
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
File: hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft (raw, json)
Hash identifier: mWOWF7rlH73XEGgFPIn0BLi0HmVVtGYLUn/8eoo6ICE=
Subject key identifier: 28:17:64:46:D8:5C:3B:0C:6D:7A:B2:6B:08:D4:EA:58:3B:2D:04:1A
Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78
Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
Manifest number: 0185
Signing time: Mon 11 May 2026 04:36:14 +0000
Manifest this update: Mon 11 May 2026 04:36:14 +0000
Manifest next update: Mon 18 May 2026 04:36:14 +0000
Files and hashes: 1: hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl (hash: uDdDkKuLxyn6USS0gsIePAEmE84XBqX59Syo+xVwuRc=)
2: 61A59876012A11EFB75C350FC4F9AE02.roa (hash: z1kC7ixKWc94mNbOx5wcAEuMc543/xXPe6FxxWEqPQc=)
3: 612992C6012A11EFB75C350FC4F9AE02.roa (hash: c1ZdxCR5jy+2u4016P6OO4rIgFkE6Ob/aP92Gxo47WA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl
rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D894F, serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78
Validity
Not Before: May 11 04:36:14 2026 GMT
Not After : May 18 04:36:14 2026 GMT
Subject: CN=6a015cbe-12b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:05:11:a4:aa:4d:b3:ac:f9:cf:1f:44:11:
bb:2b:e6:17:9e:0c:eb:9e:34:b3:32:e5:d4:5c:df:
b9:fb:4c:eb:8e:3b:fe:c5:70:6f:81:74:65:64:41:
69:29:0a:ab:52:91:4f:3a:1e:e0:52:f4:bf:2a:ba:
4d:64:46:55:11:7d:19:84:8d:6b:ac:f8:df:d0:64:
ad:e2:87:d5:e6:64:cf:cc:ea:a9:bb:52:99:f5:60:
03:fb:3c:9d:69:4c:1b:2f:44:e2:91:fe:ae:69:07:
36:12:20:63:87:5d:72:d1:7f:1a:71:96:d1:ab:27:
09:9d:41:f2:87:c0:a8:ee:7d:a7:ce:3d:4e:75:d2:
e3:03:6e:09:59:32:1e:71:89:71:ef:0a:00:11:ec:
88:fb:15:4e:b0:53:26:b0:b2:73:44:3f:28:1a:dc:
66:c1:a2:73:e6:e5:93:5a:2b:b8:69:27:4a:f1:e9:
6a:1e:aa:2b:41:e3:c9:04:2e:04:2b:01:5e:ba:21:
07:75:cb:54:58:ad:03:59:4e:5c:f5:96:f8:d2:98:
e7:ca:d5:de:23:95:df:53:22:3c:c6:80:65:df:52:
17:b0:5d:d5:19:00:03:ce:5b:f2:95:1c:18:49:a1:
51:c9:31:30:1e:d3:38:d1:a2:33:ee:63:a7:f3:af:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:17:64:46:D8:5C:3B:0C:6D:7A:B2:6B:08:D4:EA:58:3B:2D:04:1A
X509v3 Authority Key Identifier:
keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f1:8b:37:4d:10:02:25:0d:83:52:5c:45:50:59:91:68:0e:
e2:98:1c:cd:f4:26:01:6e:e9:31:90:69:8b:1a:50:df:2e:2b:
c1:a3:89:59:a7:1c:d0:61:c0:f1:b0:cd:20:c0:d3:de:25:d7:
44:ad:21:89:5f:4d:14:d9:4e:c1:0e:4f:5f:33:e7:9a:04:83:
5e:8c:9d:55:0f:e8:43:1d:eb:3a:a6:11:d7:7d:44:29:58:d8:
bd:3f:b8:d9:a8:87:9b:8d:e3:98:c9:a0:85:e2:47:b4:12:4a:
f9:da:e0:61:1e:fa:d9:db:4d:ba:58:95:9f:98:6e:8e:be:20:
cb:73:c5:99:d1:15:c9:70:94:58:9e:f4:44:c1:a6:10:20:6f:
0e:f3:e7:ef:6d:65:76:ab:f1:e1:c3:67:7c:e9:07:0c:7d:d4:
45:34:2b:db:b4:1e:40:34:56:19:f1:ff:bf:e9:79:9e:a0:bf:
1f:e5:b9:cd:6e:d8:d8:de:8e:99:a5:bd:4e:b6:c4:38:0d:ec:
45:61:12:8e:11:6b:f1:2e:0b:65:5b:c6:62:69:3c:0c:9e:ea:
e7:7e:69:34:e4:50:23:d9:49:76:10:67:dd:e6:94:02:09:dc:
de:47:d8:b8:75:7f:50:ef:3a:a8:49:77:40:13:af:e9:00:45:
8b:ba:d0:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg5NEYxMTAvBgNVBAUTKDg1QjE0QTg5MEI5QkQ0OTgwRDk3RTQxQkIzOTFGQ0M5
ODUwRkNCNzgwHhcNMjYwNTExMDQzNjE0WhcNMjYwNTE4MDQzNjE0WjAYMRYwFAYD
VQQDEw02YTAxNWNiZS0xMmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyZkFEaSqTbOs+c8fRBG7K+YXngzrnjSzMuXUXN+5+0zrjjv+xXBvgXRlZEFp
KQqrUpFPOh7gUvS/KrpNZEZVEX0ZhI1rrPjf0GSt4ofV5mTPzOqpu1KZ9WAD+zyd
aUwbL0Tikf6uaQc2EiBjh11y0X8acZbRqycJnUHyh8Co7n2nzj1OddLjA24JWTIe
cYlx7woAEeyI+xVOsFMmsLJzRD8oGtxmwaJz5uWTWiu4aSdK8elqHqorQePJBC4E
KwFeuiEHdctUWK0DWU5c9Zb40pjnytXeI5XfUyI8xoBl31IXsF3VGQADzlvylRwY
SaFRyTEwHtM40aIz7mOn868OYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCgXZEbY
XDsMbXqyawjU6lg7LQQaMB8GA1UdIwQYMBaAFIWxSokLm9SYDZfkG7OR/MmFD8t4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODk0Ri8wQUY0NUUzNjAx
MkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFKZ05sLVFiczVIOHlZVVB5
M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hiRktpUXViMUpnTmwtUWJzNUg4eVlVUHkzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODk0Ri8wQUY0NUUzNjAxMkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFK
Z05sLVFiczVIOHlZVVB5M2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbPGLN00QAiUNg1JcRVBZkWgO4pgczfQmAW7pMZBpixpQ3y4rwaOJWacc0GHA
8bDNIMDT3iXXRK0hiV9NFNlOwQ5PXzPnmgSDXoydVQ/oQx3rOqYR131EKVjYvT+4
2aiHm43jmMmgheJHtBJK+drgYR762dtNuliVn5hujr4gy3PFmdEVyXCUWJ70RMGm
ECBvDvPn721ldqvx4cNnfOkHDH3URTQr27QeQDRWGfH/v+l5nqC/H+W5zW7Y2N6O
maW9TrbEOA3sRWESjhFr8S4LZVvGYmk8DJ7q535pNORQI9lJdhBn3eaUAgnc3kfY
uHV/UO86qEl3QBOv6QBFi7rQMw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:35:42 2026 by rpki-client