
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
File: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft (raw, json)
Hash identifier: TPf4ZDlfr9DTNzvz045fB5A6Hn0oopDsugJ84o3FvE8=
Subject key identifier: BC:F2:10:C1:1A:57:BD:22:19:AC:B3:33:8D:EA:F3:EA:C0:02:60:C6
Authority key identifier: 85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07
Certificate issuer: /CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
Manifest number: FF
Signing time: Wed 13 May 2026 06:18:14 +0000
Manifest this update: Wed 13 May 2026 06:18:13 +0000
Manifest next update: Wed 20 May 2026 06:18:13 +0000
Files and hashes: 1: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl (hash: RZ6s/Ei7bp9e/ZI5XCrYrnorLKl3AyJytJnvqqp8TNQ=)
2: B710956ACD7E11EFBBAE2137C4F9AE02.roa (hash: xCTb7m70C8ktIRA0Y3XISp4G4lVWQ5RasqzMmTsyIbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl
rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAC4B, serialNumber=852046915185F855E09EB344788139430E740F07
Validity
Not Before: May 13 06:18:13 2026 GMT
Not After : May 20 06:18:13 2026 GMT
Subject: CN=6a0417a6-6a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:78:c8:07:bd:80:7a:a4:7a:98:be:b7:7b:
1d:4e:ea:c3:e0:fa:4f:f0:b0:04:6d:f9:ef:43:13:
f2:9e:e3:2f:fe:15:b0:3e:56:1f:14:d7:89:dc:87:
1a:0f:7e:05:02:6e:72:8f:db:a4:2f:6a:a1:24:0a:
bb:7e:a5:d3:59:56:a0:b9:bc:b2:fe:c1:63:97:01:
72:c6:d0:20:e7:14:c0:76:76:9d:3f:56:a3:9b:90:
50:10:5e:eb:70:07:0d:dc:1c:b3:1d:e9:a6:18:cf:
c4:3f:3e:7e:59:a8:f4:a3:d2:a2:56:54:3e:cc:1f:
0e:6d:f7:2b:68:bd:e8:f7:ab:3e:a0:48:93:7b:86:
d8:a9:c4:28:05:21:00:57:50:69:2a:19:74:65:2f:
af:ea:2a:ef:2c:fa:a6:cb:ad:0c:62:92:ee:2e:d3:
82:54:5d:57:96:c2:8f:17:fe:c1:31:7d:2b:96:1e:
d1:f1:6a:64:d0:58:e3:e6:9f:5b:de:3d:c9:d7:21:
3b:6a:19:82:b1:7d:f9:50:2c:4d:1d:4b:fe:d6:7e:
d1:c0:9c:bd:be:22:38:5e:4d:e5:dd:c4:fc:16:c0:
56:37:51:93:f8:bf:d2:b1:1e:0a:82:df:b7:c8:17:
8d:c5:96:6a:5d:83:a4:bd:ba:2e:4d:d4:70:da:b3:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F2:10:C1:1A:57:BD:22:19:AC:B3:33:8D:EA:F3:EA:C0:02:60:C6
X509v3 Authority Key Identifier:
keyid:85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:55:65:e1:bb:d5:62:a4:b1:79:19:fd:74:38:37:3a:2b:d6:
ee:2f:8c:22:c8:21:0c:fb:47:9e:78:5f:de:60:b5:5e:cf:95:
7a:e4:cf:8a:93:db:e3:ef:ca:bf:6f:61:85:b7:d0:81:e0:c6:
80:fb:49:63:b3:4f:15:3e:dd:78:a5:c1:f5:7e:28:a8:c9:2a:
f9:4a:af:16:ab:aa:54:96:c9:2b:54:65:75:1c:ea:00:d6:d1:
3d:df:9c:99:fd:26:e3:9b:fd:6f:73:af:96:48:b3:22:b2:af:
6c:62:89:35:43:70:1e:7e:e8:c5:79:a0:61:30:31:03:4d:50:
56:a6:22:d2:08:64:b2:3d:98:e5:ef:a5:e3:46:bf:87:7f:58:
19:17:3d:53:ce:b3:87:49:d2:94:a1:d1:07:31:b8:b0:61:78:
c3:1b:d3:6d:5e:3f:0a:a7:c5:a6:5d:21:d1:5c:eb:2e:c3:fa:
a5:59:32:6e:31:97:dc:b1:35:f7:64:55:aa:da:f6:95:7d:b8:
23:08:6b:51:bc:4b:23:29:78:ad:ad:63:5e:ea:b9:41:87:10:
0a:15:0a:30:02:91:b5:e4:61:58:50:d1:15:9b:a5:3f:29:6b:
22:d6:34:04:6e:4e:e1:6d:32:5e:89:51:37:8f:db:c2:f1:25:
ef:96:0f:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFDNEIxMTAvBgNVBAUTKDg1MjA0NjkxNTE4NUY4NTVFMDlFQjM0NDc4ODEzOTQz
MEU3NDBGMDcwHhcNMjYwNTEzMDYxODEzWhcNMjYwNTIwMDYxODEzWjAYMRYwFAYD
VQQDEw02YTA0MTdhNi02YTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1mN4yAe9gHqkepi+t3sdTurD4PpP8LAEbfnvQxPynuMv/hWwPlYfFNeJ3Ica
D34FAm5yj9ukL2qhJAq7fqXTWVagubyy/sFjlwFyxtAg5xTAdnadP1ajm5BQEF7r
cAcN3ByzHemmGM/EPz5+Waj0o9KiVlQ+zB8ObfcraL3o96s+oEiTe4bYqcQoBSEA
V1BpKhl0ZS+v6irvLPqmy60MYpLuLtOCVF1XlsKPF/7BMX0rlh7R8Wpk0Fjj5p9b
3j3J1yE7ahmCsX35UCxNHUv+1n7RwJy9viI4Xk3l3cT8FsBWN1GT+L/SsR4Kgt+3
yBeNxZZqXYOkvbouTdRw2rOtUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLzyEMEa
V70iGayzM43q8+rAAmDGMB8GA1UdIwQYMBaAFIUgRpFRhfhV4J6zRHiBOUMOdA8H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUM0Qi9FNjM1Rjc5NkNE
N0QxMUVGQUEwNzIzMEFDNEY5QUUwMi9oU0JHa1ZHRi1GWGduck5FZUlFNVF3NTBE
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hTQkdrVkdGLUZYZ25yTkVlSUU1UXc1MER3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUM0Qi9FNjM1Rjc5NkNEN0QxMUVGQUEwNzIzMEFDNEY5QUUwMi9oU0JHa1ZHRi1G
WGduck5FZUlFNVF3NTBEd2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd1Vl4bvVYqSxeRn9dDg3OivW7i+MIsghDPtHnnhf3mC1Xs+VeuTPipPb4+/K
v29hhbfQgeDGgPtJY7NPFT7deKXB9X4oqMkq+UqvFquqVJbJK1RldRzqANbRPd+c
mf0m45v9b3OvlkizIrKvbGKJNUNwHn7oxXmgYTAxA01QVqYi0ghksj2Y5e+l40a/
h39YGRc9U86zh0nSlKHRBzG4sGF4wxvTbV4/CqfFpl0h0VzrLsP6pVkybjGX3LE1
92RVqtr2lX24IwhrUbxLIyl4ra1jXuq5QYcQChUKMAKRteRhWFDRFZulPylrItY0
BG5O4W0yXolRN4/bwvEl75YP4w==
-----END CERTIFICATE-----
Generated at Wed May 13 12:03:37 2026 by rpki-client