
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File: hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier: a86b+gFBEdlNWcMHyp/+eAyPDk0eQf76KjRM8QzdX68=
Subject key identifier: 12:A4:15:06:81:DF:F7:1F:77:0F:37:76:83:44:35:39:63:B6:98:8D
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer: /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial: 07E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number: 07C4
Signing time: Sat 26 Sep 2026 21:33:41 +0000
Manifest this update: Sat 26 Sep 2026 21:33:40 +0000
Manifest next update: Sat 03 Oct 2026 21:33:40 +0000
Files and hashes: 1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: BB1oRgT1M0IoOYhUaWMy1LpQeCXn9TGHgrWdsNiqVFU=)
2: 06E6952AAB4211F08DC86D66C4F9AE02.roa (hash: U5iX1eh/A7h/afcB70kYZU805bFcTIwmLGeaQFNS1cc=)
3: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: w8xPzFRUz74kcsL++i4sKCp2gMLpbIAkAjBNqyS5ZF0=)
4: E658D57AAB4111F09E35ED65C4F9AE02.roa (hash: oOJyuxXfX3imbXltRS3IeTJJR7sYKvHpEuMTz6A1stI=)
5: 8A5AA9BAAB4111F09E531265C4F9AE02.roa (hash: 2NlCQvreffBv+sXNAkaP+vHBffUlSnZfd0yyrfrf5aI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2019 (0x7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Validity
Not Before: Sep 26 21:33:40 2026 GMT
Not After : Oct 3 21:33:40 2026 GMT
Subject: CN=6ab83a34-7367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:30:4b:30:76:5f:f6:a5:e0:3f:2c:c4:f5:
32:3d:6b:d9:4f:5a:f8:4a:b5:31:08:06:de:82:db:
4b:b1:72:eb:98:75:1e:f8:68:8c:a1:39:36:61:1c:
e1:a4:f1:e5:d1:f7:a5:6d:36:bd:6b:18:ef:da:10:
96:65:66:8c:c5:90:0a:22:51:07:64:16:bc:fa:92:
64:45:10:4e:d9:57:9d:4b:1e:0b:46:ae:e6:2c:1e:
93:37:47:30:6e:e6:81:2b:c0:31:21:08:49:4e:30:
3e:a2:c0:08:13:4d:c7:ed:1a:ae:54:8c:d4:54:c2:
2d:65:1e:c5:f1:6f:32:9a:1e:ce:b2:64:45:8e:e9:
77:26:55:f2:0f:29:8c:4e:fa:6f:1c:9c:00:39:64:
9f:30:6a:e0:ce:df:5b:d9:18:eb:3e:35:5a:f1:7a:
d7:f7:14:e4:e4:3d:6d:ee:89:57:3a:ba:b9:20:58:
34:ec:7a:21:d3:e3:3f:79:c8:ac:f7:0a:13:4a:77:
c8:08:b7:21:37:c3:83:14:b2:12:87:4c:a8:13:46:
62:02:22:d5:90:1b:ed:f5:c1:3b:6f:56:f5:b1:81:
2f:7c:8f:1e:76:54:86:8e:ee:c5:e3:58:5d:32:4e:
b1:3e:77:cf:f5:34:96:0a:44:d9:f3:fe:2e:f1:56:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A4:15:06:81:DF:F7:1F:77:0F:37:76:83:44:35:39:63:B6:98:8D
X509v3 Authority Key Identifier:
keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:c8:d3:fb:21:46:80:40:ab:ac:ce:3f:75:65:e1:1e:1e:7b:
