
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json)
Hash identifier: AVFDbXc9TbHUYDBEhPDE5/ZM58cT7BxceapMz/lRNjQ=
Subject key identifier: 78:83:C1:23:91:BE:45:FB:99:B2:85:FC:01:32:8C:67:66:19:A3:B4
Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
Manifest number: DA
Signing time: Sun 01 Mar 2026 07:50:07 +0000
Manifest this update: Sun 01 Mar 2026 07:50:07 +0000
Manifest next update: Sun 08 Mar 2026 07:50:07 +0000
Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: OzPUEbofZUv0Vzb9CKelyIAxH/lJVXudUZICkd6xHmU=)
2: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: vLRSLWwCPlw1XgMXqIwjNZRh5iifhLT67LBNrNkXRO0=)
3: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: ne8tUgudan5gCr0Fj4AbK9IugW5sTtsGHmdJgQPhqp8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Validity
Not Before: Mar 1 07:50:07 2026 GMT
Not After : Mar 8 07:50:07 2026 GMT
Subject: CN=69a3efaf-0ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:13:f1:5b:5e:5a:9f:32:27:a9:62:95:5f:34:
23:07:86:c7:06:31:75:c0:3d:0e:cd:ef:3e:92:e8:
d2:7d:70:18:24:3a:09:48:61:7b:cf:ee:ff:f3:c9:
4a:8f:e4:60:29:46:59:b5:36:9a:97:8d:85:45:94:
88:61:79:6d:39:ec:39:13:18:4e:17:4b:43:98:5f:
a2:81:80:1b:34:9f:21:89:db:86:30:72:70:7f:68:
e3:12:ca:de:83:98:85:c5:2f:c1:58:62:7c:e4:e8:
ce:80:8c:ad:7c:38:6c:2a:79:c8:dd:34:bd:30:3f:
82:2e:00:79:76:6b:38:94:b9:6f:4b:a2:60:67:b6:
1f:ca:5c:0b:fd:56:eb:08:8f:f8:ef:dc:7f:1b:e5:
aa:b6:8c:be:3a:61:c4:b9:0d:ac:e7:ef:8e:5f:ab:
f4:c0:a7:a1:24:c7:2a:98:bc:6f:19:cb:f4:d4:12:
f5:99:b2:31:75:71:e8:8a:48:2e:a0:11:9d:1d:db:
a3:b6:c9:58:ee:f3:db:d6:47:3f:13:84:5e:49:ce:
4d:c6:1b:14:46:2a:54:b4:5e:e5:31:65:0b:8f:46:
9f:17:13:45:78:05:cf:c1:5b:6c:3a:f4:2d:d7:68:
a1:76:49:73:87:55:40:77:88:dd:8f:5e:89:e6:c9:
30:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:83:C1:23:91:BE:45:FB:99:B2:85:FC:01:32:8C:67:66:19:A3:B4
X509v3 Authority Key Identifier:
keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d0:ef:dd:c1:53:fa:99:c8:1d:d5:38:50:aa:80:19:b2:7a:
63:b8:20:72:60:cd:b1:f6:5c:e2:92:b3:52:e9:75:21:3e:24:
a3:9b:bf:b4:63:f9:5a:27:29:f0:ea:c9:16:cc:7f:fd:f6:06:
9c:9b:98:09:49:73:87:22:86:99:40:8d:c3:ef:1d:d2:88:bc:
64:2a:c9:42:0a:50:cf:98:98:1b:68:41:a0:00:bc:3b:77:af:
53:d6:22:ec:56:bd:27:f4:ea:a6:fd:87:d3:5a:fd:e5:04:25:
9f:a2:9b:c6:cd:ed:a5:11:06:09:72:b5:b3:dd:af:59:ff:c6:
0f:15:06:9d:1d:c2:5c:1d:aa:de:96:53:96:67:9a:2e:49:5f:
03:e1:03:23:47:29:9f:ee:c1:71:76:e4:0b:08:a7:f3:1d:ca:
dc:0f:75:ad:00:5f:ca:3b:1d:6d:21:8b:76:8a:40:4f:8f:4b:
fd:b6:1a:95:ac:f8:0c:ca:1f:0d:60:fe:32:38:48:7f:5f:c0:
42:65:e1:0c:be:3f:ee:d3:e5:ce:cc:dd:5d:1d:57:a5:d8:27:
03:25:f7:7e:d6:f2:6c:a7:8a:07:69:b3:00:b1:5b:b0:59:fd:
a6:3a:1e:1c:f2:e0:2e:3e:94:5c:53:50:93:cb:f5:e3:22:90:
5c:e7:79:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:32 2026 by rpki-client