
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft
File: hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft (raw, json)
Hash identifier: 7WaMtkWlTiqnjVLxM8PnRw1eVhW5WQzFFs6zNt8KbDg=
Subject key identifier: CE:C9:B0:39:2E:B4:BB:F3:71:FF:83:7E:9C:CE:53:99:7B:90:56:FB
Authority key identifier: 85:5E:11:FA:51:BC:26:10:82:C3:DF:B5:5A:86:D5:D8:27:3F:39:D1
Certificate issuer: /CN=A9191136/serialNumber=855E11FA51BC261082C3DFB55A86D5D8273F39D1
Certificate serial: 5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hV4R-lG8JhCCw9-1WobV2Cc_OdE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft
Manifest number: 5E
Signing time: Wed 25 Mar 2026 07:15:50 +0000
Manifest this update: Wed 25 Mar 2026 07:15:49 +0000
Manifest next update: Wed 01 Apr 2026 07:15:49 +0000
Files and hashes: 1: hV4R-lG8JhCCw9-1WobV2Cc_OdE.crl (hash: tXO54LK6FnH1+rpqjaCS64y9BNwCjSTJ1bszzrxO88c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.crl
rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hV4R-lG8JhCCw9-1WobV2Cc_OdE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191136, serialNumber=855E11FA51BC261082C3DFB55A86D5D8273F39D1
Validity
Not Before: Mar 25 07:15:49 2026 GMT
Not After : Apr 1 07:15:49 2026 GMT
Subject: CN=69c38ba5-9261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:8e:cf:68:e7:ab:76:d6:08:cd:89:ec:d6:
90:1e:b0:18:44:c8:90:8a:10:08:a0:a3:df:e2:7b:
c4:4c:0d:5f:e1:94:64:6f:ac:23:3f:fb:c7:a8:c1:
ea:45:17:7c:65:7e:44:37:cb:3d:a9:e8:d5:f7:bc:
35:99:7c:a4:06:06:7e:ef:f1:a7:b0:9b:8a:96:66:
bd:7f:29:88:2d:8a:19:31:86:e2:9a:ad:93:94:57:
b0:26:7c:58:80:0b:2e:1d:a7:55:f0:da:a8:d2:f1:
1f:5d:7c:3a:df:c3:7a:8e:82:35:fc:bc:af:52:43:
85:e9:24:25:6b:a9:c0:75:a3:91:7a:c3:7b:58:7d:
2a:42:34:c2:6a:dc:ce:91:04:67:e5:87:57:9c:9b:
e7:a1:3c:e0:11:6a:48:b3:af:54:f7:20:2d:ff:aa:
fc:00:ea:d7:0d:c5:94:d9:36:2c:88:e2:21:fe:52:
c1:1d:ed:bf:53:ce:58:bd:d2:ae:e3:a3:d2:b0:68:
4a:91:e0:a5:fb:4a:cc:08:13:00:61:97:35:21:6d:
82:94:ce:d3:a6:f9:fb:64:82:7f:5d:4a:ea:a4:0f:
e1:8c:0b:22:94:b9:66:af:1f:de:7c:94:74:d2:7d:
a3:3d:6a:62:2d:3b:15:0c:12:c8:cf:e6:cb:ce:7c:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C9:B0:39:2E:B4:BB:F3:71:FF:83:7E:9C:CE:53:99:7B:90:56:FB
X509v3 Authority Key Identifier:
keyid:85:5E:11:FA:51:BC:26:10:82:C3:DF:B5:5A:86:D5:D8:27:3F:39:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hV4R-lG8JhCCw9-1WobV2Cc_OdE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:46:f5:24:d2:4b:2a:81:73:ff:c6:ce:0c:b1:6d:22:98:0a:
72:09:0f:90:15:d2:bc:63:f8:43:90:9c:df:5d:d0:d6:d9:e1:
34:6f:83:7d:56:a9:16:02:68:65:51:e1:96:26:28:7d:68:b8:
10:a1:4f:5a:84:82:3c:2a:2e:6f:38:62:4b:91:d6:47:b4:c6:
45:ee:36:20:df:76:c6:33:5c:07:10:62:c9:92:44:44:3a:24:
f2:a9:25:3e:b7:e7:96:3b:20:c3:d5:0e:98:a2:aa:9d:60:ea:
6a:3e:d7:e3:1b:95:ca:18:78:24:24:9e:f9:13:e2:74:50:21:
56:5e:82:66:ce:7d:af:05:f3:87:e9:34:7a:e6:66:b9:cf:6b:
a5:e9:09:be:39:1a:fb:fd:71:48:e9:7b:28:ad:21:4e:cb:2d:
00:9c:1f:46:ca:2d:14:c6:e6:dd:f5:fd:ad:f4:e2:05:2f:80:
d4:f6:65:73:60:16:c3:9c:b1:ab:84:15:a1:c1:b3:1e:be:7f:
39:d4:d1:a8:63:ab:81:96:94:7c:a6:7b:81:01:a7:25:a3:24:
6e:b9:6c:d9:07:d2:96:f0:9b:1f:ca:21:c8:60:fe:ac:77:50:
19:86:dd:f8:b5:5f:85:14:8b:7d:bb:8d:45:38:28:b7:cf:ce:
a1:b5:4e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:18 2026 by rpki-client