
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft
File: HFloWGy0x-KD8UGfWFBGjtpVloI.mft (raw, json)
Hash identifier: Nj2DCNteN+84i+fKkvuUJiM8dhUA4BV+V/bwyhennXw=
Subject key identifier: FA:62:95:9D:F3:E9:28:A3:C8:E3:DD:FF:2F:4D:8F:BB:71:A9:2A:09
Authority key identifier: 1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82
Certificate issuer: /CN=A91C78A7/serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft
Manifest number: 6C
Signing time: Mon 11 May 2026 08:06:47 +0000
Manifest this update: Mon 11 May 2026 08:06:46 +0000
Manifest next update: Mon 18 May 2026 08:06:46 +0000
Files and hashes: 1: HFloWGy0x-KD8UGfWFBGjtpVloI.crl (hash: QtVBmAHEEbY/HtwZX1l7yXoeEl9lEg0w8K88Y4ldxJ0=)
2: 9DB152BEBAE311F0A6981134C4F9AE02.roa (hash: PA9hOk6V6IhWEIDuuD3b5sMWQ+ZypkTpM3DoKTzEmx8=)
3: 886DFB52BE4711F0A5FBDC5FC4F9AE02.roa (hash: qIdXJ0ADHeohVK85wcLxaAejqeQhAXKRfdoayVpue1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl
rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C78A7, serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682
Validity
Not Before: May 11 08:06:46 2026 GMT
Not After : May 18 08:06:46 2026 GMT
Subject: CN=6a018e17-6ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:8e:67:80:98:c5:ba:99:ee:3c:21:d5:c0:
bb:d4:40:e5:1f:9c:19:87:5d:e5:fd:8d:00:02:ad:
68:ff:d5:93:ed:e1:72:84:e5:62:b9:37:21:4d:aa:
72:d2:bb:05:fd:7e:2c:c6:ab:79:90:0f:d6:1b:eb:
2f:3a:ba:b7:5b:7e:3b:c7:73:9f:08:95:5e:3a:c1:
a9:b6:37:69:33:b0:59:45:87:15:c0:59:a4:aa:22:
26:e7:9b:03:dc:6b:dd:a7:f0:e7:62:8e:48:f7:31:
19:f4:13:b6:a7:9d:0f:a0:24:e0:f9:fa:1f:6a:2d:
ba:a9:c7:d9:a1:65:dd:30:fc:3b:62:fc:ba:e9:3f:
0c:62:20:cd:d6:d4:ea:00:74:43:44:03:f4:70:ba:
c8:b7:db:64:40:16:30:86:85:d1:d3:77:17:2e:ba:
43:9c:f4:14:3e:8a:dd:d0:1a:94:72:f1:3c:41:23:
9f:2b:2e:8e:33:47:34:16:3c:b8:c6:b8:86:a5:82:
4e:8b:57:d3:8a:40:df:c7:f0:82:8c:d1:5a:52:a2:
12:6d:20:5e:69:8c:d9:fd:a5:8f:12:51:e6:dd:e0:
83:ed:7e:a1:32:b1:8a:b2:86:dd:10:7d:93:0c:4d:
38:ea:d0:3d:f6:8c:96:ba:ac:1f:e0:ad:f5:93:b9:
08:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:62:95:9D:F3:E9:28:A3:C8:E3:DD:FF:2F:4D:8F:BB:71:A9:2A:09
X509v3 Authority Key Identifier:
keyid:1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:ed:ce:0b:63:33:a5:36:f4:5e:84:45:42:44:1d:c1:fe:c6:
49:a2:3b:45:11:98:ea:3a:0f:f6:df:ed:54:2d:4d:34:11:84:
ef:73:08:e0:d4:53:f1:02:1f:a0:77:d5:cb:9b:e2:04:7c:a3:
15:71:75:ae:75:f0:de:93:02:f2:78:c2:80:bb:2b:48:90:64:
7b:ca:70:2e:77:a3:e9:5a:a2:50:79:6a:a5:59:52:ea:20:ae:
2c:f4:6b:be:2b:44:8d:ed:5f:f1:9f:a9:5d:b1:52:98:72:95:
26:3d:5c:a1:59:af:f4:59:a8:0b:a3:d6:08:1a:87:2b:76:f3:
d2:97:5e:71:10:71:4c:28:28:83:0c:ee:68:57:c1:34:0f:74:
b8:54:57:65:d3:ad:fa:1c:57:99:6f:e8:56:a9:6e:ef:7a:38:
f3:b0:5c:64:46:1b:bc:c5:70:1f:d9:3d:32:ed:19:9d:f3:9f:
ad:bd:50:7a:be:c0:f6:b7:c3:92:ee:c5:8a:07:c5:06:62:aa:
22:af:69:12:54:5e:82:36:0c:c3:1f:78:b4:e1:c2:41:6a:77:
4d:d2:da:65:07:47:53:06:30:05:56:d0:eb:19:e1:cc:56:0a:
c5:8b:19:ec:73:4b:7a:e9:af:15:2d:95:ca:71:30:f9:5c:c7:
fe:67:42:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:36:10 2026 by rpki-client