
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
File: hbfttaaEvj2aYpdZkKcdmY3vUYs.mft (raw, json)
Hash identifier: gKHVmUMPZvrgMuvvn9ZaiYI2/rzH8Q697OEHLbFFTNA=
Subject key identifier: 47:A9:5F:3B:AF:D0:AF:9C:EC:04:0B:1D:5B:0F:3D:30:08:BF:1E:D4
Authority key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B
Certificate issuer: /CN=A91B62E1/serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
Manifest number: 58
Signing time: Mon 11 May 2026 08:16:45 +0000
Manifest this update: Mon 11 May 2026 08:16:45 +0000
Manifest next update: Mon 18 May 2026 08:16:45 +0000
Files and hashes: 1: hbfttaaEvj2aYpdZkKcdmY3vUYs.crl (hash: h8iU1gjef0At/O9qN+i1Oipdh8elMVkp1dP3Xvo74W0=)
2: 146F4288C8E711F0A7C33B4CC4F9AE02.roa (hash: mWJy1v+ne8mjUCBxQ8B6n5ShRR6xhgziEl5EgVMvzV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl
rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B
Validity
Not Before: May 11 08:16:45 2026 GMT
Not After : May 18 08:16:45 2026 GMT
Subject: CN=6a01906d-d412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:da:ce:77:96:12:06:5a:c2:d6:81:8c:5c:
22:56:d8:15:18:a5:c5:49:31:02:7b:e4:56:43:aa:
c1:85:d3:c6:4d:23:13:6d:54:3a:89:c2:61:c3:04:
78:cd:51:02:ca:78:c1:ea:25:b7:02:17:72:8a:85:
45:6d:96:d5:26:ef:8d:25:f5:b3:f1:3c:26:40:1f:
91:60:08:89:b6:d9:05:45:7d:cf:88:33:47:a9:e4:
1c:89:b1:14:bc:74:2e:16:06:5a:19:6b:45:ac:30:
91:cd:05:2d:b1:cd:59:d9:18:e8:f8:39:6c:83:3b:
75:55:e7:41:03:ba:a2:96:53:88:d2:ec:f5:0b:e8:
76:17:f4:de:c6:56:69:af:7c:04:48:15:f4:e6:34:
f0:86:ed:39:f1:02:c9:54:5b:9c:4e:2f:a5:fb:ad:
09:51:60:93:ad:16:2f:45:d0:f6:80:73:4f:67:2d:
40:13:a2:5b:88:14:ab:3d:c8:0f:0d:12:e6:9d:66:
a1:e8:c1:1a:61:28:f0:83:4b:3e:46:b4:52:d3:83:
04:57:89:c0:a4:1b:63:e9:88:e6:22:8c:c5:d3:a8:
64:67:88:dd:dc:59:e5:df:70:41:c0:8f:27:af:61:
cd:fb:b3:e2:fa:61:4c:0e:a6:e4:05:2c:3d:4a:53:
e1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A9:5F:3B:AF:D0:AF:9C:EC:04:0B:1D:5B:0F:3D:30:08:BF:1E:D4
X509v3 Authority Key Identifier:
keyid:85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:f7:b6:37:c2:25:72:c1:cc:e9:eb:eb:14:20:af:1d:14:25:
c1:34:c3:50:bf:06:df:14:02:f5:72:0a:ee:48:44:b7:6b:2f:
d8:f3:61:05:f4:d1:90:bf:da:f9:39:ea:27:b8:b6:d9:ca:99:
23:6f:3c:2f:6f:91:0d:5c:6f:c4:25:ff:ce:c6:63:47:09:de:
96:c9:b6:0a:75:2f:46:d5:03:71:5c:a0:61:da:01:cb:b8:32:
c7:d6:4a:69:52:13:fd:68:ff:75:c9:30:77:3f:56:33:6c:32:
af:e0:2a:20:81:12:c1:bd:f8:58:d9:0f:d8:c8:5f:50:aa:c0:
3a:4e:9e:6d:1e:63:27:20:65:7d:e8:1a:a8:c2:c8:48:6d:ba:
49:01:5a:1c:09:d1:8b:61:cd:a4:4c:cf:90:cf:4b:d2:f6:d5:
94:c1:9a:8d:9f:7d:a2:b3:13:9f:40:c3:90:ca:63:63:64:1a:
8a:f8:f2:ea:a1:30:5b:2a:76:01:59:8f:67:86:22:eb:c2:eb:
bf:df:ce:9f:c7:29:13:67:0e:b3:30:e3:dc:68:95:c2:84:40:
2e:f8:47:fe:13:27:ef:eb:0e:7e:b0:cb:fa:4c:be:5a:d8:6a:
d6:94:ec:b1:49:0c:c8:5c:c7:7c:8f:a5:80:bf:49:b9:90:9d:
e4:50:a8:f4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NjJFMTExMC8GA1UEBRMoODVCN0VEQjVBNjg0QkUzRDlBNjI5NzU5OTBBNzFEOTk4
REVGNTE4QjAeFw0yNjA1MTEwODE2NDVaFw0yNjA1MTgwODE2NDVaMBgxFjAUBgNV
BAMTDTZhMDE5MDZkLWQ0MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQ2trOd5YSBlrC1oGMXCJW2BUYpcVJMQJ75FZDqsGF08ZNIxNtVDqJwmHDBHjN
UQLKeMHqJbcCF3KKhUVtltUm740l9bPxPCZAH5FgCIm22QVFfc+IM0ep5ByJsRS8
dC4WBloZa0WsMJHNBS2xzVnZGOj4OWyDO3VV50EDuqKWU4jS7PUL6HYX9N7GVmmv
fARIFfTmNPCG7TnxAslUW5xOL6X7rQlRYJOtFi9F0PaAc09nLUAToluIFKs9yA8N
EuadZqHowRphKPCDSz5GtFLTgwRXicCkG2PpiOYijMXTqGRniN3cWeXfcEHAjyev
Yc37s+L6YUwOpuQFLD1KU+HzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUR6lfO6/Q
r5zsBAsdWw89MAi/HtQwHwYDVR0jBBgwFoAUhbfttaaEvj2aYpdZkKcdmY3vUYsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MkUxLzBBQkIzNTY4QzhF
NjExRjBBQTBDNUI0N0M0RjlBRTAyL2hiZnR0YWFFdmoyYVlwZFprS2NkbVkzdlVZ
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaGJmdHRhYUV2ajJhWXBkWmtLY2RtWTN2VVlzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2
MkUxLzBBQkIzNTY4QzhFNjExRjBBQTBDNUI0N0M0RjlBRTAyL2hiZnR0YWFFdmoy
YVlwZFprS2NkbVkzdlVZcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAC97Y3wiVywczp6+sUIK8dFCXBNMNQvwbfFAL1cgruSES3ay/Y82EF9NGQv9r5
OeonuLbZypkjbzwvb5ENXG/EJf/OxmNHCd6WybYKdS9G1QNxXKBh2gHLuDLH1kpp
UhP9aP91yTB3P1YzbDKv4CoggRLBvfhY2Q/YyF9QqsA6Tp5tHmMnIGV96BqowshI
bbpJAVocCdGLYc2kTM+Qz0vS9tWUwZqNn32isxOfQMOQymNjZBqK+PLqoTBbKnYB
WY9nhiLrwuu/386fxykTZw6zMOPcaJXChEAu+Ef+Eyfv6w5+sMv6TL5a2GrWlOyx
SQzIXMd8j6WAv0m5kJ3kUKj0
-----END CERTIFICATE-----
Generated at Wed May 13 06:43:30 2026 by rpki-client