
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
File: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft (raw, json)
Hash identifier: r8GXKBnHMKgUGaSKtScxF+5pqFGVUPHqwhmshiIT8p8=
Subject key identifier: 6F:ED:B9:19:75:F0:7E:69:11:16:B7:91:FE:AB:62:75:74:9E:7F:CA
Authority key identifier: 85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07
Certificate issuer: /CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
Manifest number: E6
Signing time: Wed 25 Mar 2026 05:41:12 +0000
Manifest this update: Wed 25 Mar 2026 05:41:11 +0000
Manifest next update: Wed 01 Apr 2026 05:41:11 +0000
Files and hashes: 1: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl (hash: Qesp4A+lcwzXC84CWUxH2LGI2onyEe5LRuBOeW5nNT0=)
2: B710956ACD7E11EFBBAE2137C4F9AE02.roa (hash: xCTb7m70C8ktIRA0Y3XISp4G4lVWQ5RasqzMmTsyIbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl
rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAC4B, serialNumber=852046915185F855E09EB344788139430E740F07
Validity
Not Before: Mar 25 05:41:11 2026 GMT
Not After : Apr 1 05:41:11 2026 GMT
Subject: CN=69c37577-649c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:a4:17:5e:97:86:0d:d0:f5:a9:1a:3a:c6:
4f:05:58:81:b4:2b:22:c1:b8:2c:a2:4a:1f:12:21:
bd:e7:15:fc:b3:5e:ce:d3:56:57:6f:be:fc:c0:65:
dd:e1:e8:c1:aa:2f:b6:be:68:e1:28:00:1e:5c:bb:
87:3a:d8:1f:fc:4c:52:cb:36:10:0a:a8:f5:e6:62:
7a:08:45:62:ea:d9:1f:9d:63:be:49:c7:f6:1a:96:
07:18:ac:3c:81:bf:1d:65:43:80:eb:51:c9:d4:fe:
cd:28:54:d0:03:4d:50:c6:df:46:62:0d:d8:86:72:
c4:88:99:c5:00:c7:7c:5a:f6:d1:6c:41:21:d4:df:
bc:ed:bd:76:05:cc:24:d4:08:0d:fd:e4:77:ad:a2:
d1:e4:c7:42:fb:5c:6d:99:9e:b9:d1:50:82:eb:5a:
81:99:f4:dc:69:e0:83:18:1b:d6:69:fa:31:e2:04:
79:0f:cb:2d:c4:c6:21:74:b0:38:e7:8a:68:4a:d2:
2e:7d:87:aa:ba:ef:d2:98:58:5f:78:b6:fe:b2:4a:
17:69:f5:49:7f:48:8f:0f:dd:ab:16:72:ff:28:fd:
74:ab:2d:44:8f:2f:1b:bb:22:8f:f3:1f:e0:57:75:
1b:19:58:f7:c1:19:43:20:e7:42:97:92:df:f6:26:
3b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:ED:B9:19:75:F0:7E:69:11:16:B7:91:FE:AB:62:75:74:9E:7F:CA
X509v3 Authority Key Identifier:
keyid:85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6e:24:29:5f:e6:38:4d:93:d7:26:22:f8:91:f3:d1:2b:0e:
92:6c:92:34:4f:75:b3:16:25:55:d2:b9:28:76:23:a3:b0:27:
3b:64:3a:77:ca:d7:24:d4:56:89:a9:b7:7c:8d:ca:38:09:be:
dc:8b:a2:b8:f9:ea:7f:05:c6:c1:e3:3d:9f:04:87:66:6e:41:
dd:b5:6e:96:fd:44:87:7a:8b:90:a2:bc:27:76:23:67:c1:d7:
f2:72:6a:77:33:a5:d3:42:b0:8b:50:7c:80:4e:e9:80:96:60:
6f:b7:e6:56:98:8a:12:ae:8e:bf:e7:e5:0a:a3:31:6f:78:41:
e9:50:70:c3:ca:0f:7d:d7:2b:38:d8:20:03:c1:1a:de:d3:a5:
98:33:26:58:f0:20:df:28:e6:0c:50:bf:0a:68:ed:28:07:9b:
3f:92:27:54:25:26:56:68:f4:0e:fb:65:a0:e3:a9:79:aa:2c:
dd:8f:f1:d5:8a:03:39:f2:e3:46:d2:26:a7:ee:a5:c0:c4:80:
91:50:f6:c3:d9:78:f8:ae:54:3a:8b:78:bb:37:ca:f1:00:06:
96:b6:fb:a0:2c:e1:61:6e:b6:91:f1:53:09:42:9a:c2:43:9e:
4e:5f:72:79:d2:b9:fb:a5:98:91:a1:b7:71:4a:df:b6:12:4e:
f9:0f:15:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:10 2026 by rpki-client