
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json)
Hash identifier: 9zv9PsttHVJfca6RQRvODPdY+etGW/PxLFWQdUFCe+M=
Subject key identifier: 2F:33:03:6D:E4:07:A7:5D:CF:ED:12:24:A1:29:32:7B:99:00:6C:C0
Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86
Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986
Certificate serial: 07A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
Manifest number: 077D
Signing time: Tue 12 May 2026 21:44:40 +0000
Manifest this update: Tue 12 May 2026 21:44:39 +0000
Manifest next update: Tue 19 May 2026 21:44:39 +0000
Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: n66hL3DztPNIvo1dii06EdvFJTp2Yb02lpr8Sk6BlmA=)
2: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: dTHGef/qaPXq5V6Jr39TXLuUIZibSjAipj9MsBmIQ2Y=)
3: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: 7S73h8W2HxXiTwsYOnuyv1jT9DvXmbAVM1IlpZiwrbQ=)
4: 457C2AF8210811F092050034C4F9AE02.roa (hash: WEX6LWR0ej6+sm6Apo4GxC3XFf/K0Ijx563V6zRrBlM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl
rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1952 (0x7a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986
Validity
Not Before: May 12 21:44:39 2026 GMT
Not After : May 19 21:44:39 2026 GMT
Subject: CN=6a039f47-5831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cf:bc:19:dc:ae:18:5e:39:87:81:3f:14:3c:
14:e3:d4:65:4b:a2:2e:b8:1f:b4:93:b3:7f:2d:3e:
75:ea:3b:97:d3:06:c0:85:97:78:39:0c:5c:fd:f8:
ac:62:29:27:ce:ca:dd:1c:e5:de:14:f6:c7:36:79:
a2:83:c3:45:f5:b1:6d:78:a2:4c:ae:ff:48:d3:66:
6f:52:80:59:da:8f:4d:6f:6f:9e:f3:b7:16:6c:72:
0f:9f:14:05:92:fa:08:f5:59:f8:07:10:ac:f1:71:
e8:43:7d:f6:b3:3d:73:10:f5:c1:ba:14:fb:3c:ab:
49:ba:dc:97:02:ff:28:8c:ff:00:df:15:6b:7a:34:
c8:48:a8:79:18:3b:72:d2:f1:fb:9a:47:60:71:e1:
60:17:6f:eb:82:4f:60:ec:02:be:30:e7:03:ce:df:
e9:90:6e:e0:54:7a:0d:41:af:ad:b1:88:22:90:c8:
7f:0b:eb:99:75:2e:83:c4:ba:db:15:f3:20:a1:b8:
48:95:41:bc:06:e7:2e:3f:16:12:7a:c1:b6:e4:25:
23:4b:35:41:07:de:30:9e:e4:c5:fb:47:da:65:8b:
d0:f9:d4:26:7b:e6:62:ee:21:19:3e:a0:f1:38:4f:
28:71:b7:d4:09:a7:8a:d6:ee:65:dd:5a:aa:59:5b:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:33:03:6D:E4:07:A7:5D:CF:ED:12:24:A1:29:32:7B:99:00:6C:C0
X509v3 Authority Key Identifier:
keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:89:20:bd:2c:3a:a2:00:fd:98:cb:ba:83:03:b1:a8:7a:6f:
77:2b:bb:27:52:3b:73:c8:6c:71:3f:a4:c7:08:f1:1a:a0:52:
61:62:45:71:8b:53:fc:61:be:2d:c9:66:4d:c5:42:ef:ee:2f:
da:b1:42:63:6a:97:52:ee:b7:8a:61:e1:53:5f:9e:a0:6f:f8:
af:d6:c2:9f:77:4e:2b:fe:eb:16:fa:6d:b6:6c:22:4b:5a:23:
83:8a:4e:7a:8b:7a:20:f0:14:47:2a:bd:b8:57:50:e4:3b:09:
a2:19:2c:ca:39:65:4f:9d:7a:c2:8c:43:ca:8a:7a:69:d1:73:
9c:62:97:40:26:e4:51:ca:d1:55:a2:34:6e:65:84:8d:90:5c:
5e:27:e0:3d:93:95:bb:56:9b:b7:70:87:41:71:ff:09:10:59:
f2:bf:49:00:f2:2a:a9:01:aa:0a:49:49:08:73:e9:ab:0e:52:
9f:95:9b:fa:dd:ca:34:59:df:28:0e:18:cc:b5:c2:03:16:0f:
32:ce:f5:fc:a9:b4:8d:1b:36:09:06:6b:16:ae:41:32:88:3b:
4c:5a:f3:28:d7:cb:d6:fe:78:e9:03:89:61:93:24:ff:62:f5:
da:7e:d0:c8:64:99:2b:06:94:3d:7b:62:5a:94:9d:af:9c:07:
c6:ab:06:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:43 2026 by rpki-client