
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
File: hkuImlN4cQmFJlQfDrkSVv2vp7E.mft (raw, json)
Hash identifier: pEDXWpHe0/YoKBFg2BZqAENbneDpJgPLxOUGVcvXONA=
Subject key identifier: 6C:14:F7:E4:14:83:55:C6:0F:DD:C0:85:B2:E7:07:2E:57:65:AF:26
Authority key identifier: 86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1
Certificate issuer: /CN=A91DB53B/serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
Manifest number: 4C
Signing time: Mon 11 May 2026 08:30:09 +0000
Manifest this update: Mon 11 May 2026 08:30:09 +0000
Manifest next update: Mon 18 May 2026 08:30:09 +0000
Files and hashes: 1: hkuImlN4cQmFJlQfDrkSVv2vp7E.crl (hash: pKwczd9c6SlrRDhJTYG/9bOtTHZjJXR8RfYMzM3bN88=)
2: 53F3631AE09A11F0A599D036446F56BC.roa (hash: oVM32N+EaxRSiza2FT5vk20qgpzDKgkN9n1AMpDCt+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl
rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB53B, serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
Validity
Not Before: May 11 08:30:09 2026 GMT
Not After : May 18 08:30:09 2026 GMT
Subject: CN=6a019391-b0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:9e:e2:4a:e2:58:17:2f:fc:fb:b2:ee:d3:
41:df:be:1f:2d:67:be:d5:57:50:88:02:60:b8:93:
c1:04:a8:a4:ee:af:c3:d4:ce:70:ba:89:d4:58:7c:
29:d6:2b:6c:25:82:ed:64:37:dc:3f:a4:f0:3f:c1:
a7:0a:33:b8:1e:c0:87:3d:b1:ab:90:25:f8:b9:d0:
c0:ce:7d:6c:68:f9:91:5c:ca:eb:cd:e3:9d:a9:36:
bb:dc:ad:52:7e:99:e1:08:30:bb:ef:84:15:af:f3:
a0:1e:b4:cd:27:5f:f6:53:e6:e2:97:0b:6b:4a:9f:
ad:04:87:1f:c8:4c:fe:90:2f:c5:20:09:e9:77:c3:
17:6b:64:c0:51:53:18:82:c5:16:a6:70:8d:df:84:
b4:d4:46:67:03:1e:5e:37:21:9b:db:cd:65:fd:15:
7f:23:f2:ee:44:e6:83:5c:dd:6f:5f:08:0d:94:f1:
39:9c:e5:5a:25:30:12:95:03:e8:88:8d:ae:d6:02:
a4:b0:7f:31:d9:ad:ab:64:73:67:2e:32:65:36:22:
34:a5:a2:cd:c3:61:fb:1f:ea:a0:72:2a:4e:cd:bc:
71:03:de:ea:62:ff:59:ad:4f:ce:1e:44:c2:ce:22:
21:1b:1d:2f:b0:62:06:ca:32:2a:c2:b4:e5:c4:69:
b6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:14:F7:E4:14:83:55:C6:0F:DD:C0:85:B2:E7:07:2E:57:65:AF:26
X509v3 Authority Key Identifier:
keyid:86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d3:ee:6a:12:6e:d5:f0:b8:0f:3f:72:d9:51:a0:d5:9e:15:
59:65:9e:50:d2:a1:b5:55:40:24:bf:a6:a2:2d:dc:db:48:d6:
99:d6:fe:9a:85:f0:99:e8:ce:7b:35:b3:6c:95:a2:67:2b:7e:
1c:4a:df:8a:cb:ac:73:98:95:23:e4:81:df:3d:eb:4a:4e:71:
77:77:fe:fe:4c:a4:37:e6:9d:f5:a9:19:fb:5d:b4:ba:3d:fe:
84:99:00:2b:d2:9b:fb:41:e6:83:c2:4b:85:85:41:21:bd:fa:
6c:c6:91:f2:87:51:19:55:29:aa:c7:72:59:ac:75:17:c4:b7:
aa:09:d5:4c:e8:a3:5d:69:75:8e:4f:ab:34:06:28:bb:af:1f:
42:e3:0d:a1:9c:02:d7:41:03:d7:ca:e7:3b:af:ac:34:b1:fd:
ac:94:a1:97:c4:e7:60:d1:17:ee:19:f4:53:d5:c6:ba:f1:37:
fa:f4:67:92:d9:e1:6f:32:ef:da:e8:b1:64:52:ad:06:cf:fb:
f9:36:53:af:31:61:d1:2e:6e:9d:2f:ff:5f:1a:76:9b:e5:5b:
52:d3:ef:61:fb:2a:c4:4c:44:b8:65:a5:18:c2:42:19:61:6f:
87:1f:c5:f4:cc:68:9c:ba:37:e5:26:34:bc:d3:95:31:76:9e:
86:38:d3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:35:28 2026 by rpki-client