
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
File: HNLU8yahhKSHvyKs14rVwGj0ZmE.mft (raw, json)
Hash identifier: CtPd6jICpixlffH3LgEHdrNmn9+97RQWdMDw8MV+r1o=
Subject key identifier: 30:63:7C:4C:A3:96:4F:A4:0F:E8:4C:1E:ED:87:A7:82:CC:B3:AF:3E
Authority key identifier: 1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61
Certificate issuer: /CN=A91F8177/serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
Manifest number: 90
Signing time: Sun 01 Mar 2026 08:50:39 +0000
Manifest this update: Sun 01 Mar 2026 08:50:38 +0000
Manifest next update: Sun 08 Mar 2026 08:50:38 +0000
Files and hashes: 1: HNLU8yahhKSHvyKs14rVwGj0ZmE.crl (hash: aZ/WB8nNM+lqj036S2hRmRt4NQKrrxN05sJTpoarYaY=)
2: 447A88023DDC11F0ACD9F475C4F9AE02.roa (hash: sARudyzCI0DYJ60UXipEDLinjNBDDKiitt/Q2LPeYXE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl
rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8177, serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
Validity
Not Before: Mar 1 08:50:38 2026 GMT
Not After : Mar 8 08:50:38 2026 GMT
Subject: CN=69a3fddf-2d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c6:20:f4:25:2f:7b:80:70:40:dc:bd:ba:19:
0e:a6:9b:55:d2:93:93:ec:30:cb:71:a3:8e:af:a8:
24:de:89:96:93:2d:d9:b3:a9:e4:e6:97:20:2b:f3:
32:4a:04:b9:08:88:f0:82:91:31:48:d0:fe:7c:d9:
06:25:29:48:f0:18:7e:83:e0:ab:65:3c:11:79:70:
bd:be:6f:30:2d:ae:db:69:21:78:30:7d:8a:92:21:
8b:45:56:c0:39:45:08:01:01:64:ae:4d:1a:d4:08:
5f:2d:1b:8b:cd:52:df:d4:11:25:f2:65:fb:a5:da:
1c:da:0c:51:5b:89:8a:11:34:6a:a3:10:ed:95:ee:
2d:55:33:a8:31:00:57:62:e3:7a:c5:07:ae:83:7d:
ef:02:ad:5b:b8:53:5f:62:fb:24:6d:fc:06:49:df:
11:9c:4f:69:e7:24:0e:96:af:9a:1f:e6:a7:dd:82:
78:08:c0:42:80:b4:e6:2c:79:c0:1a:a2:ad:86:5f:
bb:5d:e0:4b:b0:00:36:0a:c9:66:3d:d5:ba:ed:98:
c4:68:eb:4b:2d:ea:94:56:29:b5:28:19:8b:c6:ae:
c1:a8:6c:02:b5:a4:e0:e3:2d:d8:6a:58:56:0a:d4:
54:db:56:6d:78:c8:a1:f6:33:13:ed:67:24:bc:68:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:63:7C:4C:A3:96:4F:A4:0F:E8:4C:1E:ED:87:A7:82:CC:B3:AF:3E
X509v3 Authority Key Identifier:
keyid:1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:56:76:f3:d3:b9:21:3d:66:38:f9:4e:bd:7c:70:66:8b:53:
2c:09:21:f8:50:70:f0:2c:98:ff:9c:cd:d4:13:6a:8c:ed:38:
1b:12:d1:1e:57:89:26:ee:11:77:1b:1d:8d:e4:b3:8e:6e:de:
f9:e7:7f:b0:3e:57:80:f6:1a:3a:3b:57:88:e0:66:ed:ab:20:
e6:ee:1a:0b:46:fd:7f:b2:db:6e:63:f3:9e:0e:29:ac:7f:9f:
92:58:63:bf:51:b8:8d:ee:99:fe:20:0d:80:b6:f4:1e:60:ca:
0d:48:b0:bd:0b:e9:85:e2:e1:02:f9:67:d3:7f:b1:38:ba:b3:
7e:64:6c:54:42:e7:a1:2c:ce:64:10:d6:96:63:8f:a8:8a:10:
b9:c0:24:a3:fe:b6:a4:14:58:00:03:85:98:b2:d9:e9:02:23:
71:15:7f:55:9e:f2:eb:2a:b9:67:fc:e5:95:21:20:df:68:02:
6b:23:7b:be:9b:f8:5f:ca:ca:6f:2f:e1:46:12:8b:7d:7d:8e:
f5:30:36:3c:ea:4f:d0:db:fb:a1:a6:55:14:17:aa:01:16:b7:
3a:bc:fb:a6:b9:2b:62:be:81:76:24:9d:ea:14:62:75:8a:91:
97:4b:f5:47:a0:1e:5c:34:33:3a:a7:e1:7a:35:d0:88:27:99:
7d:ee:49:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:34 2026 by rpki-client