
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
File: HVvjkVLqbW3wn52ErGmpYbfIOG4.mft (raw, json)
Hash identifier: /85hNID2dTNDZN9pl3n7a64hgwxtcrp7roqGvUF5GPI=
Subject key identifier: F5:4E:9B:D7:48:F1:2D:55:16:44:C3:55:95:5A:7F:45:BC:A4:83:4A
Authority key identifier: 1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E
Certificate issuer: /CN=A91F43F2/serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
Manifest number: 77
Signing time: Sun 01 Mar 2026 09:07:42 +0000
Manifest this update: Sun 01 Mar 2026 09:07:42 +0000
Manifest next update: Sun 08 Mar 2026 09:07:42 +0000
Files and hashes: 1: HVvjkVLqbW3wn52ErGmpYbfIOG4.crl (hash: O46rwFiCXEkx4uMRqZcplOWZV2sLNPUbUuFWOLtIyEU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl
rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:07:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F43F2, serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E
Validity
Not Before: Mar 1 09:07:42 2026 GMT
Not After : Mar 8 09:07:42 2026 GMT
Subject: CN=69a401de-bdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:33:fd:b9:e5:c1:50:06:f7:9e:fd:c4:3a:
46:bc:fd:16:fb:b1:c3:58:54:45:99:e2:d8:66:b7:
a5:ef:5d:56:ba:37:7a:3f:c7:46:2d:d1:b5:7c:6f:
6f:6d:a2:c2:bd:93:01:d9:b5:79:6b:af:6b:ba:6e:
97:47:d0:97:d8:5d:1e:65:eb:2c:d5:1d:51:ef:17:
37:85:a8:9f:4a:bd:48:04:2b:90:b7:9d:e1:67:2b:
0a:d6:10:e7:1c:8b:ce:9b:4e:c5:1f:95:85:b1:27:
73:5e:c5:65:63:0c:5f:98:78:5b:a7:5d:e5:f8:a0:
c3:ec:ae:97:4c:cf:9a:f4:09:6e:c5:34:16:d2:29:
ef:7f:2e:68:47:75:62:0f:9d:d0:79:cf:6d:ba:0f:
53:8b:5b:4d:ab:17:1a:a4:8a:e6:8f:3d:7b:9f:25:
ae:bd:39:3c:95:ca:5f:1e:8c:bf:7c:d5:01:9a:67:
d0:02:2e:fb:a5:fb:ff:7c:56:97:9a:fc:51:78:5c:
7f:b3:45:45:c0:77:25:66:91:28:11:6d:21:d3:8d:
82:8a:e4:96:de:1c:10:2f:19:87:06:16:64:9d:45:
9f:8d:ba:75:5f:fd:29:91:6f:a5:ec:d1:33:88:a5:
be:ee:6f:98:70:c2:98:16:ed:ef:5e:f8:2a:e8:56:
05:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4E:9B:D7:48:F1:2D:55:16:44:C3:55:95:5A:7F:45:BC:A4:83:4A
X509v3 Authority Key Identifier:
keyid:1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:8d:83:b0:d7:93:ce:39:bf:93:6d:c0:28:43:75:9a:8a:53:
a1:67:7b:86:ac:60:6e:7a:5c:ef:74:71:f1:e5:88:71:0c:f3:
9a:95:7c:b5:4c:f2:4e:af:e9:15:74:38:5f:2d:68:cd:e2:73:
ca:34:21:56:c1:c0:5a:67:99:44:c1:fa:9a:17:64:cb:36:fa:
85:fb:80:61:96:12:56:44:e4:bf:cf:fc:1b:66:43:10:60:9f:
b0:c0:c0:af:df:40:ca:4a:2b:f8:9f:59:30:ff:f9:30:eb:75:
68:21:b2:cd:85:2f:96:ca:c3:af:fb:3d:c9:5d:f2:f7:05:a4:
af:4a:01:73:45:77:ab:5d:8d:13:b9:cd:1b:7e:64:ca:8c:1e:
8c:1f:1c:5f:37:c5:ec:9f:35:77:c6:61:90:48:66:11:ce:94:
1c:ba:a8:27:2c:53:ed:79:09:18:28:57:ff:08:ca:e7:84:10:
a7:f0:a2:a6:a8:0f:46:be:d8:11:1c:3c:2e:12:da:8b:7b:87:
6f:d7:63:45:b4:33:9c:ac:d9:22:33:da:d3:d2:83:95:ae:3d:
24:91:ee:8e:7c:88:33:dc:c2:eb:9d:8e:f5:c3:20:4c:37:2b:
66:0e:9a:e7:09:8a:3a:a2:88:d1:7d:13:3c:c8:d1:2e:8f:52:
1d:4a:d1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:17 2026 by rpki-client