
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft
File: hhIZKNm0AeMdansgbrAWLThuBHI.mft (raw, json)
Hash identifier: kzPhDCyjVnq1I94TgJj3k56IpsChzd3oUMInUEYB/CE=
Subject key identifier: 7F:7F:92:12:59:E8:16:58:37:62:9A:67:16:64:FE:86:E2:47:20:77
Authority key identifier: 86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72
Certificate issuer: /CN=A91B8C6C/serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft
Manifest number: 98
Signing time: Thu 24 Sep 2026 15:05:47 +0000
Manifest this update: Thu 24 Sep 2026 15:05:46 +0000
Manifest next update: Thu 01 Oct 2026 15:05:46 +0000
Files and hashes: 1: hhIZKNm0AeMdansgbrAWLThuBHI.crl (hash: /PtogIkLHe2Uxw6ZDKHj045dnSSJSKJ/LPJebbWwtJ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.crl
rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8C6C, serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472
Validity
Not Before: Sep 24 15:05:46 2026 GMT
Not After : Oct 1 15:05:46 2026 GMT
Subject: CN=6ab53c4b-fe1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:c2:08:d2:9c:6f:6c:4b:8f:26:28:e3:a8:
4b:5f:d6:01:ed:5a:f2:90:0e:85:3a:6a:54:1f:f9:
c5:1e:47:24:aa:86:88:74:56:f3:c9:4f:9c:98:e9:
32:ff:7d:d3:42:34:c1:24:4c:6e:97:95:a3:61:e5:
81:c0:7a:c4:9a:e5:71:8f:3c:72:a6:39:3e:10:b7:
32:a7:b9:2e:75:ca:7e:61:20:db:9f:02:1d:a4:e8:
61:f5:a5:30:4a:fe:c2:e6:d1:73:59:5d:98:c4:ad:
45:ee:0e:21:19:bf:cc:4f:ae:c0:e6:e5:5a:df:00:
62:f8:86:2f:d4:2d:7b:11:10:10:58:11:54:5b:e8:
2a:6d:ca:88:2e:ed:c0:03:db:18:50:35:6b:33:db:
0d:92:f0:14:5d:99:06:9d:23:f8:d0:d3:b3:8b:77:
c4:a4:4c:bc:44:c6:bd:82:d2:2b:11:c1:97:64:ec:
9f:da:ca:42:20:bf:58:c5:71:b6:d1:08:54:dc:2f:
8f:dc:72:6f:1e:65:a4:b2:9f:2b:d5:f1:3e:90:c0:
b5:d5:e8:ee:96:4b:25:65:8c:23:6b:98:59:7f:b7:
17:2e:a9:20:88:93:73:a7:86:52:06:b0:26:b5:0d:
8c:f9:d4:89:b7:c9:75:b5:d2:d2:13:99:46:13:cd:
ae:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7F:92:12:59:E8:16:58:37:62:9A:67:16:64:FE:86:E2:47:20:77
X509v3 Authority Key Identifier:
keyid:86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:4f:c6:65:b1:21:bb:b0:a5:50:e5:40:3b:61:23:9b:82:95:
7c:d4:ae:fb:6e:aa:c0:5c:35:4f:43:51:5d:e3:37:9b:50:18:
4b:05:50:93:a2:cc:68:5a:05:25:83:12:50:b6:83:b8:b3:85:
32:52:04:d4:5b:df:cf:e3:21:24:21:f0:43:af:f9:85:98:5f:
6a:1b:47:92:6a:72:0c:26:7c:a4:68:9e:4c:ec:ef:71:af:2a:
62:b5:ee:4b:ca:b9:01:b9:b7:bd:ee:96:0f:10:a9:de:1e:b1:
2c:4a:06:33:48:bb:28:26:8e:d2:88:0f:6e:44:a3:d6:ab:fc:
67:c6:21:c1:d5:28:4a:86:b6:a1:59:89:97:90:0b:9b:12:d6:
d8:40:f1:c4:b8:dd:c4:1f:1c:28:37:e8:4f:84:e6:c6:1d:b1:
b2:7c:3e:ec:10:58:91:6b:10:f7:a5:40:fc:14:cb:12:ea:ae:
49:ea:dc:90:25:bf:de:14:57:5f:13:7e:c6:2c:59:4e:9b:3f:
00:dc:d5:53:e2:c9:a0:cd:41:e1:10:61:5a:70:f8:70:3a:d8:
4d:47:0b:d8:95:94:04:5e:33:fb:6d:f2:53:48:4f:a2:53:2a:
9f:43:90:23:db:1e:4c:89:a4:09:9f:69:59:ea:b3:5c:2c:69:
8f:b3:8f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:34:45 2026 by rpki-client