
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
File: Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft (raw, json)
Hash identifier: 2AIsH1Bs9ciElycY7BJIhG6WWeBdNzZRpXb8xZDP5oU=
Subject key identifier: 74:1E:D4:A9:60:01:F3:F6:57:9A:E3:F0:B0:3D:60:A2:9D:3E:74:65
Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
Certificate issuer: /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Certificate serial: 0524
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
Manifest number: 051B
Signing time: Tue 24 Mar 2026 23:17:19 +0000
Manifest this update: Tue 24 Mar 2026 23:17:19 +0000
Manifest next update: Tue 31 Mar 2026 23:17:19 +0000
Files and hashes: 1: Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl (hash: x5BA+5fliJAJt2zYC+6sNg9t3Mj1PglLqbXiObnNWWU=)
2: B5F911E8429411EC8882FA1EC4F9AE02.roa (hash: /+VDsq15X1B0EicipfKhRf/bc7zJlndTh+wNdlKxteI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl
rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1316 (0x524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFC4E, serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Validity
Not Before: Mar 24 23:17:19 2026 GMT
Not After : Mar 31 23:17:19 2026 GMT
Subject: CN=69c31b7f-09f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:bc:31:17:05:b1:d9:9b:6f:17:4a:8b:3e:
53:1e:6c:a6:c3:e2:4a:bf:61:d3:8b:9a:c4:bf:11:
5d:e8:e2:b3:a8:81:31:9b:dd:de:0a:d2:6a:13:d2:
bf:2b:a8:4b:99:5a:ec:0a:fb:09:52:60:09:a2:99:
e8:91:8c:5f:6d:61:cb:97:bf:c5:38:9c:6e:d3:f2:
7e:81:79:d6:57:bc:e3:4c:4d:26:7b:ec:c8:45:43:
41:26:39:91:c7:36:22:85:5f:ae:29:f2:78:47:58:
38:60:a9:e5:bf:21:54:a7:64:a5:df:58:e5:10:53:
69:35:92:ef:e8:d7:d1:d0:64:07:87:fe:af:92:2c:
3c:15:73:79:12:e2:c8:87:c9:13:4a:ff:b1:09:22:
26:60:41:9f:5d:fe:f1:cd:21:38:4c:f7:c3:be:d4:
38:95:55:84:33:4a:2e:9d:49:04:bc:9d:c8:49:f2:
55:50:44:77:ac:ce:be:6b:17:df:30:22:0b:db:d9:
3a:e7:b4:fb:d0:0e:d1:22:f1:c0:ad:ed:2a:7d:0c:
a1:05:57:21:63:57:d4:84:64:0c:fa:0f:02:4e:25:
98:45:8e:68:b8:7c:77:6b:34:5d:0e:8c:68:cc:d1:
9b:7e:3e:49:99:21:ec:2f:40:ae:a0:f2:7a:6b:6b:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1E:D4:A9:60:01:F3:F6:57:9A:E3:F0:B0:3D:60:A2:9D:3E:74:65
X509v3 Authority Key Identifier:
keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:92:df:02:84:d3:d2:53:00:56:41:f1:d6:0d:68:56:a1:b6:
cd:32:bc:25:2b:3c:4a:07:30:4a:3a:05:66:bf:21:3c:a0:77:
bf:77:35:b2:f5:23:af:73:e9:71:32:4b:b7:e6:ae:98:73:c6:
74:2e:6b:81:39:02:fe:9a:37:da:b3:50:62:6a:79:6b:e4:84:
79:72:38:08:08:d4:b3:fa:43:6d:8b:17:26:43:ff:39:eb:a9:
f5:1c:da:3f:cf:ca:83:75:a3:33:c1:e2:36:0b:6b:6a:9e:fc:
ba:aa:a0:93:38:cd:3d:87:36:a8:4a:97:7b:2c:10:e4:93:cb:
3b:ef:b2:4e:33:41:a2:9d:61:7a:a8:41:f5:fe:81:57:55:b0:
29:27:be:9e:6e:63:18:e9:54:ab:5f:90:87:50:fe:95:3f:1f:
3d:f3:7a:04:3d:e2:4f:df:c2:f4:42:d6:b5:d8:75:ba:a5:ed:
8f:bf:39:d0:82:01:5a:23:67:af:24:02:d7:0a:2b:2e:cd:9a:
37:8e:9b:9e:63:8f:24:e5:99:4a:e6:a4:9f:f4:f2:0a:36:90:
d6:5d:f9:42:e8:da:90:ce:7f:0a:b0:0d:48:fd:96:d2:71:4e:
76:d4:e9:73:81:d7:28:93:2a:9e:cd:92:44:58:86:b9:39:8e:
a0:2a:86:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:18:28 2026 by rpki-client