
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
File: HmATrx-FZOqgCX2x8haHTEt4Zw4.mft (raw, json)
Hash identifier: QZ2T+p45cG1BZXIVmyYvr7uEdamaxw7QN5Dt8Auojc0=
Subject key identifier: 3B:9D:4D:4C:62:82:EF:0C:12:FE:C8:47:CA:C2:72:45:BE:0B:4D:A5
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Certificate issuer: /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial: 0259
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
Manifest number: 024A
Signing time: Wed 23 Sep 2026 02:17:17 +0000
Manifest this update: Wed 23 Sep 2026 02:17:17 +0000
Manifest next update: Wed 30 Sep 2026 02:17:17 +0000
Files and hashes: 1: HmATrx-FZOqgCX2x8haHTEt4Zw4.crl (hash: h1HwywLgb4KI0Q1QkzUPr2ytfsRAOt5K0zEZiWBMRyU=)
2: F1A4DAD6403211EEB47BF84AC4F9AE02.roa (hash: /i61ongesRVs6GzFE6G2KDY9aaIP3uRMFwQZFR3nHRc=)
3: 1042D952157F11F0BA309342C4F9AE02.roa (hash: V3mSD2PmxvztBCh6XpV5mCgqBcH3iqbAbCPx3PCcyPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:17:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Validity
Not Before: Sep 23 02:17:17 2026 GMT
Not After : Sep 30 02:17:17 2026 GMT
Subject: CN=6ab336ad-c8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:99:5a:c7:22:5f:ba:47:31:86:f6:5f:b5:
81:c3:f7:08:85:d7:48:5b:72:b3:65:ec:63:d1:54:
36:ca:2e:fc:ea:06:1e:d0:10:19:5a:29:cc:56:9b:
1d:5e:37:3b:72:af:8b:30:a0:fe:82:53:e9:65:e7:
3f:b0:7b:3d:0f:96:b2:c0:90:c2:7e:7a:b8:09:b4:
10:73:fd:30:85:a2:60:f1:d2:06:b7:96:87:d9:a7:
bf:00:d7:29:09:00:74:53:42:dc:20:90:4a:e5:b8:
72:af:b5:6d:a3:4e:9c:80:0c:1c:48:43:4f:6f:44:
ef:37:f6:73:ca:de:8e:f1:fe:69:ae:48:cb:fc:70:
f5:c0:6f:d4:71:d9:52:f0:b2:bb:45:99:48:45:a0:
d4:30:3a:08:a6:d0:d8:57:cc:29:35:fb:e5:93:88:
a7:cb:a9:40:c0:ed:61:0b:0e:eb:38:04:46:36:89:
af:26:f4:24:ad:b2:ff:74:a3:a5:ad:af:36:65:1a:
d3:03:36:95:da:6e:7d:b7:3e:1a:d7:52:f3:85:bb:
2b:f8:ea:ac:e8:a4:1e:96:15:65:cd:4d:6b:ef:98:
dc:bf:3a:5c:a7:c0:f8:76:70:db:f9:5f:c0:97:8a:
03:a1:80:eb:a4:23:6c:d8:8c:d4:df:c7:c9:29:0d:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9D:4D:4C:62:82:EF:0C:12:FE:C8:47:CA:C2:72:45:BE:0B:4D:A5
X509v3 Authority Key Identifier:
keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:dd:a3:aa:c7:71:41:33:fb:c7:ba:be:86:c0:1c:73:11:28:
26:cf:b6:e2:fa:2a:1a:8d:45:a5:c4:87:c1:63:f0:95:4f:36:
ef:3a:48:89:ba:6f:98:c8:dc:c4:a9:ac:fe:27:05:30:68:ae:
7e:ae:19:3a:2c:f4:72:18:da:10:ac:b9:05:55:c1:4f:b1:56:
df:cc:da:26:77:b9:be:9a:92:e1:c5:8b:4d:85:88:db:c5:ce:
bd:fc:67:64:bc:05:cd:96:16:6f:83:e3:e0:77:de:af:aa:3b:
f2:cd:3b:e9:a5:b9:f5:19:a5:78:7d:9f:9e:80:c8:23:67:a4:
f5:46:89:b4:db:d5:fc:23:02:44:00:e9:fe:4b:70:fc:ab:c1:
9c:d2:91:e5:67:c1:4a:57:0d:f6:53:d0:ba:c6:c5:1d:92:7e:
d7:fa:eb:6c:82:a3:6b:59:24:6b:cc:4f:90:f4:11:51:c5:d9:
d4:d2:98:43:5d:5c:73:cb:ab:7f:8c:1d:46:19:a3:31:55:20:
84:32:81:d8:d9:61:f8:e1:28:3a:ca:40:17:e3:6c:7d:4b:c7:
ed:f5:36:b9:33:a0:d5:9d:d2:7d:c0:15:a7:72:65:b4:5a:09:
75:57:8f:94:17:99:68:0c:11:3e:43:52:df:41:63:b7:7d:d1:
3f:54:77:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:33:17 2026 by rpki-client