
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
File: HmHgACzkS79ZVTyASgrJEub-vzs.mft (raw, json)
Hash identifier: UowEJNQKY6WL1cr/bhYQ0nvLj7YaXeRN0hzWy9ocOsg=
Subject key identifier: 5D:E9:32:C2:A6:B0:44:41:21:86:C7:09:56:B1:05:C6:E2:CE:F7:40
Authority key identifier: 1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
Certificate issuer: /CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Certificate serial: 031C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
Manifest number: 0312
Signing time: Thu 23 Jul 2026 02:05:51 +0000
Manifest this update: Thu 23 Jul 2026 02:05:51 +0000
Manifest next update: Thu 30 Jul 2026 02:05:51 +0000
Files and hashes: 1: HmHgACzkS79ZVTyASgrJEub-vzs.crl (hash: gwfHxAAxT3lb44E28xgD7Ewjq7IZ4TSHBLRCEUDrkZI=)
2: 654307DC26CC11EDB395A078C4F9AE02.roa (hash: Q48Y/wp7RhZuuL2sntpKBoS0Dfa5UCP/oik4uhuXQww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl
rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 796 (0x31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EACB9, serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Validity
Not Before: Jul 23 02:05:51 2026 GMT
Not After : Jul 30 02:05:51 2026 GMT
Subject: CN=6a6176ff-8f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:c1:0b:32:79:87:d8:7c:0b:3a:6e:06:47:
8c:2b:8c:8d:eb:76:9a:f3:5e:ed:53:c8:50:55:68:
f1:9c:4b:76:32:3c:39:8e:22:9e:9d:22:2f:98:0f:
c2:7d:e8:34:56:3c:a8:ef:f4:fc:41:27:49:ff:06:
d9:fd:24:93:21:5f:f3:04:8e:e1:41:5b:08:80:24:
b0:f2:4e:95:ab:ba:d1:eb:a6:91:61:81:38:45:79:
b6:22:04:5e:09:d3:2c:71:75:03:67:dc:0a:85:a3:
c0:87:f3:5c:be:77:1c:a9:87:34:0c:9a:fe:8a:72:
2f:dc:07:24:39:31:53:ed:b0:6d:b8:dc:14:73:8f:
13:e0:45:32:ca:24:c6:4a:41:2e:e6:9f:d6:b3:af:
d2:d9:c9:1d:4e:61:35:31:97:aa:29:4b:64:9f:c7:
ca:12:0c:76:62:99:35:03:d2:6f:2e:49:cf:ef:c6:
98:6e:dc:d7:7f:55:05:bc:96:91:2b:8f:67:4d:c5:
59:83:42:42:5a:e4:e3:86:1e:23:c0:a9:c3:72:11:
fa:d1:d6:c6:89:12:d9:69:89:54:18:32:2f:36:4b:
5b:ee:38:ac:25:44:2f:ba:6a:a4:69:db:05:f6:cc:
7a:11:65:ac:ce:8e:e2:95:6f:3b:3f:8f:8e:4b:fd:
f1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E9:32:C2:A6:B0:44:41:21:86:C7:09:56:B1:05:C6:E2:CE:F7:40
X509v3 Authority Key Identifier:
keyid:1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:61:a0:b9:a4:10:63:dd:54:5e:4e:de:bd:ed:1a:f2:58:23:
30:36:09:01:c4:f6:8e:de:e2:8a:08:18:69:03:ff:74:37:20:
f9:1d:e1:ad:63:27:90:80:3f:c7:4b:06:e1:32:02:90:76:e6:
cb:a8:4b:f7:82:ca:6a:71:7f:51:ee:cc:a0:6a:c0:4c:99:1f:
e6:99:07:53:aa:0a:8c:b2:2c:bd:e3:85:6a:c9:98:7c:3a:a3:
c7:a9:7b:d3:1f:60:3b:1a:25:e2:69:19:d5:ff:48:10:7a:e6:
0a:30:c6:98:45:e6:f4:02:94:89:35:97:87:15:38:53:ca:4c:
65:11:06:30:f9:32:c6:11:96:79:65:52:59:f6:ee:1d:78:a7:
1f:d1:f8:d0:d1:2e:a6:23:44:c7:79:df:5e:bd:6b:db:87:5e:
0c:1b:36:4b:12:8d:c9:cb:95:ad:a3:45:d8:48:35:8c:41:ba:
72:c3:5b:41:0d:b7:31:73:6c:fd:a0:58:e4:4c:2b:e4:e1:29:
02:c9:dc:fd:1f:c7:63:a6:fb:a2:dd:bd:38:8c:cb:1f:c3:4e:
95:ae:e5:91:41:1f:08:76:a7:98:a4:71:ff:61:cd:1a:3a:8d:
79:9d:cc:72:65:da:36:4b:d7:2c:31:7b:94:65:36:69:22:f8:
3b:1e:f3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:21:26 2026 by rpki-client