key Identifier:
keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:61:7b:16:a2:34:01:2d:38:12:53:ad:28:d8:a4:37:e5:a0:
98:30:6d:1f:93:2d:f3:00:52:77:64:b8:48:c2:46:85:fa:a4:
86:a6:bd:9b:14:5b:96:53:f4:b0:ee:f3:80:4f:8e:22:86:ba:
c5:2c:f6:ab:4c:cd:99:99:57:6c:84:48:1a:d8:61:a2:eb:b7:
73:d8:ad:59:0d:c5:81:66:e8:f6:61:59:9a:b2:25:f5:fd:41:
3f:8a:01:6e:65:eb:3d:30:f6:1c:0b:cf:22:2f:40:3d:c9:bc:
cf:c6:2d:35:7f:3e:3a:a0:fb:82:fa:06:b3:85:61:68:77:ef:
49:ae:51:ab:50:f6:ac:62:e3:5e:1d:e8:84:04:f3:18:d7:19:
d9:71:9c:9b:af:c8:95:52:ba:f6:a3:61:70:73:36:b6:94:53:
43:d0:9c:ab:c9:f8:7d:76:69:ef:fe:3f:79:25:6a:4a:b6:15:
1c:54:18:63:dd:4e:37:59:6a:ca:48:95:72:77:c0:2c:35:7a:
ea:75:d9:51:cc:b0:42:9d:04:f7:f8:ad:d3:ae:db:3f:ea:a1:
bb:20:59:54:8c:61:1d:90:10:8e:46:11:67:a8:96:91:8e:e0:
3a:b9:a2:27:c1:ac:5a:c5:a7:08:fe:87:54:07:3b:e4:97:8e:
64:00:cb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:28:50 2026 by rpki-client