
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft
File: Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft (raw, json)
Hash identifier: 2bCjt9lYracSS/wTTpJ/hMg2ySWEmCfA7wtKKjPIwxA=
Subject key identifier: 9C:7F:F8:5F:4A:24:49:B5:E0:20:A9:CC:22:5A:F5:8C:44:53:99:C1
Authority key identifier: 1E:7E:0D:89:46:BC:48:D0:75:4B:03:E9:87:2A:D3:88:0C:54:E4:BE
Certificate issuer: /CN=A91E3C9A/serialNumber=1E7E0D8946BC48D0754B03E9872AD3880C54E4BE
Certificate serial: 092C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft
Manifest number: 0924
Signing time: Wed 22 Jul 2026 20:41:03 +0000
Manifest this update: Wed 22 Jul 2026 20:41:02 +0000
Manifest next update: Wed 29 Jul 2026 20:41:02 +0000
Files and hashes: 1: Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl (hash: V8lN24tPzYX3rk2P7FOYOXmsPgkgEfaVEuQHrjQYKAc=)
2: 3A5B01A0CA8F11EAA35BF958C4F9AE02.roa (hash: C9SJEB+K9J+a2aEjNLQZMOXVR8Yr7jgVdMpBsNeJ+gI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl
rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2348 (0x92c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3C9A, serialNumber=1E7E0D8946BC48D0754B03E9872AD3880C54E4BE
Validity
Not Before: Jul 22 20:41:02 2026 GMT
Not After : Jul 29 20:41:02 2026 GMT
Subject: CN=6a612ade-2546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:11:08:7c:a2:12:e4:51:45:ce:40:34:0c:
c3:30:3e:3f:e1:e4:66:a4:09:41:12:0e:be:ba:8a:
af:4e:43:ac:61:22:bc:14:f8:6c:f1:ef:72:2c:e2:
68:cd:36:ba:e3:6c:a8:09:2e:fb:2d:1e:12:c1:52:
39:ad:d8:2d:ce:72:47:d8:0a:05:bc:fd:35:4b:b4:
0c:95:52:e8:83:3b:f8:9a:a1:d6:91:5b:f4:65:99:
38:d9:80:e7:a1:1c:63:12:eb:89:b7:0a:ec:90:6f:
c1:5b:a2:b6:5f:89:94:9f:1c:fc:f3:b0:fe:04:5f:
0f:77:6b:f0:cb:8b:13:4b:ed:5c:c9:a9:43:6f:05:
e4:e8:d8:dd:a3:38:a2:88:68:de:90:8e:b9:7e:54:
e1:0e:fd:f1:37:7c:b8:f4:26:e3:26:89:c1:02:cc:
08:0e:fc:af:35:9d:23:cb:ff:a8:ea:c7:bb:4f:2b:
f8:0d:da:bb:a7:8e:f2:4d:f3:0a:b5:24:1a:98:b7:
30:df:aa:f1:fb:5a:96:4a:a7:a0:9d:cd:d0:61:87:
a2:6d:b4:03:3c:e9:3a:ad:88:cf:0a:1d:9f:14:84:
27:53:f9:6b:2d:e5:8f:f0:63:8e:bf:b2:61:0a:51:
8c:76:c9:2c:42:11:ba:3d:b3:8d:75:68:12:aa:82:
98:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7F:F8:5F:4A:24:49:B5:E0:20:A9:CC:22:5A:F5:8C:44:53:99:C1
X509v3 Authority Key Identifier:
keyid:1E:7E:0D:89:46:BC:48:D0:75:4B:03:E9:87:2A:D3:88:0C:54:E4:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:65:c4:ae:d9:ca:e8:1d:fd:14:18:3b:05:f6:cb:03:94:f9:
