
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft
File: hrHxHRgdpsydsDI95DvJbFkJZeE.mft (raw, json)
Hash identifier: v3LujYWIOFf1euXoSlH+/tiJ8RECd2vtlimuAjBUhco=
Subject key identifier: CE:9A:E8:E1:74:AD:BA:69:D8:5A:82:45:EB:3E:C2:B8:2F:3B:9E:64
Authority key identifier: 86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1
Certificate issuer: /CN=A91CBFCF/serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1
Certificate serial: 0CA1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft
Manifest number: 0C8A
Signing time: Wed 22 Jul 2026 18:56:49 +0000
Manifest this update: Wed 22 Jul 2026 18:56:48 +0000
Manifest next update: Wed 29 Jul 2026 18:56:48 +0000
Files and hashes: 1: hrHxHRgdpsydsDI95DvJbFkJZeE.crl (hash: lJrIU7qTw2AH9SewUCPWvcB7oSaMH1qMtVEq08Bpbpg=)
2: B4E988F2FCFB11F092E222F9366F56BC.roa (hash: V71zoGKhD0nD0XhT5mIn0o19zRnPhSQ5QYxo5yVpxak=)
3: FD765464FCFC11F0AF0D3BB7376F56BC.roa (hash: eJofnUMCGktsGrjmk9qmZtR4EvsLnOuTHY31f/qnkIQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl
rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3233 (0xca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBFCF, serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1
Validity
Not Before: Jul 22 18:56:48 2026 GMT
Not After : Jul 29 18:56:48 2026 GMT
Subject: CN=6a611270-007f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:e1:77:b4:3f:16:ba:eb:0e:b9:73:6e:bc:
65:84:77:4e:f3:03:6e:1e:9b:95:7d:52:d6:1d:a6:
02:57:62:25:c5:1f:45:0d:ab:0c:05:d5:50:98:0a:
e0:e2:af:ba:41:2f:78:43:1a:81:a1:63:af:34:d9:
f3:d3:56:97:4b:ee:53:4e:73:01:f1:68:79:44:cb:
6a:fb:4a:0f:ae:6c:e7:0f:bf:96:1d:7b:cb:0c:c0:
36:3e:84:02:6e:fe:a0:80:e0:9d:f6:17:f1:f4:73:
03:4b:59:90:4f:38:00:eb:83:a6:a8:5d:67:3c:e8:
af:ed:18:43:c7:62:9b:1e:c7:77:12:65:88:c2:31:
3e:db:c3:81:8c:4b:0a:7c:d1:05:f8:c3:ed:26:1a:
cb:a0:b9:8d:87:57:7b:8d:69:91:02:0e:c5:5b:66:
63:27:40:ef:bc:fd:dd:0b:e4:cc:03:25:02:c2:b2:
46:32:f1:8a:c1:d1:bf:ad:7c:e2:4a:e7:a4:05:1c:
d0:55:81:fa:c7:f0:fd:88:c2:cb:29:1b:d0:45:28:
41:9b:42:e2:d7:09:6e:1e:50:f1:52:e4:0e:9b:56:
d1:1e:c8:31:35:35:ac:54:44:18:09:fc:87:3c:3d:
5d:0f:74:29:b5:98:bc:a0:3e:b6:1b:10:c7:dc:00:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9A:E8:E1:74:AD:BA:69:D8:5A:82:45:EB:3E:C2:B8:2F:3B:9E:64
X509v3 Authority Key Identifier:
keyid:86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e9:ba:93:ca:4e:d2:d9:60:64:86:e3:30:3f:9b:be:85:b8:
c9:5f:f7:96:78:66:0f:0b:ce:c0:39:d6:b4:3e:75:06:39:72:
c8:05:e3:0f:61:f2:64:0e:1f:23:2a:2d:bf:c8:90:e3:17:be:
75:ff:fb:d0:08:42:b8:99:f6:35:20:e2:e4:9c:06:c7:e2:cd:
15:d4:fe:9f:1d:42:70:f6:a5:4a:c3:d3:5b:a9:85:1b:52:11:
6d:76:c9:99:93:7c:56:82:42:d4:00:3f:2f:c6:55:e8:81:e2:
cd:0f:34:24:67:e8:7f:39:60:97:ee:f0:71:c4:38:5c:e5:bc:
5e:49:33:92:f1:58:1b:b1:d8:98:35:45:96:42:ac:f6:3e:7a:
16:4c:98:dd:f7:27:37:6a:f3:5d:7a:c1:fe:2a:f3:c0:60:6e:
09:9e:b6:45:46:de:60:9f:18:fa:d0:b2:2d:f7:71:f8:44:bf:
3d:57:86:c0:e6:e6:d3:91:64:ab:20:96:ad:57:78:7f:38:43:
fb:d8:fd:5e:4f:f5:af:09:61:68:13:3e:b3:93:9e:17:64:3d:
bd:1c:49:b5:52:43:74:0f:08:8f:d5:98:02:2a:4d:a3:42:9c:
c5:7a:21:80:76:5e:61:ca:5b:ad:89:df:c8:f4:0b:ef:db:75:
e2:b8:f6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:06 2026 by rpki-client