
$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json)
Hash identifier: 8FgWOTrTArALBzOe7kXcodlhZSp+Hk2MCRDaetc2ZQA=
Subject key identifier: 01:8B:AE:CC:31:5A:18:74:A3:FA:E8:57:07:40:95:CD:29:E7:17:E8
Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A
Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
Certificate serial: 0292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
Manifest number: 0284
Signing time: Mon 11 May 2026 01:54:03 +0000
Manifest this update: Mon 11 May 2026 01:54:02 +0000
Manifest next update: Mon 18 May 2026 01:54:02 +0000
Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: 7GKylUrc9oWIXqp/+yw88IpfOx8EZyjkKZfiOzghAQM=)
2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: HKqMxuCnXZUWQyUBbuwuWp132t+lLGFUZQke8Tou0tg=)
3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: MRMfTNKXALiUr+Ks/cwLuFR+d+i53M1YUPrYan/sCwQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl
rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
Validity
Not Before: May 11 01:54:02 2026 GMT
Not After : May 18 01:54:02 2026 GMT
Subject: CN=6a0136ba-4a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:7d:e2:df:31:83:cd:28:67:c9:7e:cc:bd:
c9:88:d0:ad:0a:3f:79:bb:ea:21:99:ab:d5:2a:23:
73:9d:bc:33:e4:7d:76:8e:78:2d:41:e3:40:5f:c2:
0b:8a:08:5c:04:c0:fd:ef:02:ed:4f:32:c0:c9:4e:
61:9b:db:55:63:c4:b9:20:84:08:3f:26:5d:05:22:
6a:ce:e1:1f:05:90:c8:35:e1:f7:c9:c1:7e:63:f1:
17:eb:a7:6b:6a:e7:70:4b:24:a5:6d:f5:49:60:3a:
fc:b0:95:d5:45:fe:2b:52:00:1d:e5:39:58:98:dd:
b8:b1:61:ee:a8:82:9f:b5:f0:c5:07:f0:68:6f:f3:
23:30:36:b8:4e:b6:e5:f5:82:a2:db:51:71:09:11:
51:df:98:5b:05:2f:13:89:3e:56:c8:07:33:1d:37:
54:4d:ed:eb:03:42:d7:86:16:87:63:79:5d:81:69:
5b:df:3e:31:ed:44:09:26:eb:f0:34:7b:66:91:d1:
73:e6:c3:47:ea:11:b5:31:46:2a:1f:c2:02:2d:08:
0c:04:8b:22:1e:b7:d3:48:49:2f:d0:a5:eb:a7:12:
9d:7d:16:db:29:5c:0c:7f:16:4f:0f:76:33:19:4c:
5f:ec:7d:47:58:5f:75:a0:74:c6:ad:88:e3:af:cb:
4c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8B:AE:CC:31:5A:18:74:A3:FA:E8:57:07:40:95:CD:29:E7:17:E8
X509v3 Authority Key Identifier:
keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:b9:7b:92:47:d6:fc:5f:6c:d2:6c:e0:87:96:6d:ee:dc:f9:
00:e8:d5:71:bc:ee:95:21:73:0d:58:6e:df:3f:dd:78:d9:b0:
6b:7e:a0:c2:26:79:ff:55:31:9e:ae:71:ba:30:c7:da:dc:2a:
fe:e4:28:49:32:ca:b7:39:cf:6a:b1:35:34:9a:61:43:60:52:
c6:5a:41:86:dc:50:b2:fb:9f:6a:f4:51:49:4b:4e:f1:ca:7f:
4c:62:2d:59:2e:17:ce:1c:d4:21:b7:2d:24:fc:34:f5:25:1a:
ac:29:4a:98:06:f7:43:8c:a7:4a:e0:dd:b8:76:ca:c0:3a:5a:
5c:18:20:72:0b:9e:df:b2:5c:18:de:39:49:3e:bf:36:71:da:
3f:d1:1f:76:71:a9:b4:54:60:bd:95:7f:68:3d:1c:15:64:33:
c5:c5:65:8b:a4:de:34:89:a0:2d:c2:0d:fe:09:42:df:d1:df:
97:8b:b3:b5:0c:63:e9:c9:07:a9:c0:e0:c4:3a:56:ca:66:fe:
20:ca:30:94:bd:db:b7:2c:eb:e0:49:b6:7a:29:47:37:82:71:
f0:39:fc:3b:1a:6b:4c:d2:75:58:09:23:56:9a:18:8d:71:99:
04:2d:1f:fd:8e:2a:38:7f:12:ab:8f:2e:7e:c6:51:9c:db:40:
7f:b0:54:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:14 2026 by rpki-client