d9:08:09:27:d4:f4:46:10:31:bb:91:7f:b6:92:11:29:53:be:
a2:84:7b:2e:6a:a9:e7:41:42:6f:39:6d:70:19:99:67:9b:62:
8b:cb:f8:60:ce:90:4d:a8:33:8d:6e:0e:c4:aa:fb:b1:41:35:
84:1c:49:c4:9d:7c:eb:64:de:b8:27:4f:df:f7:3b:0b:65:15:
6c:e7:72:a2:e6:cb:70:ec:fd:43:9c:bb:69:59:2b:f0:8b:ec:
6c:b6:19:9d:a6:8e:30:92:d0:f6:a6:b2:87:f6:44:01:e7:f3:
de:4c:a2:cb:ff:83:84:d5:fa:f1:13:2a:b5:65:c0:b7:bb:f9:
09:27:0b:08:d6:95:7a:79:98:6b:5f:78:2b:bd:a7:01:16:fe:
37:ad:06:9e:46:78:da:50:06:00:31:36:15:62:01:7a:6c:b0:
2e:90:d2:e3:fc:bc:da:85:be:72:ba:7b:32:04:2c:c5:ce:88:
f7:b7:2a:65:5c:f3:a2:b8:da:05:b0:29:d9:9c:31:f0:9f:f2:
8f:2d:bd:e1:04:24:af:e4:fd:64:66:cc:6d:a6:21:29:38:d4:
15:c8:56:cf:5d:a2:84:a0:a5:91:23:4d:f4:98:73:a4:74:1a:
cc:74:2d:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUM5NzkxMTAvBgNVBAUTKDg2QjJCMUQxRTc4MjQ0OEI4NEY2OTgxOEYxNkExRjcw
N0I1NEM4NkMwHhcNMjYwOTI2MjEzMzQwWhcNMjYxMDAzMjEzMzQwWjAYMRYwFAYD
VQQDEw02YWI4M2EzNC03MzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmfcwSzB2X/al4D8sxPUyPWvZT1r4SrUxCAbegttLsXLrmHUe+GiMoTk2YRzh
pPHl0felbTa9axjv2hCWZWaMxZAKIlEHZBa8+pJkRRBO2VedSx4LRq7mLB6TN0cw
buaBK8AxIQhJTjA+osAIE03H7RquVIzUVMItZR7F8W8ymh7OsmRFjul3JlXyDymM
TvpvHJwAOWSfMGrgzt9b2RjrPjVa8XrX9xTk5D1t7olXOrq5IFg07Hoh0+M/ecis
9woTSnfICLchN8ODFLISh0yoE0ZiAiLVkBvt9cE7b1b1sYEvfI8edlSGju7F41hd
Mk6xPnfP9TSWCkTZ8/4u8VbmQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKkFQaB
3/cfdw83doNENTljtpiNMB8GA1UdIwQYMBaAFIaysdHngkSLhPaYGPFqH3B7VMhs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzk3OS9FRDYzM0U4NjVG
RDkxMUVCQTMwRUUzN0JDNEY5QUUwMi9ockt4MGVlQ1JJdUU5cGdZOFdvZmNIdFV5
R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hyS3gwZWVDUkl1RTlwZ1k4V29mY0h0VXlHdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Qzk3OS9FRDYzM0U4NjVGRDkxMUVCQTMwRUUzN0JDNEY5QUUwMi9ockt4MGVlQ1JJ
dUU5cGdZOFdvZmNIdFV5R3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIcjT+yFGgECrrM4/dWXhHh572QgJJ9T0RhAxu5F/tpIRKVO+ooR7Lmqp50FC
bzltcBmZZ5tii8v4YM6QTagzjW4OxKr7sUE1hBxJxJ1862TeuCdP3/c7C2UVbOdy
oubLcOz9Q5y7aVkr8IvsbLYZnaaOMJLQ9qayh/ZEAefz3kyiy/+DhNX68RMqtWXA
t7v5CScLCNaVenmYa194K72nARb+N60GnkZ42lAGADE2FWIBemywLpDS4/y82oW+
crp7MgQsxc6I97cqZVzzorjaBbAp2Zwx8J/yjy294QQkr+T9ZGbMbaYhKTjUFchW
z12ihKClkSNN9JhzpHQazHQt1A==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:48:08 2026 by rpki-client