
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json)
Hash identifier: cV82jE/TP0UnpahQ2qejlinOrOte34+eo+M0Sdmv470=
Subject key identifier: 2D:0C:06:15:B5:4A:6C:AD:DB:85:2B:B4:33:7D:49:B6:3B:63:77:25
Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
Certificate serial: 108C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
Manifest number: 1080
Signing time: Thu 16 Apr 2026 17:18:09 +0000
Manifest this update: Thu 16 Apr 2026 17:18:08 +0000
Manifest next update: Thu 23 Apr 2026 17:18:08 +0000
Files and hashes: 1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: BfVpjSqdnwSzrXEbDKj3UtvEnJy6ESW6ygaBAhqb4Rw=)
2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: Ao3jfGsh9U1xkNSfRtTIAsdPf+38NYLkOVbSpZBnBWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl
rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4236 (0x108c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
Validity
Not Before: Apr 16 17:18:08 2026 GMT
Not After : Apr 23 17:18:08 2026 GMT
Subject: CN=69e119d1-d1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:73:c2:6d:1d:e4:27:da:d3:d9:ab:de:87:
53:1b:50:a9:34:0c:91:38:0c:01:6e:5e:87:f4:8b:
94:6e:03:15:43:d1:ce:2b:58:c8:43:b1:60:92:8f:
8a:65:55:ff:0c:bf:44:90:a6:87:44:26:bb:c9:5e:
db:16:08:21:75:77:c4:c0:a2:4a:e5:1f:04:5f:10:
20:43:16:f5:c7:dd:d1:ba:9b:ec:45:8b:50:c8:c2:
5c:bf:de:2f:ed:7b:97:69:af:ef:c3:26:07:78:d2:
df:a8:a0:77:f4:67:c6:93:27:a3:1f:7e:22:4d:10:
42:32:fb:05:90:d1:fd:e5:7a:63:96:d2:0a:0b:36:
1e:f1:d7:19:d5:33:1e:02:8d:99:a7:85:f9:ab:e8:
9f:2c:73:4a:f8:42:10:dd:02:82:c7:1b:06:6b:48:
63:30:d8:75:a6:7e:57:6f:9e:47:88:e9:0b:2e:fe:
c4:a5:ec:8b:fd:22:f2:61:83:63:bc:b4:7b:a0:d8:
7a:ba:38:0a:5b:0e:dc:07:64:ec:d5:d6:c4:ce:f1:
46:49:ae:c8:51:d9:4f:15:6e:9a:12:e2:55:3d:a4:
14:58:42:40:7f:c9:11:48:ef:da:c8:c6:6c:ab:ec:
80:54:3d:05:e8:ed:c7:64:1d:b4:7f:8d:76:84:70:
ea:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0C:06:15:B5:4A:6C:AD:DB:85:2B:B4:33:7D:49:B6:3B:63:77:25
X509v3 Authority Key Identifier:
keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:f2:b9:be:e3:e1:41:d5:c6:40:34:71:63:ad:fb:f9:27:f0:
b0:8d:f8:5c:7b:2b:b0:04:90:80:53:a9:ff:eb:5d:a6:af:ae:
26:29:9b:f7:fd:90:03:dc:87:2f:0e:bf:10:29:19:db:3f:3a:
19:61:d4:f4:6e:9b:70:f2:1e:08:54:af:b8:50:6f:d8:ec:d3:
bd:87:b1:81:52:a1:15:89:14:e0:22:55:02:90:31:e2:b9:09:
c4:e0:90:c7:6c:6f:e9:62:4f:62:7f:a9:b8:72:e5:22:fe:d2:
be:c9:86:0c:1d:40:11:1d:40:25:5a:cd:8f:0a:e2:22:e6:9c:
13:28:4b:dc:56:d8:81:73:d9:3e:18:3f:eb:d5:11:38:c5:aa:
a8:c5:27:b3:42:a4:8c:31:6d:44:80:a7:ca:22:cc:d1:c0:c2:
8e:5b:39:21:07:58:e2:09:f1:06:6c:58:25:0f:26:c9:43:e5:
38:a4:eb:fe:4d:7b:de:19:79:b4:63:01:dc:35:cd:ab:22:39:
4f:56:d5:57:a4:0a:7e:e4:d8:02:ed:3f:d6:55:f1:ed:64:ad:
85:b1:72:a4:da:fd:ee:1b:59:b9:75:63:44:64:45:16:c8:2a:
f2:52:d9:b8:7c:2d:78:de:ec:73:1d:c2:63:6f:5e:43:10:bf:
5b:57:7f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:08 2026 by rpki-client