
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
File: hmRWQenizPzosun9-5X-a_CfBcU.mft (raw, json)
Hash identifier: +4PB9fN6jwcckwHlPikLl5mC1FBTmXEsLII9Tf9/+Nw=
Subject key identifier: 14:6F:3E:78:C8:13:EF:B7:94:89:63:39:BA:EF:65:B8:02:2C:D2:53
Authority key identifier: 86:64:56:41:E9:E2:CC:FC:E8:B2:E9:FD:FB:95:FE:6B:F0:9F:05:C5
Certificate issuer: /CN=A91C3DEA/serialNumber=86645641E9E2CCFCE8B2E9FDFB95FE6BF09F05C5
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
Manifest number: 38
Signing time: Mon 11 May 2026 08:44:33 +0000
Manifest this update: Mon 11 May 2026 08:44:32 +0000
Manifest next update: Mon 18 May 2026 08:44:32 +0000
Files and hashes: 1: hmRWQenizPzosun9-5X-a_CfBcU.crl (hash: hRK0VNrFvwpu6/kTCXbBQckdDwxuxRvid2lRGIb5ups=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.crl
rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:44:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3DEA, serialNumber=86645641E9E2CCFCE8B2E9FDFB95FE6BF09F05C5
Validity
Not Before: May 11 08:44:32 2026 GMT
Not After : May 18 08:44:32 2026 GMT
Subject: CN=6a0196f1-ed07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:b4:e3:b3:ef:fe:bf:22:fb:6e:14:b7:dc:
51:21:d1:34:33:0a:a0:32:d0:c0:f0:a5:77:11:3c:
bb:e6:38:a1:93:b8:16:bb:b7:1a:bd:7d:71:6b:32:
d4:9d:42:e6:4e:d9:60:e8:6b:cb:8d:80:8b:bb:a5:
e6:d3:8b:62:7d:df:63:62:ac:11:a7:98:7d:20:4c:
5d:22:d7:62:7b:7f:53:bb:28:c3:bd:40:cd:fd:ec:
e1:f7:48:04:30:1f:7e:d2:cb:a3:11:36:b2:7a:88:
fb:30:bc:85:bf:70:e3:a5:05:0e:58:87:81:b3:08:
a4:8f:f1:43:ee:52:f4:4f:e0:41:46:7d:9b:86:51:
06:ae:9e:3f:af:4f:23:37:a8:f6:82:2a:84:76:9e:
ee:bc:16:42:00:66:60:62:5a:79:30:4c:ef:41:63:
1d:56:bb:6f:ed:56:91:74:42:4e:15:5e:74:bc:87:
89:f7:c4:67:59:ce:2b:db:dd:e2:4b:de:1b:90:79:
08:a7:94:b7:f6:62:ac:29:5b:1d:8d:1e:c4:4e:94:
2b:90:4f:e6:04:b9:19:ee:43:a8:bc:f6:11:b2:16:
08:ac:4a:27:ca:9a:df:e3:56:ab:77:8a:ae:53:0a:
df:f4:71:7b:a3:f3:36:ff:03:3d:44:ae:d5:c2:14:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6F:3E:78:C8:13:EF:B7:94:89:63:39:BA:EF:65:B8:02:2C:D2:53
X509v3 Authority Key Identifier:
keyid:86:64:56:41:E9:E2:CC:FC:E8:B2:E9:FD:FB:95:FE:6B:F0:9F:05:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cc:41:e1:e2:17:fa:9c:9e:72:85:8c:a9:f7:3a:3b:7a:81:
c0:e0:90:55:af:0a:66:ff:ee:b5:b3:99:21:f9:d3:58:4c:b6:
26:64:70:85:33:19:4c:2c:45:e8:fa:91:5b:83:52:02:1a:72:
0d:7f:fd:3a:b6:17:d6:64:c9:84:fa:fd:f8:bd:47:90:02:1c:
5b:4f:0d:e6:78:05:4a:f0:43:4f:9d:5a:66:ce:3f:65:11:64:
39:c7:4a:b3:df:3f:68:89:1d:0c:37:79:43:d6:15:26:d3:81:
7d:cb:f3:b5:a9:52:3e:b7:27:65:ef:97:f4:e7:c2:6c:c3:c6:
75:6b:ce:e9:9a:6a:f2:eb:64:d6:20:74:2c:ea:bd:9b:70:9b:
0c:d2:23:69:ff:00:ff:55:92:90:44:d9:74:cb:f1:cd:27:27:
5b:f6:ac:98:2d:c1:71:e5:1d:da:05:92:0d:0a:20:13:d7:d8:
b3:d6:b6:f1:76:70:c8:c0:65:7f:ec:83:19:55:2a:94:20:74:
b8:74:c5:15:13:cf:e7:52:23:a4:08:f5:5d:84:0c:f7:c4:ce:
1d:11:c8:ac:57:41:3c:f6:14:fa:de:95:f1:46:e8:fc:a2:81:
a7:5f:44:c5:e6:df:6f:41:9f:ed:1b:3d:7e:9a:88:b6:28:1d:
77:28:73:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:05:23 2026 by rpki-client