
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
File: h_pIRIna7X3O5mDHjYe6LMGtqmI.mft (raw, json)
Hash identifier: koNT2zWCZqMIv5veFwMspP/a2fJYB2bpMGXgb+JR6B0=
Subject key identifier: 4C:EB:B5:E1:9E:86:67:0E:9E:F4:22:7E:2B:05:FC:A4:E2:A2:DC:68
Authority key identifier: 87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62
Certificate issuer: /CN=A91F1962/serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
Manifest number: FD
Signing time: Mon 21 Sep 2026 06:14:31 +0000
Manifest this update: Mon 21 Sep 2026 06:14:30 +0000
Manifest next update: Mon 28 Sep 2026 06:14:30 +0000
Files and hashes: 1: h_pIRIna7X3O5mDHjYe6LMGtqmI.crl (hash: uKq7JsFGaJ8GAZdzt88vlrnUoMCFpWYWadahAi4XFwQ=)
2: 6A3BD41C38DF11F09B694578C4F9AE02.roa (hash: +4czb+uvr2Q5q+paJSPdwQvqlxj2qM69Nj4RdbMJbnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl
rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62
Validity
Not Before: Sep 21 06:14:30 2026 GMT
Not After : Sep 28 06:14:30 2026 GMT
Subject: CN=6ab0cb47-d988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:2c:1d:24:8d:57:3d:eb:30:c7:d2:57:26:
9c:90:6e:e2:5e:8c:b7:27:ce:4d:9f:ee:73:d6:28:
46:14:3f:fc:3e:5e:ed:1a:c1:26:b6:81:49:f4:2d:
ee:6b:a2:32:ad:73:1d:f9:22:fd:b8:48:96:98:66:
4d:f3:89:00:e7:38:9c:1a:7b:0b:b9:b5:5d:98:14:
62:fc:de:73:a3:8f:4a:38:2e:d8:09:b3:7d:08:49:
1f:b6:4d:ed:87:7d:0c:6e:cb:e1:89:d2:8e:2b:2f:
2e:88:9b:01:b3:d9:d4:cb:1d:9a:05:6d:aa:b1:6b:
dd:59:46:c3:34:b6:0a:59:19:e1:9e:2b:83:8b:97:
91:02:cb:3a:f1:87:d5:13:63:24:e5:44:4a:55:24:
5b:a9:9f:92:24:49:0f:f9:da:72:50:c3:20:84:16:
c6:8b:61:f8:d1:8e:5d:56:3c:8b:b6:6d:44:ca:d8:
18:b9:54:b8:61:04:d9:2f:15:7f:6b:77:9c:42:f3:
37:67:8b:f2:9d:39:e6:78:0e:d3:fc:ff:b2:21:da:
a8:0c:18:33:37:8b:5e:41:28:bf:32:7d:0b:3b:a4:
a5:1b:6c:35:12:42:88:f1:77:0a:71:38:a8:2b:72:
92:34:b4:a7:3f:5a:af:98:2a:e8:21:10:16:e4:3a:
de:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EB:B5:E1:9E:86:67:0E:9E:F4:22:7E:2B:05:FC:A4:E2:A2:DC:68
X509v3 Authority Key Identifier:
keyid:87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:7c:db:f6:45:a9:d4:8c:f0:b8:4b:ce:04:17:3d:f0:b9:f6:
d3:6e:47:12:8f:46:a8:97:7e:6f:0e:c4:1e:7e:d1:07:47:50:
7c:c3:b0:64:23:7e:2a:18:87:a0:39:e8:8b:67:5f:76:65:5e:
d9:56:05:4d:94:a8:9a:a1:6b:30:e4:5c:ff:73:8e:a3:ca:59:
eb:ed:1a:82:a3:3f:d4:37:46:cf:b2:54:24:3d:b1:32:7c:a8:
a0:6c:f2:9d:a4:4c:f7:49:22:21:fd:13:64:83:9c:e9:57:ac:
de:f8:96:f8:7d:fb:e6:b1:45:39:42:85:d2:d6:fc:ec:a1:86:
4c:df:b4:4c:46:de:e4:a7:c0:38:4c:ef:6a:2e:33:31:38:14:
70:85:34:f9:03:8a:c9:e7:4b:df:24:84:5c:a2:a6:dd:80:06:
b4:c0:a4:71:06:30:94:ad:05:a7:8b:e7:0d:9b:69:76:f2:aa:
cf:f8:af:ff:39:c3:fd:64:96:b4:8f:a7:0a:2a:b8:e5:c0:40:
b0:2d:e4:88:a6:fd:03:36:79:bd:4d:fd:92:b8:88:a9:64:26:
43:93:cd:32:cc:6a:3a:6e:96:62:94:dd:b5:c7:a6:83:18:7e:
ab:a2:12:2c:97:8c:d8:82:b4:dd:c0:08:fc:b0:0e:3d:17:7e:
90:c9:3c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:53:26 2026 by rpki-client