
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
File: h_pIRIna7X3O5mDHjYe6LMGtqmI.mft (raw, json)
Hash identifier: Kok2uJ6n9AqepS1N2lCQJFaZztF0UHhWFP7tTxHtllc=
Subject key identifier: 17:33:FA:98:83:24:C2:DB:65:BF:2C:0F:D7:EB:1B:B5:6F:9C:32:D9
Authority key identifier: 87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62
Certificate issuer: /CN=A91F1962/serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
Manifest number: A9
Signing time: Wed 15 Apr 2026 06:47:12 +0000
Manifest this update: Wed 15 Apr 2026 06:47:11 +0000
Manifest next update: Wed 22 Apr 2026 06:47:11 +0000
Files and hashes: 1: h_pIRIna7X3O5mDHjYe6LMGtqmI.crl (hash: yCmFXO4eGLJL4vyxgwYzW183LAVFP5IG6yX+1Pso+O0=)
2: 6A3BD41C38DF11F09B694578C4F9AE02.roa (hash: FSkjWAWTa54qCMggaTkYI4c6Mh5lfB4HTHFZ2BdMRV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl
rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62
Validity
Not Before: Apr 15 06:47:11 2026 GMT
Not After : Apr 22 06:47:11 2026 GMT
Subject: CN=69df3470-0cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:35:ca:21:95:78:b7:d6:57:a2:1a:e7:2e:b0:
4d:9b:21:18:19:06:ea:e0:2d:5d:b9:0a:5f:73:d9:
4f:a9:39:ae:92:e5:eb:79:01:a5:04:d5:f5:60:df:
7e:30:6e:55:95:38:b1:8e:56:c6:3a:50:55:bc:23:
c1:56:bb:3f:4d:7e:48:2b:7a:ea:c2:2a:3f:15:18:
fb:de:f4:d0:8a:a1:c0:ec:43:7d:eb:35:73:81:7e:
60:b9:d9:46:2d:3b:5a:f7:9e:20:0e:20:7e:d5:f5:
e2:0b:8d:4a:c5:fc:db:ae:13:10:9b:9c:ce:40:cb:
d3:c8:e1:0c:84:ef:42:ab:99:bf:1a:b0:6d:4c:c3:
5b:91:25:81:d8:44:38:f5:dc:d9:9f:93:48:50:14:
04:cb:2d:fd:2f:63:b5:39:38:62:15:91:bd:ec:4a:
fd:32:d5:16:65:42:30:0d:cd:d0:63:5e:ff:85:62:
19:e7:9f:90:67:2a:a3:8c:e9:7f:e4:83:c7:ae:aa:
bf:be:4b:82:46:39:07:20:6f:58:ed:60:9e:0b:ed:
2d:0d:3a:94:cd:bc:79:49:2a:65:e5:e3:8a:96:b7:
df:9d:bd:63:a2:d0:3c:38:f5:6d:4b:72:d6:8a:9a:
b0:53:02:c8:ec:cf:34:a8:21:86:39:d7:8e:86:2a:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:33:FA:98:83:24:C2:DB:65:BF:2C:0F:D7:EB:1B:B5:6F:9C:32:D9
X509v3 Authority Key Identifier:
keyid:87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:21:ec:1e:cf:5d:f4:9b:88:94:53:c4:69:ce:da:ce:6c:cd:
cc:bf:ab:a8:1a:4f:41:23:37:98:84:ab:65:63:94:9a:2f:53:
88:94:23:cf:24:10:d3:7c:3a:d8:44:ce:06:01:59:55:f0:13:
ef:90:95:f8:fd:ec:7d:c0:09:8a:be:f9:5f:89:fd:59:ad:64:
e8:57:50:a3:b0:ca:84:81:ef:b4:f5:ce:4e:95:4d:ff:99:d0:
65:32:28:78:67:7e:7a:16:92:a4:31:94:81:4d:a3:23:36:f1:
1f:34:2b:f8:e0:10:8b:a2:d3:00:2d:46:fa:56:30:bc:1b:0f:
a7:97:37:77:f9:63:16:fc:de:8c:7c:06:c4:f4:06:6b:1f:3b:
6c:84:a8:8f:96:78:46:c4:88:08:cc:7d:8a:28:74:da:b4:f1:
a1:74:25:2c:0a:d2:9d:b4:99:fb:a6:ee:ce:b5:03:48:90:03:
9d:a9:69:90:93:b1:18:ba:d4:b2:30:e3:ff:04:7d:f7:5d:85:
6e:f7:05:81:24:47:9f:7f:02:1b:bd:ca:32:bd:de:b6:6e:d3:
7c:1b:9a:ec:83:7a:b6:73:32:8a:62:d2:84:28:0d:41:a3:a9:
01:2d:be:bb:17:7a:b6:ae:f0:99:88:bf:a0:06:8a:38:e3:a2:
86:07:1e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:27 2026 by rpki-client