
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
File: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft (raw, json)
Hash identifier: xINSb4sxTWHqaNg9/u2Mlr0GJW+JHyAZeElZCdhZWu4=
Subject key identifier: 7D:12:D4:B6:A0:CF:18:7E:82:9C:D0:ED:E6:8F:01:BB:F2:08:DB:3B
Authority key identifier: 85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07
Certificate issuer: /CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
Manifest number: 0143
Signing time: Fri 25 Sep 2026 05:27:44 +0000
Manifest this update: Fri 25 Sep 2026 05:27:43 +0000
Manifest next update: Fri 02 Oct 2026 05:27:43 +0000
Files and hashes: 1: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl (hash: XKuvOQtL6ekIXfl0CNiME8fQYDNm2ozkEMHfHvKiMMc=)
2: B710956ACD7E11EFBBAE2137C4F9AE02.roa (hash: xCTb7m70C8ktIRA0Y3XISp4G4lVWQ5RasqzMmTsyIbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl
rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAC4B, serialNumber=852046915185F855E09EB344788139430E740F07
Validity
Not Before: Sep 25 05:27:43 2026 GMT
Not After : Oct 2 05:27:43 2026 GMT
Subject: CN=6ab6064f-293f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:28:fb:13:63:5b:1e:f4:a9:54:ea:3b:b1:
f7:ff:db:34:ad:0a:c2:48:05:3a:27:69:dc:bc:19:
12:c3:e8:de:20:90:d4:c0:5a:5c:e3:b7:47:f7:0e:
19:9a:fb:34:96:9a:ff:9f:3e:94:e2:14:1d:fb:8a:
a7:33:4e:c4:df:a0:c0:ae:bf:e0:94:77:f7:bb:ec:
b7:94:b4:9f:f7:93:01:d6:f8:7e:67:e6:3a:f8:a7:
67:42:e7:fd:11:53:ac:6e:f7:ac:9e:34:7f:5a:df:
41:11:cd:e0:ce:91:cc:4c:58:0c:83:7d:47:f5:af:
e6:30:fb:be:1c:c0:b9:33:ac:65:9e:7f:f7:9e:da:
90:2c:a6:19:b9:53:c5:a5:c7:f6:c4:0c:89:42:d4:
60:15:4a:cc:72:35:10:44:28:31:d8:e0:d2:f4:6d:
69:f5:fc:12:b9:9d:9e:57:36:cb:94:12:e6:e3:e6:
83:da:f3:07:5a:41:25:30:be:89:2f:ba:2e:3f:d4:
63:09:ed:ee:87:ac:6f:15:5a:f7:22:93:2c:2f:3e:
d1:63:7a:24:42:eb:71:6e:c2:ce:f5:24:28:f3:a9:
52:d2:33:0c:2f:49:fe:e7:89:7a:5b:b6:61:0d:88:
4f:d0:69:57:73:26:9c:a8:e3:21:b1:7d:42:eb:6a:
57:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:12:D4:B6:A0:CF:18:7E:82:9C:D0:ED:E6:8F:01:BB:F2:08:DB:3B
X509v3 Authority Key Identifier:
keyid:85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:45:66:1a:88:a6:8f:49:58:6b:b9:4d:66:ab:49:77:f8:c6:
a3:22:aa:e7:61:bb:18:1d:c7:c6:04:3d:65:97:42:0a:cf:75:
2a:67:89:1b:41:91:19:82:08:3d:3a:e3:46:68:08:55:2e:0f:
73:b2:a8:dd:20:8c:8b:da:e3:65:e6:6a:97:00:b2:db:a4:b8:
8a:db:4d:ad:70:50:07:d2:21:11:46:e4:82:4c:13:62:ea:09:
39:d3:df:39:f8:6f:d2:e7:8f:26:85:ce:6a:cd:53:d9:43:6a:
62:16:e6:cd:bd:80:0a:9b:e0:d6:46:b7:38:bc:c5:fb:88:44:
c8:cc:fb:ef:b7:1b:97:c4:fa:4c:b3:22:c2:e7:34:ff:b7:49:
e7:0b:b8:f5:7c:73:8f:af:99:1e:0b:d4:5b:7d:77:ec:21:66:
de:05:c5:b5:67:44:43:79:73:21:51:1e:20:7e:38:1f:9f:60:
f4:27:a1:c2:e5:ed:c8:40:ba:2d:5c:33:36:02:76:16:f2:82:
bd:1e:8f:f2:8b:45:a6:21:64:29:1a:09:28:ea:ca:80:c4:2f:
71:56:29:57:c5:fd:4e:06:8b:40:45:64:5a:12:71:a0:ef:86:
00:00:90:40:69:e3:8e:80:ac:9f:1c:e4:7c:db:bd:cf:59:58:
53:58:dd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:32:22 2026 by rpki-client