e3:27:44:3c:5e:ca:c1:d9:9c:a1:80:3f:87:75:2f:99:49:7a:
a9:fe:60:a3:0d:16:31:4a:b4:a3:48:95:20:0a:20:32:5e:1f:
33:8d:df:63:64:15:2a:c3:b7:c0:71:00:d5:f7:11:92:88:2d:
0c:41:83:68:e7:35:64:67:f7:e9:35:93:aa:ae:01:78:5e:2f:
f1:62:00:4a:51:7d:b0:2c:72:8c:5b:86:df:c4:dd:9a:0b:a1:
14:b1:8f:b7:50:47:9c:2d:f3:ca:c9:95:ed:b9:15:de:ba:5c:
16:15:fb:98:2a:51:e0:18:36:07:4d:58:6b:83:82:31:0c:66:
70:86:d0:05:0f:18:4c:7b:88:98:76:59:6c:83:88:68:d4:2c:
ea:34:c2:7b:56:04:03:ee:bb:ae:75:d6:98:a4:5c:36:b0:63:
59:af:9c:36:b8:38:aa:26:81:37:4d:f0:f7:15:48:f3:ff:68:
f1:94:d9:ba:b7:92:4f:05:c9:17:48:73:45:b4:66:95:c7:00:
9a:48:f9:5a:72:81:2a:9e:a4:86:7f:7f:ec:ee:e5:bd:b9:31:
75:93:5b:38:8c:16:96:a9:a1:3e:d2:44:2f:95:61:b7:ca:cc:
ba:52:9c:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNDOUExMTAvBgNVBAUTKDFFN0UwRDg5NDZCQzQ4RDA3NTRCMDNFOTg3MkFEMzg4
MEM1NEU0QkUwHhcNMjYwNzIyMjA0MTAyWhcNMjYwNzI5MjA0MTAyWjAYMRYwFAYD
VQQDEw02YTYxMmFkZS0yNTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA04IRCHyiEuRRRc5ANAzDMD4/4eRmpAlBEg6+uoqvTkOsYSK8FPhs8e9yLOJo
zTa642yoCS77LR4SwVI5rdgtznJH2AoFvP01S7QMlVLogzv4mqHWkVv0ZZk42YDn
oRxjEuuJtwrskG/BW6K2X4mUnxz887D+BF8Pd2vwy4sTS+1cyalDbwXk6Njdozii
iGjekI65flThDv3xN3y49CbjJonBAswIDvyvNZ0jy/+o6se7Tyv4Ddq7p47yTfMK
tSQamLcw36rx+1qWSqegnc3QYYeibbQDPOk6rYjPCh2fFIQnU/lrLeWP8GOOv7Jh
ClGMdsksQhG6PbONdWgSqoKYTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJx/+F9K
JEm14CCpzCJa9YxEU5nBMB8GA1UdIwQYMBaAFB5+DYlGvEjQdUsD6Ycq04gMVOS+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M5QS9BMUQ2MUQzQUNB
OEQxMUVBQkU1QkI2NTZDNEY5QUUwMi9IbjROaVVhOFNOQjFTd1BwaHlyVGlBeFU1
TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0huNE5pVWE4U05CMVN3UHBoeXJUaUF4VTVMNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
M0M5QS9BMUQ2MUQzQUNBOEQxMUVBQkU1QkI2NTZDNEY5QUUwMi9IbjROaVVhOFNO
QjFTd1BwaHlyVGlBeFU1TDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFmXErtnK6B39FBg7BfbLA5T54ydEPF7KwdmcoYA/h3UvmUl6qf5gow0WMUq0
o0iVIAogMl4fM43fY2QVKsO3wHEA1fcRkogtDEGDaOc1ZGf36TWTqq4BeF4v8WIA
SlF9sCxyjFuG38TdmguhFLGPt1BHnC3zysmV7bkV3rpcFhX7mCpR4Bg2B01Ya4OC
MQxmcIbQBQ8YTHuImHZZbIOIaNQs6jTCe1YEA+67rnXWmKRcNrBjWa+cNrg4qiaB
N03w9xVI8/9o8ZTZureSTwXJF0hzRbRmlccAmkj5WnKBKp6khn9/7O7lvbkxdZNb
OIwWlqmhPtJEL5Vht8rMulKcOA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:51 2026 by rpki-client