
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
File: hXm-LYNFaC8nrucGK71O92ZOVxs.mft (raw, json)
Hash identifier: FcBDCU1Cgw5VQwfd4gQ7z3w8uN+GJjSWY3mMJfko550=
Subject key identifier: 46:66:95:3E:DF:FD:C6:5B:CC:50:47:5F:FF:73:42:32:1B:7D:06:43
Authority key identifier: 85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B
Certificate issuer: /CN=A91D0B6B/serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
Manifest number: C9
Signing time: Wed 25 Mar 2026 06:07:04 +0000
Manifest this update: Wed 25 Mar 2026 06:07:04 +0000
Manifest next update: Wed 01 Apr 2026 06:07:04 +0000
Files and hashes: 1: hXm-LYNFaC8nrucGK71O92ZOVxs.crl (hash: HBfv4HIwn2AQLmgl4rOobOGOeR093dR2QCc4DD5ypIo=)
2: 73DC435A39F511F09F296862C4F9AE02.roa (hash: kSc2xHms3sPfHeZuP4LV3Eoyr2OjFjDeReRTh5WRY7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl
rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B6B, serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B
Validity
Not Before: Mar 25 06:07:04 2026 GMT
Not After : Apr 1 06:07:04 2026 GMT
Subject: CN=69c37b88-5438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:70:bf:ec:fe:ee:26:ca:9d:63:90:45:d6:
8b:4c:14:96:52:5e:d7:8b:b6:61:a6:4b:65:1e:db:
ef:c9:15:55:36:b4:26:22:2d:a4:96:f4:50:9c:d4:
12:36:d7:79:ed:7a:2a:8e:da:c3:42:34:6e:d9:99:
47:44:d1:98:f1:76:a9:51:dc:17:b5:d4:b7:96:24:
f9:fb:43:3e:3b:4b:a7:1a:3f:56:81:4c:f9:4c:2e:
66:9e:fc:1e:fd:bb:c5:29:83:b3:a3:d8:79:63:92:
f1:59:05:42:33:fa:88:c7:72:52:28:ad:8a:9c:f8:
c7:f3:c2:1b:ac:61:18:84:b2:4b:d3:d8:48:82:8b:
29:92:09:be:91:c2:05:71:ec:3a:e1:87:20:07:98:
2d:11:18:f3:21:fa:24:1c:86:7b:df:7f:32:40:2c:
a0:16:ab:dd:d1:ea:73:17:1c:ac:76:c0:26:74:60:
a2:4f:25:14:7f:0a:e8:2a:19:c1:9f:b9:db:b1:ce:
64:c6:a0:35:20:0c:e7:11:d1:09:b4:db:98:17:46:
c4:d8:7f:f4:de:7c:b5:9d:07:a4:94:94:61:6d:91:
02:91:c9:2c:44:ee:0d:cd:42:e8:60:a6:92:c0:0c:
d5:44:d7:da:3c:80:e6:28:a1:f2:b9:20:5e:65:d6:
4d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:66:95:3E:DF:FD:C6:5B:CC:50:47:5F:FF:73:42:32:1B:7D:06:43
X509v3 Authority Key Identifier:
keyid:85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:25:b0:4c:dd:16:fd:9f:bc:74:a7:35:7f:36:37:b1:3a:0c:
0f:a6:c9:74:08:8c:d3:ef:3e:c2:2d:ea:a0:81:4d:c9:2f:63:
fb:9a:26:e0:0b:5f:1b:0c:20:53:aa:05:15:15:53:18:d6:b3:
3e:97:65:7e:c9:f1:4c:7b:6d:19:63:da:d5:61:3e:6f:20:83:
b6:4f:49:8f:07:ab:b1:e7:15:d2:d0:20:07:46:7d:6d:2e:36:
96:cc:53:54:40:11:ac:8e:64:de:e5:bd:5f:59:d8:37:bb:98:
a9:0d:cb:88:91:db:3d:c5:84:3c:26:27:08:39:eb:6a:17:cb:
0a:32:0a:a0:95:19:14:96:0a:3c:4b:3d:00:37:6e:a7:21:c4:
08:73:32:44:67:3a:f9:41:c0:76:1b:19:2a:1c:4d:64:41:b9:
44:8c:51:dd:f8:4f:2f:16:88:a3:51:1b:e7:3e:3d:ed:96:ca:
c4:96:53:d4:9e:21:7e:81:c4:9c:20:23:3f:bd:7a:ab:16:bb:
83:ab:40:6a:c1:eb:cb:0e:49:c4:a8:47:8e:bd:85:b0:c2:48:
4c:98:01:28:64:0b:8f:25:4c:a8:2b:5a:7e:dc:0b:71:94:22:
ed:a0:86:79:78:27:46:8d:b1:dd:af:b6:63:60:c9:65:85:a0:
40:79:90:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:21 2026 by rpki-client