
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
File: hemZwivuAcMmTT0iZ1ghCS__0Cw.mft (raw, json)
Hash identifier: qek3UBF2YqGdImXXPdQFH/JFIiNOY8T230UcLGL7KSA=
Subject key identifier: DA:D7:7B:AD:9F:BA:92:4F:FE:E8:0D:8B:CD:C1:60:06:F4:57:A6:12
Authority key identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C
Certificate issuer: /CN=A91AC132/serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
Manifest number: 010B
Signing time: Mon 11 May 2026 06:09:39 +0000
Manifest this update: Mon 11 May 2026 06:09:39 +0000
Manifest next update: Mon 18 May 2026 06:09:39 +0000
Files and hashes: 1: hemZwivuAcMmTT0iZ1ghCS__0Cw.crl (hash: otpUWK0G77K/aqjr37381IEnner+e02zj9BR/5J6F+4=)
2: 8B91AD8CD6B811EF86FC5149C4F9AE02.roa (hash: UTKE8OB36Bwcjc1JGfweQcZlItW6iUFLSvYsOlfMWTM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl
rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC132, serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C
Validity
Not Before: May 11 06:09:39 2026 GMT
Not After : May 18 06:09:39 2026 GMT
Subject: CN=6a0172a3-577b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:e5:7f:32:ad:4b:5e:db:0e:84:b6:1a:68:
64:6f:5b:63:62:07:59:9d:78:d8:b8:61:22:20:28:
a7:76:e5:43:e1:b6:25:e0:d5:f9:52:16:ae:a3:09:
69:60:b3:b2:a8:c2:ca:9c:f2:6f:0c:a6:4a:a7:3d:
4c:3b:e7:f6:36:2f:e0:3f:83:4c:bf:73:04:c8:07:
d6:f5:b7:c9:53:59:3b:a7:86:53:46:3a:d0:05:02:
d6:27:0a:3d:9d:7b:23:43:c9:dd:64:fb:06:de:61:
fa:13:ba:87:3f:57:19:67:e2:cb:ff:c7:49:33:c2:
f7:4d:b2:eb:76:bb:c5:7e:c9:37:06:e8:fd:4d:0e:
22:d3:b1:f5:cd:7c:90:09:81:a3:0b:88:42:d5:6b:
6c:bf:40:7e:ab:4d:ab:61:4a:4a:86:d6:4d:18:e1:
6d:83:3b:70:64:1b:aa:d9:f6:05:7f:3e:f4:80:cb:
d4:8e:6d:25:93:fc:64:ba:5a:81:bb:8e:8c:38:a3:
6b:f5:c0:9f:66:cf:cd:41:9a:ad:eb:37:6f:e2:9f:
8e:72:55:bd:45:2e:7b:46:14:a5:3b:38:85:92:1e:
08:0a:72:3c:91:08:45:f5:8b:39:23:0f:e4:e7:d6:
99:82:f2:71:c2:ac:3c:9b:1c:1c:86:54:b9:25:ce:
7b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D7:7B:AD:9F:BA:92:4F:FE:E8:0D:8B:CD:C1:60:06:F4:57:A6:12
X509v3 Authority Key Identifier:
keyid:85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:89:c9:63:a1:62:78:93:d6:15:63:07:25:ce:36:e5:31:99:
ab:c7:47:6b:be:7a:a0:c4:7d:9a:47:a0:0f:9f:16:71:ae:09:
75:62:f7:ac:2f:b2:8d:43:5e:7e:8f:96:77:ce:65:cd:a4:e4:
45:fa:4b:d2:9b:83:60:42:b1:31:1b:57:55:57:e6:33:a8:24:
0a:73:66:5f:6d:d8:05:c0:ed:25:f4:5f:d7:a9:84:c8:7d:74:
df:f1:80:5d:7d:60:90:fe:3b:d4:d0:f2:76:73:f3:ec:fc:94:
ba:eb:1e:fa:fa:4d:04:01:bf:2d:fd:e5:dd:b4:d7:e7:8e:d6:
48:60:c9:9b:e7:36:ea:89:a4:12:5a:87:ad:bb:43:68:81:4e:
45:13:e4:e6:9d:f3:b5:92:04:c9:b1:b9:83:6d:70:ee:21:ca:
6f:7b:04:2b:67:c2:7f:ee:6e:99:2d:17:df:a2:16:be:71:84:
77:0d:b3:de:b7:1f:f5:6e:1b:2c:45:6e:d3:75:29:16:f9:c6:
f9:41:07:40:61:be:4e:3c:ee:ac:bc:ec:8b:85:b9:a6:f1:d0:
96:04:15:fb:eb:fe:59:15:00:1b:0c:86:d3:92:fc:71:7d:c7:
87:d3:b0:d7:57:ac:6e:fe:23:b5:16:40:be:90:25:3f:7c:ec:
ef:15:fc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:19 2026 by rpki-client