
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
File: HVvjkVLqbW3wn52ErGmpYbfIOG4.mft (raw, json)
Hash identifier: KknQ5t0PJAE5aTj871OxPabXCpQqCHYAQwRdphuKmQ4=
Subject key identifier: C5:6E:4C:2D:5B:2F:7A:72:89:AB:D4:B4:7D:1A:7B:E7:1E:CB:16:5F
Authority key identifier: 1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E
Certificate issuer: /CN=A91F43F2/serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
Manifest number: 91
Signing time: Sun 19 Apr 2026 07:06:05 +0000
Manifest this update: Sun 19 Apr 2026 07:06:05 +0000
Manifest next update: Sun 26 Apr 2026 07:06:05 +0000
Files and hashes: 1: HVvjkVLqbW3wn52ErGmpYbfIOG4.crl (hash: PNvtRM8+fm+eEkvVNckF5iZb/+R/DpYU2rncpa6yfaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl
rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 07:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F43F2, serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E
Validity
Not Before: Apr 19 07:06:05 2026 GMT
Not After : Apr 26 07:06:05 2026 GMT
Subject: CN=69e47edd-132f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:30:e8:39:8a:5d:e5:1c:62:27:00:6c:ad:
1d:59:1b:a9:bd:cb:1b:57:fa:26:fd:5b:6c:69:b5:
a3:66:ff:ab:18:02:be:a3:9c:e9:36:84:22:8d:4f:
75:58:8d:83:6f:80:70:d5:38:c6:bf:11:4b:56:c5:
05:77:8f:07:a0:8b:b0:ea:c7:0b:6e:f7:78:18:11:
50:24:38:71:a4:73:e1:71:a0:ee:bb:a1:b4:cc:71:
7c:e4:df:dc:1e:ac:9a:d9:98:e3:2f:5f:31:09:c6:
d0:61:99:6e:ad:ac:68:64:01:5f:d3:81:aa:16:3d:
e2:e9:0d:9a:11:4c:8b:87:d1:72:7b:e6:d2:fc:f7:
c3:31:a5:cf:69:46:98:31:4a:a7:2f:a7:86:86:d5:
0c:33:b8:89:62:fd:22:6c:86:a3:1c:02:5e:3e:7c:
c6:ca:6a:aa:08:0a:88:c8:91:28:34:ef:f9:81:5e:
a5:c2:26:a2:41:7f:6b:d5:75:cb:51:79:0b:e7:da:
0b:6f:c2:78:1b:11:e0:f6:9e:e0:2a:cb:1e:65:61:
28:3d:bf:51:f1:94:dc:df:54:41:a9:d6:d5:79:00:
44:52:31:b1:72:b9:65:b7:77:e1:0d:c4:84:5f:0f:
ca:39:88:01:b1:37:73:0d:e8:a5:80:5b:de:e2:0d:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6E:4C:2D:5B:2F:7A:72:89:AB:D4:B4:7D:1A:7B:E7:1E:CB:16:5F
X509v3 Authority Key Identifier:
keyid:1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:02:86:dc:e4:de:57:fa:a4:24:2b:a4:2f:34:2c:33:fc:f8:
13:16:24:a3:e9:0d:b7:ec:7f:80:ef:50:4b:7a:d2:d5:d3:5b:
07:16:ab:70:0c:06:41:27:93:cb:8e:05:3a:49:ef:07:9e:7f:
a0:0e:10:2e:7c:31:47:3b:9c:e4:4f:7c:9a:da:34:91:95:e0:
1a:86:80:22:88:06:90:fe:8d:f6:9c:55:63:d2:84:83:a3:d2:
08:27:43:82:af:45:6c:78:06:6a:81:04:71:5f:f2:cb:df:9c:
2e:62:9a:1b:30:70:66:2a:31:85:97:72:df:f3:c3:c5:e9:4b:
ba:d8:ba:93:76:fa:86:53:f9:e7:7f:bc:5d:09:95:84:2c:e1:
ed:03:34:8d:ef:b3:d8:b0:a2:1a:c2:1f:cb:f5:89:f6:74:b3:
15:73:2a:7a:b5:05:81:50:4e:90:38:81:c4:2f:d3:31:5d:ea:
56:5b:03:63:1b:c1:fd:54:c4:26:e8:27:67:57:d2:d7:78:9b:
7d:f2:ed:a0:b2:8e:82:74:18:0d:46:25:0f:ec:99:9f:e5:89:
2f:67:0d:44:fd:75:d2:13:57:b6:6d:7d:55:85:58:92:0c:4c:
c8:02:4d:8c:9b:63:58:c0:57:7b:1f:bf:c3:1f:56:ee:fd:a2:
18:93:46:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQzRjIxMTAvBgNVBAUTKDFENUJFMzkxNTJFQTZENkRGMDlGOUQ4NEFDNjlBOTYx
QjdDODM4NkUwHhcNMjYwNDE5MDcwNjA1WhcNMjYwNDI2MDcwNjA1WjAYMRYwFAYD
VQQDEw02OWU0N2VkZC0xMzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn9Iw6DmKXeUcYicAbK0dWRupvcsbV/om/VtsabWjZv+rGAK+o5zpNoQijU91
WI2Db4Bw1TjGvxFLVsUFd48HoIuw6scLbvd4GBFQJDhxpHPhcaDuu6G0zHF85N/c
Hqya2ZjjL18xCcbQYZluraxoZAFf04GqFj3i6Q2aEUyLh9Fye+bS/PfDMaXPaUaY
MUqnL6eGhtUMM7iJYv0ibIajHAJePnzGymqqCAqIyJEoNO/5gV6lwiaiQX9r1XXL
UXkL59oLb8J4GxHg9p7gKsseZWEoPb9R8ZTc31RBqdbVeQBEUjGxcrllt3fhDcSE
Xw/KOYgBsTdzDeilgFve4g2bVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVuTC1b
L3pyiavUtH0ae+ceyxZfMB8GA1UdIwQYMBaAFB1b45FS6m1t8J+dhKxpqWG3yDhu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDNGMi80QzA0RjA2QTYw
QzAxMUYwQUZCNDU3MkJDNEY5QUUwMi9IVnZqa1ZMcWJXM3duNTJFckdtcFliZklP
RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hWdmprVkxxYlczd241MkVyR21wWWJmSU9HNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDNGMi80QzA0RjA2QTYwQzAxMUYwQUZCNDU3MkJDNEY5QUUwMi9IVnZqa1ZMcWJX
M3duNTJFckdtcFliZklPRzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIQKG3OTeV/qkJCukLzQsM/z4ExYko+kNt+x/gO9QS3rS1dNbBxarcAwGQSeT
y44FOknvB55/oA4QLnwxRzuc5E98mto0kZXgGoaAIogGkP6N9pxVY9KEg6PSCCdD
gq9FbHgGaoEEcV/yy9+cLmKaGzBwZioxhZdy3/PDxelLuti6k3b6hlP553+8XQmV
hCzh7QM0je+z2LCiGsIfy/WJ9nSzFXMqerUFgVBOkDiBxC/TMV3qVlsDYxvB/VTE
JugnZ1fS13ibffLtoLKOgnQYDUYlD+yZn+WJL2cNRP110hNXtm19VYVYkgxMyAJN
jJtjWMBXex+/wx9W7v2iGJNGJA==
-----END CERTIFICATE-----
Generated at Tue Apr 21 09:33:22 2026 by rpki-client