
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
File: HT4YuPamfZKWztceIZJFoygFJn0.mft (raw, json)
Hash identifier: f/4eHNkF2BR3sk9E+cTI/O4Zk9qDlTKuBElsz7hq6GA=
Subject key identifier: C0:F5:37:A1:A7:30:32:7F:43:00:E7:76:13:F6:12:B1:2F:FC:6F:E8
Authority key identifier: 1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
Certificate issuer: /CN=A91AD5C8/serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Certificate serial: 2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
Manifest number: 2B
Signing time: Wed 25 Mar 2026 07:56:30 +0000
Manifest this update: Wed 25 Mar 2026 07:56:30 +0000
Manifest next update: Wed 01 Apr 2026 07:56:30 +0000
Files and hashes: 1: HT4YuPamfZKWztceIZJFoygFJn0.crl (hash: 1l4psQ74fxmhoe+BZ95DfRsWVmHVxmUxdTZrjHDmsLQ=)
2: 40DFA7D2EF8811F0A94034DF606F56BC.roa (hash: r01cCM8Cr1fBBAypHwZvdCaBHe7BaHRTnIOSdsNilxQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD5C8, serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Validity
Not Before: Mar 25 07:56:30 2026 GMT
Not After : Apr 1 07:56:30 2026 GMT
Subject: CN=69c3952e-4948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:25:ec:84:d0:91:0d:78:76:e5:55:5c:66:
f6:31:91:c2:01:a0:a3:13:16:ae:32:5f:85:f0:54:
1a:40:8a:c3:44:be:cc:91:88:32:83:2b:41:3e:9d:
fb:85:b3:00:99:e0:40:9d:18:19:32:ed:e6:75:59:
47:a2:04:7b:b6:80:e0:41:40:cc:bb:00:be:fc:a7:
12:b8:03:a2:cd:0b:c2:8d:63:9f:61:aa:c6:bc:b4:
4c:b3:c3:12:4c:24:82:df:e1:bf:27:eb:e8:08:cd:
40:85:23:26:f3:3e:84:1e:5c:bc:90:88:f4:79:3b:
0b:c8:d8:d3:7c:09:2b:89:6e:d0:d3:f9:df:5b:b7:
90:f2:e7:fd:8a:73:26:79:ad:9e:31:df:13:6b:96:
3b:47:1f:93:a4:f9:90:3b:b4:95:0d:b1:1b:97:43:
1b:7f:97:b9:b1:96:1c:c5:2e:8c:cc:81:5a:f1:26:
ee:69:ca:42:22:3a:b4:da:ba:40:d9:34:70:d1:4e:
d2:1b:03:7c:0b:33:9b:1d:69:b0:de:63:24:12:e3:
ff:eb:e4:2a:16:e9:e3:a6:c3:2c:a5:44:dc:df:11:
64:da:9e:84:80:4f:4c:11:9c:5a:13:ad:7d:37:d5:
28:bb:a2:87:b2:c8:21:c6:5f:eb:61:f4:c7:40:ae:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F5:37:A1:A7:30:32:7F:43:00:E7:76:13:F6:12:B1:2F:FC:6F:E8
X509v3 Authority Key Identifier:
keyid:1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:ad:8d:b4:75:ab:0b:77:c0:50:5d:32:8a:60:3b:a9:79:1a:
2b:2c:48:53:f8:fe:8f:40:e5:40:b8:fd:29:10:1e:e1:e3:e4:
98:c1:06:d9:a9:8e:b1:a8:81:40:49:cf:bf:26:20:9e:53:f8:
e8:ad:43:b4:ec:26:8b:ff:27:75:86:66:90:41:9f:2a:b9:25:
2a:53:24:4c:e8:27:c0:7f:53:11:65:f3:58:d3:c4:7b:12:96:
7b:a1:64:6e:be:a0:3b:7e:2f:d1:26:62:62:e3:15:cf:3f:5a:
ef:66:f1:56:6f:3f:0e:91:78:a9:dc:c3:f4:be:fe:a9:65:69:
92:62:2a:4d:23:4b:fd:f6:38:b7:50:a1:0a:40:cd:9c:10:d8:
42:8a:32:de:3f:61:d6:7e:27:ac:28:00:6f:94:2c:24:5b:73:
13:b4:f7:f7:0f:0e:6d:1b:ad:9c:21:cb:b5:16:c3:a5:a9:ea:
5f:e0:61:0d:f8:54:e5:2b:c7:1e:78:bd:37:9c:32:af:6b:c5:
c8:ef:d2:69:41:b8:e3:fc:84:a3:4e:d8:e7:f2:d5:f3:0c:ee:
aa:47:3e:d0:21:cf:96:38:63:2d:d0:4e:f1:d0:ff:e4:3f:84:
70:de:8f:09:9c:52:06:c5:00:93:d9:df:d7:fc:18:e1:19:43:
e1:d1:f5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:52 2026 by rpki-client