
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json)
Hash identifier: RwwOk1ZawHBr13pJyF+5Cot8McKn727+Ou7fnTWnfmY=
Subject key identifier: 2D:42:D1:BF:B3:88:50:C1:00:BD:CE:DB:38:41:BF:71:29:2F:AF:34
Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31
Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
Manifest number: 01B0
Signing time: Mon 21 Sep 2026 03:58:49 +0000
Manifest this update: Mon 21 Sep 2026 03:58:48 +0000
Manifest next update: Mon 28 Sep 2026 03:58:48 +0000
Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: mHrNmZs6mUM2+ilYoI8GvwWajGTAG8R/DgkYaLN+a2E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl
rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931
Validity
Not Before: Sep 21 03:58:48 2026 GMT
Not After : Sep 28 03:58:48 2026 GMT
Subject: CN=6ab0ab79-98db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:33:c4:4a:16:32:39:47:2d:d7:27:44:ac:
df:3f:c5:ad:46:b2:5a:33:88:96:73:a1:18:41:e3:
ae:8a:61:1c:25:ab:4b:70:d2:28:1f:23:95:8c:18:
28:d4:de:20:88:13:d4:58:91:5c:e4:f7:52:c2:d3:
39:96:e6:56:0e:44:6e:06:e3:2e:22:cb:4c:ce:cb:
d2:97:17:1a:f3:4c:15:d1:50:f7:61:7f:25:89:a2:
e4:c3:d9:04:e9:96:fb:84:51:7e:4e:f7:1b:15:a7:
f4:78:f4:da:c9:b9:49:79:a1:d3:33:e3:e1:95:58:
47:76:6b:f9:0f:6a:86:8d:c4:e4:da:a6:ac:ec:3e:
81:ba:a0:bc:a5:72:a8:a7:5a:4f:57:3b:c0:27:a1:
9d:45:31:ad:92:b1:ba:9d:46:83:e9:c9:27:8f:56:
74:c9:42:60:0f:f0:5b:87:e3:8f:f7:5f:cb:68:f4:
cf:f8:bc:6a:c7:cb:00:84:ee:46:47:8a:23:4a:ab:
ef:85:2c:60:f3:85:7b:c0:a9:10:8c:c9:66:ef:91:
4d:09:57:f0:22:5f:7a:fa:3d:e7:13:e5:e5:1a:46:
b1:d0:27:fc:d8:8a:18:87:b0:db:73:09:35:95:21:
b5:51:6b:0e:77:08:80:0a:60:cf:6b:bf:13:96:85:
2d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:42:D1:BF:B3:88:50:C1:00:BD:CE:DB:38:41:BF:71:29:2F:AF:34
X509v3 Authority Key Identifier:
keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c3:ff:05:ff:0d:f0:0d:f5:da:c2:fc:bb:ec:1f:e4:d5:2f:
d2:b4:3f:2d:5b:b4:3f:48:49:15:06:e5:13:10:e1:fc:10:09:
86:b9:de:0a:c2:ef:2f:5b:43:0d:d8:8a:16:fe:74:ef:0b:43:
f9:38:88:77:ed:db:2e:80:1b:57:50:4a:a8:fd:bd:38:d2:9f:
ad:97:1b:31:6c:ac:53:eb:72:6f:16:80:93:54:c1:20:41:6f:
f7:a8:92:46:7c:fd:59:07:24:a3:51:30:0f:14:eb:c8:bf:a9:
bc:b6:e5:3f:d7:b0:a1:43:8d:4a:61:5c:42:29:b9:4e:15:6a:
90:43:7b:34:42:cc:84:3d:2d:40:b9:51:7b:d8:47:30:b6:99:
b8:db:c6:aa:f5:e4:07:2f:f1:0b:12:a5:cf:84:29:2b:58:6f:
97:8c:16:ed:4b:53:2f:d5:bf:73:5b:9d:99:39:90:3b:a7:db:
c9:4d:c6:78:a2:18:57:da:20:a8:c4:f1:7e:b6:8a:59:f8:d5:
58:25:62:39:02:a2:24:43:6a:ac:11:0e:02:13:02:19:05:ca:
10:30:07:98:66:b0:7f:31:47:99:58:43:41:f9:7a:3d:0e:c4:
0a:19:67:c6:71:5d:b4:ed:30:94:12:98:f2:01:23:c7:7a:21:
87:c5:e1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:56:55 2026 by rpki-client