
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft
File: -H8wma149Ynd_kql85E3_7Mq_54.mft (raw, json)
Hash identifier: zqpObO1qSYwlc/kvU2YDLjEvXJ0vAShvK5eXNHnF3Bc=
Subject key identifier: 83:C5:7B:8D:0C:45:78:71:40:B7:4A:D0:F6:BE:EC:8C:6E:94:F4:78
Authority key identifier: F8:7F:30:99:AD:78:F5:89:DD:FE:4A:A5:F3:91:37:FF:B3:2A:FF:9E
Certificate issuer: /CN=A91F17B3/serialNumber=F87F3099AD78F589DDFE4AA5F39137FFB32AFF9E
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft
Manifest number: 68
Signing time: Sun 01 Mar 2026 09:18:53 +0000
Manifest this update: Sun 01 Mar 2026 09:18:52 +0000
Manifest next update: Sun 08 Mar 2026 09:18:52 +0000
Files and hashes: 1: -H8wma149Ynd_kql85E3_7Mq_54.crl (hash: OzgpbbSyizeDIt2lJwL2BCsa7vYIVdSpVYFih6sd7sQ=)
2: D18B4798F06C11F09D48C4D25F6F56BC.roa (hash: ymEzb/RjC4f4Bak2B8TgUUQP9Ab0CH8UTwhKHwIfDvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.crl
rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17B3, serialNumber=F87F3099AD78F589DDFE4AA5F39137FFB32AFF9E
Validity
Not Before: Mar 1 09:18:52 2026 GMT
Not After : Mar 8 09:18:52 2026 GMT
Subject: CN=69a4047d-b5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:c5:f2:64:26:8a:18:50:dc:76:ab:52:0f:
17:bb:c4:33:80:5c:b4:ae:e6:a1:33:f6:d4:fa:a7:
79:c1:1f:27:f9:a4:0d:24:55:6b:3c:ce:4b:c9:72:
1d:05:dd:52:b2:75:f0:37:39:7a:94:bb:96:ba:45:
b1:86:d4:a9:e7:52:52:a2:a7:d3:5c:fa:8e:72:50:
68:03:ea:8d:9f:95:88:04:06:b6:6d:d0:3e:16:e8:
73:db:cb:82:84:aa:08:9f:30:bb:5f:3e:83:36:a0:
f3:8c:11:c2:da:b8:ad:1d:8a:6d:f6:41:4b:5b:5a:
2e:7d:27:5f:f8:a3:b3:d1:29:14:fd:e3:5b:3c:fd:
d3:72:c9:3d:15:6c:eb:34:a4:c6:3b:80:e2:60:c9:
8e:c5:c3:1d:36:de:6e:9f:eb:01:19:b0:96:bf:8a:
94:04:54:5f:05:4b:8c:83:c8:0a:15:3b:81:ec:1d:
1d:a0:21:9f:9b:bb:ef:a5:99:fe:2d:ab:9a:f0:62:
87:cc:43:39:dc:1c:09:4a:14:69:d6:ee:4d:26:e3:
28:d4:0d:87:11:30:46:1c:d7:cc:8c:90:e3:39:db:
8f:0b:42:fb:3d:c5:25:07:45:81:95:ad:eb:43:0c:
59:33:ae:6f:e1:7e:9d:1d:b4:e0:45:68:af:20:32:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C5:7B:8D:0C:45:78:71:40:B7:4A:D0:F6:BE:EC:8C:6E:94:F4:78
X509v3 Authority Key Identifier:
keyid:F8:7F:30:99:AD:78:F5:89:DD:FE:4A:A5:F3:91:37:FF:B3:2A:FF:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:64:45:9e:71:52:10:9a:23:c0:9a:8b:e6:a6:fc:d6:ee:e5:
1a:c5:db:d0:56:6c:96:76:5e:c7:ef:ff:81:bd:0a:39:f5:ed:
01:e5:38:96:38:bd:6b:1a:d6:8c:ad:32:6a:6d:86:90:1c:5f:
38:93:18:0a:f8:06:07:32:d6:c5:d1:b0:9e:c8:04:e8:eb:af:
58:99:e6:e7:de:fc:2a:5b:e8:ee:e4:19:ce:27:e2:56:bc:e3:
4e:28:57:36:60:2b:cb:4a:00:be:20:3a:c2:e9:ed:c4:a7:ac:
92:6a:0f:aa:18:7d:40:e7:a4:ed:98:6e:66:f0:42:07:bd:ae:
3d:ea:dd:f2:51:e1:da:6e:43:40:2d:ab:9a:20:f9:aa:a6:bc:
d6:60:9b:39:1b:29:7c:e1:18:f1:f5:44:69:0a:48:54:a8:e7:
72:df:3d:82:4e:c3:63:a0:d0:ca:f7:2d:3f:26:14:48:97:e8:
80:ec:9b:be:51:f6:95:21:25:fe:b0:94:9e:0a:6d:1d:7b:e9:
75:16:c8:33:30:92:82:98:73:a7:83:2d:7b:20:18:3a:0b:c7:
96:a0:c7:e6:c2:9a:84:da:d8:b9:d3:01:c4:cc:a4:15:85:ac:
90:c5:65:05:4b:f4:39:89:bc:69:2f:72:51:fe:1b:1c:2e:cf:
04:2c:a8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:29 2026 by rpki-client