
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
File: s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json)
Hash identifier: Kgvp1zSflDv/1L30HTF8X+DCTXlGfT9TJL6AF6JmY3U=
Subject key identifier: B4:53:DC:52:66:56:E1:64:CF:DD:32:06:54:F7:EC:F1:90:52:45:FA
Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC
Certificate issuer: /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC
Certificate serial: 0145
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
Manifest number: 0145
Signing time: Fri 25 Sep 2026 05:25:23 +0000
Manifest this update: Fri 25 Sep 2026 05:25:23 +0000
Manifest next update: Fri 02 Oct 2026 05:25:23 +0000
Files and hashes: 1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: FViqqBa/Mjzk7t+0YLqYtC9yTYKqt5jSPPE/KHlOAQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl
rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC
Validity
Not Before: Sep 25 05:25:23 2026 GMT
Not After : Oct 2 05:25:23 2026 GMT
Subject: CN=6ab605c3-6203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:4d:e2:42:bd:98:80:02:1c:f1:72:20:2e:
0f:91:a2:29:77:f7:1e:cc:0b:a0:81:47:bc:63:72:
cd:8d:3f:44:c2:74:ee:fe:92:85:85:dc:de:b1:b5:
8d:08:b5:db:38:4d:4f:5e:9d:95:39:f1:58:8b:c0:
1e:41:1d:a3:44:4c:6c:65:7a:81:64:36:d7:1c:ae:
0a:bd:05:6d:24:91:ee:fc:d9:88:d3:93:f3:92:a3:
89:7b:a5:a3:d5:1e:33:04:60:26:07:80:b2:7d:0f:
de:97:a4:5a:1d:40:21:97:c4:0a:5d:af:44:8d:f4:
2b:e0:46:80:c3:08:d0:ac:b3:6a:c9:59:b7:b7:21:
dc:2b:86:9a:86:93:b9:d5:b0:0d:ac:a1:e6:0a:d4:
f2:45:a5:f4:a5:8b:df:85:75:ed:3e:84:51:3d:bd:
3d:cb:ff:b4:b4:22:1c:70:b7:e3:86:54:92:bf:3f:
4c:d7:70:45:53:f2:44:09:8c:b6:70:1d:0a:98:7a:
1d:c4:2d:8e:35:61:19:f2:bf:d7:a6:dd:9b:51:a4:
e5:a3:ae:5e:d5:76:cb:2f:72:df:ae:28:d1:f8:35:
14:a7:6c:1c:52:4d:d1:c6:0a:fb:66:33:11:ca:26:
0c:35:b9:fd:a0:5e:19:de:97:b3:97:ad:cb:e9:a9:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:53:DC:52:66:56:E1:64:CF:DD:32:06:54:F7:EC:F1:90:52:45:FA
X509v3 Authority Key Identifier:
keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9d:f3:1f:6c:b5:0d:15:66:ad:53:c8:39:df:29:84:c3:00:
22:24:03:53:cf:d0:1a:8d:e0:d7:d3:17:90:26:78:1c:90:39:
5e:2d:33:b2:b4:6a:c4:30:01:f5:f4:d2:12:d0:b8:26:ca:1a:
50:2d:0d:12:a5:a6:f5:05:76:b9:f7:5e:50:6a:02:fc:32:0c:
7c:db:3e:f5:67:ec:1d:23:c0:12:dc:b8:ca:fb:f3:5a:66:6a:
5a:af:b9:41:c1:b4:af:6c:c5:24:b3:ed:c2:a9:1f:5f:17:1a:
64:89:2f:f4:c1:bb:ac:f5:b8:c3:1f:af:24:19:38:7c:a1:02:
b7:b9:67:7c:e2:22:36:5c:5d:23:90:a7:e3:9a:c0:d8:a9:64:
6b:7a:25:c4:86:96:85:05:4e:23:42:09:da:85:1c:d1:ba:82:
8f:f0:78:d3:aa:d1:db:0d:00:c4:ee:a4:2c:69:16:94:39:dc:
ce:7d:3c:09:73:0b:8b:b6:ad:3e:c0:95:d8:55:6d:ba:6e:68:
38:f4:fe:80:d6:a2:48:11:6c:7e:d1:f0:c6:25:f1:74:38:6c:
ce:bb:68:16:5a:4d:d0:d1:cc:7d:8c:be:47:f4:61:1f:6d:bb:
4c:99:a9:bc:43:ff:7c:35:b6:bb:69:9a:23:57:7a:af:bf:05:
c0:45:69:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:20:47 2026 by rpki-client