
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
File: HpsNFjzgqhHpHVVg9aPMZp4yke8.mft (raw, json)
Hash identifier: rJFp/YXjk5zAs47UQQU+cHLAd4kLnrhkpfoyAeQYeEY=
Subject key identifier: 51:6C:7A:CB:88:AF:6B:65:F2:9E:26:4F:A3:D5:FD:D6:7A:DF:F6:34
Authority key identifier: 1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF
Certificate issuer: /CN=A91F0578/serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
Manifest number: F2
Signing time: Fri 17 Apr 2026 06:03:57 +0000
Manifest this update: Fri 17 Apr 2026 06:03:57 +0000
Manifest next update: Fri 24 Apr 2026 06:03:57 +0000
Files and hashes: 1: HpsNFjzgqhHpHVVg9aPMZp4yke8.crl (hash: pCeH/C3oxGqzounrSQXWYse6UgS5RbM0t7xv6C8AmlI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl
rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0578, serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF
Validity
Not Before: Apr 17 06:03:57 2026 GMT
Not After : Apr 24 06:03:57 2026 GMT
Subject: CN=69e1cd4d-7325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:53:2a:ab:d8:d7:8c:24:6c:1c:31:c9:49:
d9:cb:17:92:d0:27:3d:bb:31:f4:a0:66:9e:f9:b0:
3d:f9:43:80:6f:32:6a:2b:40:2b:61:63:8e:ed:c2:
03:40:1d:0b:52:d4:55:dc:e5:8c:03:22:88:97:0c:
9e:c5:f0:f1:92:5d:1b:ed:11:4d:64:a0:18:97:f5:
c4:15:6b:49:fa:2a:7d:b8:4e:7d:45:15:b6:66:df:
78:56:99:2d:62:2b:e7:d7:5e:94:b1:d4:c5:20:91:
20:48:15:8a:75:01:f4:b0:b1:23:f1:30:99:ee:45:
c7:06:f8:c0:0e:ba:e9:29:1a:3f:e0:18:be:e7:b6:
30:dc:8a:09:d9:5a:d1:68:92:ce:ca:48:2f:ac:b7:
16:53:a8:5c:be:59:84:81:9b:3a:96:a6:27:cf:4d:
6e:64:e1:7d:26:f8:97:60:de:08:a8:b3:89:e5:b1:
fc:6d:02:b6:24:f0:b8:f2:66:34:7b:6a:e0:49:a6:
49:fa:c9:99:4d:0d:d4:e0:67:24:f3:37:fa:b0:37:
99:14:66:30:73:cc:10:49:3e:fa:3f:f2:85:a4:43:
88:76:c8:d8:73:a1:c3:48:b7:bb:d1:cd:ab:25:8a:
ec:6e:7a:2e:20:9a:48:a3:79:94:db:d6:a0:53:d5:
2c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6C:7A:CB:88:AF:6B:65:F2:9E:26:4F:A3:D5:FD:D6:7A:DF:F6:34
X509v3 Authority Key Identifier:
keyid:1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:7d:32:8e:44:91:a2:22:d5:7a:30:4e:a1:3f:f8:ef:18:36:
81:12:66:fc:85:c9:82:06:5c:92:f7:2f:97:b4:00:84:3e:18:
2e:b2:b3:66:6c:cc:ff:fc:6d:10:a3:ae:28:60:44:2b:c0:ab:
8a:d8:22:e8:81:e6:74:cd:f2:b5:09:dd:be:05:98:de:09:f1:
6c:56:04:92:2e:f7:41:2c:93:e9:1c:d8:14:8e:fc:ae:d6:b0:
f8:01:87:31:30:72:31:5e:ac:4d:9b:72:58:e7:da:6a:53:7d:
a3:05:81:10:59:f0:23:5f:76:0a:77:e3:83:db:88:1a:3d:a2:
fc:99:96:82:f2:2e:3e:5e:a8:30:2f:49:f2:02:1d:53:2e:78:
4f:62:3e:25:e5:7f:68:a7:03:c0:84:6a:21:e0:b4:9b:1c:54:
bd:7e:b3:aa:ec:d4:d7:7a:b2:10:97:a8:c2:3c:d9:e2:70:7b:
a2:57:7d:eb:8b:5c:2a:36:50:39:b7:98:42:d3:9a:76:81:0c:
d3:43:df:10:6b:12:d4:5f:51:75:f3:45:2b:70:b4:86:24:fb:
da:c3:0a:7e:49:21:a8:68:aa:6a:47:23:b2:a4:c2:4b:23:6f:
d9:a4:83:e1:21:e5:93:1c:13:77:3a:84:50:6b:e5:d5:a1:9b:
da:05:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:55:43 2026 by rpki-client