
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json)
Hash identifier: c0nfRPJcvN36YDpdgHUOLW41jyuYi6IqbW9z57AsNQc=
Subject key identifier: 8F:3F:F2:9B:30:98:21:E5:EF:38:C8:2B:55:9C:56:62:2A:85:EF:0E
Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2
Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
Certificate serial: 04ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
Manifest number: 04DF
Signing time: Tue 12 May 2026 23:54:47 +0000
Manifest this update: Tue 12 May 2026 23:54:46 +0000
Manifest next update: Tue 19 May 2026 23:54:46 +0000
Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: l63pzLNcEDpR4PiWBWLol+OHx/5WVpBMFFwFd9v9QF4=)
2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: 31ILuWSDcxMEoCJtg/DemIqgF6JDQtA4+Gr57AYJDnI=)
3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: 2RxAlS/oLuf7Y3VMI5wk5JfPIc2P4lPgJltprUhrclU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl
rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1261 (0x4ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
Validity
Not Before: May 12 23:54:46 2026 GMT
Not After : May 19 23:54:46 2026 GMT
Subject: CN=6a03bdc7-a2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:ac:71:b2:9b:11:36:c1:1f:35:51:43:6a:
e5:79:3e:87:dc:f9:42:86:c3:01:67:c1:2f:1c:59:
41:98:09:94:2a:ac:cd:b0:21:6d:bf:96:76:c6:79:
90:6c:88:7e:ec:d0:09:db:60:b5:08:c4:94:97:30:
84:87:f7:e1:72:f7:cd:e4:4b:6c:9c:74:c7:20:3e:
fb:36:55:b5:68:3d:2b:5b:bc:a8:18:82:1b:90:3a:
d3:7f:ff:30:37:0b:09:d8:66:36:40:91:03:53:4f:
66:f9:58:fc:18:29:4b:c0:74:89:6b:4b:43:06:2c:
08:a4:96:06:64:02:08:9e:4b:43:05:d1:df:01:33:
84:0a:84:6b:9d:68:db:14:f1:56:2d:ad:8c:ff:59:
e4:4a:cf:38:6d:46:a5:b3:5e:c8:8c:7e:d4:8f:43:
6c:c8:8e:22:08:5e:ed:0c:df:be:04:5e:f8:e1:34:
5f:ae:bf:57:f6:f1:b5:36:21:01:6a:34:63:5c:86:
94:b6:42:a6:9c:6b:a4:43:4c:85:f7:1e:b5:21:84:
c5:86:f2:67:0a:dd:1f:46:56:0d:a8:c6:34:92:9b:
15:22:84:64:12:d8:e8:42:95:6a:7c:58:a5:dd:97:
5c:3b:11:6b:3e:a0:a8:c2:f1:11:f6:09:7c:31:fe:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3F:F2:9B:30:98:21:E5:EF:38:C8:2B:55:9C:56:62:2A:85:EF:0E
X509v3 Authority Key Identifier:
keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:97:da:2f:01:f3:6e:d6:35:0c:b6:a6:2e:37:b3:fd:20:e6:
3a:24:af:5f:33:b3:5c:be:ac:26:e9:ff:cb:f5:26:0e:f5:cd:
42:1b:04:7b:40:f9:28:d7:eb:1a:14:dc:58:c1:9f:15:d4:ba:
fb:bb:80:b7:6d:2f:77:2f:1c:62:cb:ff:7f:b4:a4:0a:bf:9f:
2e:a5:af:2c:da:25:78:75:91:d1:29:dc:77:06:f0:83:90:33:
9b:e4:bb:8a:84:71:71:39:44:06:c9:26:ce:39:d0:94:9c:76:
75:90:c4:a4:1e:74:12:6a:b6:d8:b6:ba:ac:13:2d:23:e1:10:
a7:8c:94:ff:b4:53:99:b0:25:bd:8a:bd:1c:a3:a9:ea:a5:70:
fc:5f:d6:89:fc:47:1b:d3:44:1a:33:aa:53:a5:46:21:64:4e:
f4:6f:17:8b:fd:4c:53:1f:a8:53:13:02:f4:e6:09:9f:c8:bf:
3e:75:8c:96:7b:e0:3a:a2:09:f0:e7:f4:13:e0:b1:6e:d0:2e:
47:95:1f:df:8b:b9:23:94:7b:35:5d:6d:56:e6:84:8f:68:e2:
68:c0:78:63:7b:56:4d:d7:82:dd:7e:52:26:50:66:05:d1:77:
0e:e3:b8:63:fe:7c:4d:01:df:6f:44:90:7b:31:7c:66:8a:67:
0b:11:54:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:52:15 2026 by rpki-client