
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
File: hsI8F7xNIO4W8JLTWiz2VU_scRk.mft (raw, json)
Hash identifier: WEUDAwY8JsUnlKp9zyurkFYPORns4iNFPYpnJkA7KtY=
Subject key identifier: CC:40:2E:E7:ED:B1:B5:33:8D:73:53:11:FD:6F:82:01:45:6A:1C:53
Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19
Certificate issuer: /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
Certificate serial: 09AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
Manifest number: 09A4
Signing time: Tue 12 May 2026 20:02:27 +0000
Manifest this update: Tue 12 May 2026 20:02:27 +0000
Manifest next update: Tue 19 May 2026 20:02:27 +0000
Files and hashes: 1: hsI8F7xNIO4W8JLTWiz2VU_scRk.crl (hash: D8jTftQquuFF4W+GC8ziDlwyXdHwBl/t2PpmgpXENRo=)
2: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (hash: +4O58+8Be0EvFE4iAXiTAOaPh0BL/Et1xJp3uENJQz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl
rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2479 (0x9af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1D77, serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
Validity
Not Before: May 12 20:02:27 2026 GMT
Not After : May 19 20:02:27 2026 GMT
Subject: CN=6a038753-55e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:34:9b:5f:44:bb:c2:1b:2d:d7:43:5a:25:
7e:5c:98:e4:9c:cf:23:0d:4d:d5:0d:68:8c:12:1c:
07:cc:32:ac:30:ff:ec:d5:ea:c5:ec:6c:07:67:d3:
5d:f3:07:a1:82:50:34:e6:b5:6e:24:c7:4f:49:98:
f8:3b:5e:d7:4f:b8:20:d8:ca:c3:c2:18:55:69:39:
10:d2:8b:17:b7:2a:4d:5e:74:cf:24:60:e3:7a:cf:
87:01:21:28:36:f5:33:27:b6:04:89:fb:c2:af:07:
d8:ea:3d:2f:85:11:fa:e6:f2:e9:53:0b:e5:05:ec:
55:ff:16:72:d8:7d:c4:1d:04:9f:7d:c2:a7:c5:08:
d9:fc:83:d4:d2:1e:7a:53:a4:0a:ed:2f:87:9d:03:
d2:12:66:1a:76:d9:4d:fb:cf:41:1f:df:0c:11:25:
0c:0a:ad:8c:c9:5d:bc:6a:e2:da:c0:d0:b1:5f:b3:
57:23:7e:3b:ce:28:10:58:48:44:bb:07:09:82:b8:
d4:0e:ca:e4:3e:1f:fe:79:28:67:8b:89:a5:7e:5b:
a5:48:8b:f4:9e:ac:72:67:83:d1:a9:f7:bd:92:0e:
0f:5f:57:c4:4b:fe:ed:7f:03:75:df:07:38:65:f4:
d6:f3:8c:bf:38:f8:ee:08:df:f4:7e:19:98:62:fe:
e2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:40:2E:E7:ED:B1:B5:33:8D:73:53:11:FD:6F:82:01:45:6A:1C:53
X509v3 Authority Key Identifier:
keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:d9:76:fc:cb:e0:6d:4e:31:c9:2a:89:f2:56:e8:0d:bf:e9:
83:3a:13:7f:0b:4c:fe:d4:56:77:ce:54:64:2f:5e:9a:2b:be:
d8:86:68:43:2d:e1:fc:c0:09:9d:61:25:7e:72:fd:2e:08:a8:
a4:a1:2a:d3:90:d6:cd:83:41:37:f2:17:5a:36:e1:79:94:59:
e2:aa:3f:95:76:42:2a:67:fd:bb:34:2c:14:c8:3e:1a:bf:6e:
25:4c:5c:e7:94:48:91:3b:12:bb:a9:5d:3d:fe:5a:c1:6e:a9:
56:c3:db:63:30:78:94:c4:05:c5:e1:9f:e6:4d:9b:fa:6b:6e:
63:a4:60:d2:69:35:16:49:bb:28:75:d1:06:bd:e3:bd:5d:05:
48:17:88:de:af:6f:7f:84:89:cf:51:88:3c:d5:31:0a:7b:f2:
01:9d:13:4e:54:e9:77:56:0a:21:04:ae:68:c6:e7:e5:06:f1:
46:b7:00:ca:75:7e:4f:32:fd:a6:ae:1d:9e:22:a0:2c:b3:29:
04:9b:1d:80:3a:5a:e4:2a:ec:37:77:a0:7d:f5:37:f0:08:91:
3d:01:0c:85:cc:2f:80:e2:2e:dd:7e:8d:e8:0d:75:5f:1c:5d:
99:6b:68:e1:04:23:07:30:62:96:b1:62:6f:88:9a:bb:00:d8:
1c:cf:55:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:29 2026 by rpki-client