
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
File: HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft (raw, json)
Hash identifier: QztlwkJRkOZxc7kJy/nQumU9bz0Mnit4W625/r5snwk=
Subject key identifier: 05:99:F9:41:33:12:B8:8C:DE:3B:EE:C5:6D:27:65:F8:8E:94:2A:98
Authority key identifier: 1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08
Certificate issuer: /CN=A91B6066/serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
Certificate serial: E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
Manifest number: E1
Signing time: Wed 13 May 2026 06:42:54 +0000
Manifest this update: Wed 13 May 2026 06:42:53 +0000
Manifest next update: Wed 20 May 2026 06:42:53 +0000
Files and hashes: 1: HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl (hash: 92WdZIAWpErHBr5WG4bgYkVFELNAhh0f82HleU2W8Pk=)
2: CB16EA82FB6411EF90E1E429C4F9AE02.roa (hash: J85gs2PwspStHZ1QSJgFlpSUo7AYF6KcJxoS8YQ7YiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl
rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6066, serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
Validity
Not Before: May 13 06:42:53 2026 GMT
Not After : May 20 06:42:53 2026 GMT
Subject: CN=6a041d6e-3809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:d1:dd:59:26:97:a4:4e:47:06:ce:77:f0:
34:99:3d:d4:bc:3c:00:3b:f0:a9:2f:7b:cd:14:b8:
f5:59:aa:52:1c:8c:10:83:5c:2d:cd:6d:b8:3e:66:
64:a0:81:4a:e4:8d:6c:e1:f9:17:f2:cc:26:56:02:
3d:c6:b1:b7:65:01:c8:44:a3:04:76:ae:c3:95:fd:
2d:f0:33:eb:68:12:c5:2c:c8:ea:cd:82:31:80:02:
d4:61:ac:21:91:a3:72:46:c4:88:cc:10:a9:b4:43:
0e:8b:7c:51:1a:ea:41:62:8e:64:dd:92:07:44:45:
62:aa:f9:2a:14:3b:cd:0b:1e:a3:d6:6d:9a:e5:60:
07:6d:d8:93:38:4f:7a:64:64:43:9e:75:86:f7:80:
f7:70:6b:cb:e6:dd:30:81:42:0f:a3:7e:21:ca:8a:
a6:93:54:37:5a:c6:14:04:2f:4f:15:e6:c2:82:49:
f1:8c:6c:0b:2e:50:1d:a8:35:fe:97:85:67:db:2c:
0e:c3:80:06:8d:2c:d9:b4:fd:b5:44:42:30:49:a5:
47:e0:d3:95:b8:ea:06:59:55:58:ca:5e:c4:39:a7:
9d:95:ba:d6:fb:6d:5f:7b:55:17:03:48:20:6d:50:
a0:d8:c3:17:be:c5:2f:cd:58:44:ae:0e:43:3e:2e:
78:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:99:F9:41:33:12:B8:8C:DE:3B:EE:C5:6D:27:65:F8:8E:94:2A:98
X509v3 Authority Key Identifier:
keyid:1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1e:e8:c8:14:6d:c1:fc:e0:40:ae:bc:5c:5f:a2:bd:c7:15:
7f:42:f8:7a:67:31:47:75:0d:c7:b7:9f:75:a2:40:c7:8e:21:
fc:c3:9a:58:7b:ac:a0:bb:be:0a:9d:00:0e:b9:f1:22:e5:d4:
3f:4c:1a:ac:46:cd:38:ff:f4:3f:b6:22:41:91:dd:20:23:ff:
07:e3:17:01:89:9b:7f:4f:f8:94:36:f2:cb:94:1c:d5:34:8b:
c8:a1:db:98:8c:10:7c:49:37:d3:87:2e:db:71:11:2a:c5:f5:
92:51:a4:e3:f4:1e:56:85:e2:2f:33:7f:4a:9d:2c:70:0f:12:
cc:84:a0:7e:53:40:df:f7:59:6a:13:1d:a7:f5:b6:ee:11:0c:
a6:a9:4e:3c:05:7e:ac:62:23:3e:48:2d:af:26:61:f3:27:85:
0b:c0:8f:43:cf:3b:64:f3:22:2d:7a:77:ed:ba:b1:89:ce:8f:
a7:46:29:af:c1:e0:22:67:aa:04:ea:7f:57:9f:ba:63:b2:22:
dc:a4:f2:ca:fe:ee:2d:c1:80:39:92:2c:bb:89:a8:f1:cf:b2:
83:c9:07:89:4a:5e:ed:eb:cf:1b:de:87:61:4d:d2:07:31:45:
07:3e:ad:54:82:79:7e:66:0d:39:7d:0d:5e:f8:56:4e:4e:2d:
bf:4f:ed:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:14:44 2026 by rpki-client