
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File: hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier: VBzhdjYlVju7NJ86lmBOLPSs6Zps+VVQ3+OWuI72KkM=
Subject key identifier: FA:1F:EC:16:64:5A:0E:43:21:76:1E:AF:40:3F:54:FE:04:25:CD:59
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer: /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial: 079D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number: 077E
Signing time: Tue 12 May 2026 21:43:45 +0000
Manifest this update: Tue 12 May 2026 21:43:45 +0000
Manifest next update: Tue 19 May 2026 21:43:45 +0000
Files and hashes: 1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: Gs4CUfM4+vzoDlW6z+N5y+Y6pH4DBS96ecSm6P1gVSE=)
2: E658D57AAB4111F09E35ED65C4F9AE02.roa (hash: oOJyuxXfX3imbXltRS3IeTJJR7sYKvHpEuMTz6A1stI=)
3: 8A5AA9BAAB4111F09E531265C4F9AE02.roa (hash: 2NlCQvreffBv+sXNAkaP+vHBffUlSnZfd0yyrfrf5aI=)
4: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: w8xPzFRUz74kcsL++i4sKCp2gMLpbIAkAjBNqyS5ZF0=)
5: 06E6952AAB4211F08DC86D66C4F9AE02.roa (hash: U5iX1eh/A7h/afcB70kYZU805bFcTIwmLGeaQFNS1cc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1949 (0x79d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Validity
Not Before: May 12 21:43:45 2026 GMT
Not After : May 19 21:43:45 2026 GMT
Subject: CN=6a039f11-5f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:34:cb:b8:df:63:50:06:11:6b:24:9c:e0:
75:31:7c:11:81:8e:44:1d:4d:40:58:af:36:26:89:
e3:e3:70:23:81:de:55:f8:a7:10:d6:e1:ba:de:a3:
16:5d:8b:25:b2:25:a0:9a:a6:b9:4b:51:11:69:86:
1c:e5:47:75:09:a7:5b:1d:8f:28:34:64:6e:54:48:
0e:b9:be:17:05:03:d5:03:d4:04:7c:0f:60:49:bf:
8d:1a:80:29:ee:32:b9:6e:5d:22:6d:8b:cd:10:cc:
d4:fd:d2:58:2e:cf:6b:b0:e0:25:fd:14:37:70:76:
39:d6:e7:08:76:af:d0:b0:a2:91:76:8b:e3:8c:30:
92:7f:cf:bb:80:9e:a2:62:c7:c2:04:1d:fe:da:e0:
7e:ac:b8:c5:63:1f:57:d5:7a:b4:1c:d7:41:de:76:
96:d1:31:3b:6d:56:5d:cd:a0:01:83:03:e2:98:ec:
1d:cd:37:d4:4c:67:96:3a:cc:f9:24:db:8b:fd:a6:
3d:b9:8a:cf:ee:24:a0:ef:97:19:11:d8:5e:89:b7:
66:d2:98:3c:7f:74:ef:71:2a:40:cb:4b:98:81:8f:
dc:36:e0:fe:d1:54:47:8e:30:85:50:3f:20:7d:13:
b6:3e:55:bd:d0:07:33:6b:46:fa:44:54:07:df:63:
73:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1F:EC:16:64:5A:0E:43:21:76:1E:AF:40:3F:54:FE:04:25:CD:59
X509v3 Authority Key Identifier:
keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:0a:9d:db:a8:fa:fa:54:3a:da:ba:1a:17:c1:71:99:b0:e4:
17:b3:9b:c7:0e:ac:91:8c:0e:97:6f:42:73:6c:fa:c8:38:92:
8b:d7:45:20:b2:83:af:4f:59:02:93:e9:54:f6:5b:18:57:73:
6a:87:ad:e7:d7:a1:1b:7f:36:99:c8:eb:38:6d:69:17:cb:e0:
99:8e:18:46:10:1c:ca:e4:53:8b:da:e6:15:5a:b2:b5:f6:f2:
b3:3f:0f:60:20:2b:ef:30:45:e4:5d:10:1e:d3:ff:85:16:d7:
bd:07:7f:e5:16:99:b7:18:d1:71:63:da:b4:33:7d:c3:19:41:
78:c4:f8:fc:90:10:ca:1f:0f:95:a9:8d:70:a8:73:29:77:9b:
50:51:72:c4:39:fb:79:65:8d:b1:e5:33:cb:78:e8:26:c0:42:
fc:1d:00:88:42:34:d6:2c:2e:62:e5:b4:e1:f0:d0:59:d5:07:
1a:38:19:32:3d:68:fc:8a:27:1a:66:ac:be:2f:46:e8:43:03:
32:74:50:f2:23:30:ec:b2:2d:5f:8b:12:9c:cd:e2:4d:0c:f3:
98:89:65:a8:38:a7:92:0c:9c:ad:d6:1b:20:38:fc:16:8f:53:
b3:92:c3:ea:22:eb:b7:ba:72:51:e8:34:db:42:24:18:bb:14:
48:a7:ba:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:40:54 2026 by rpki-client