
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
File: h_pIRIna7X3O5mDHjYe6LMGtqmI.mft (raw, json)
Hash identifier: S4YINmurJ/PoV85PW+F/Cv7cHSG7Q8WQkE9CV8lCEOI=
Subject key identifier: A9:D2:F9:07:E6:23:29:B5:83:F9:C0:BD:00:31:87:9C:52:84:7B:B7
Authority key identifier: 87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62
Certificate issuer: /CN=A91F1962/serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
Manifest number: 9E
Signing time: Wed 25 Mar 2026 06:33:36 +0000
Manifest this update: Wed 25 Mar 2026 06:33:36 +0000
Manifest next update: Wed 01 Apr 2026 06:33:36 +0000
Files and hashes: 1: h_pIRIna7X3O5mDHjYe6LMGtqmI.crl (hash: Abx6/2c6i5FwwSRTPLOEy8yFC2cD+JduMNF+TnNggbQ=)
2: 6A3BD41C38DF11F09B694578C4F9AE02.roa (hash: FSkjWAWTa54qCMggaTkYI4c6Mh5lfB4HTHFZ2BdMRV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl
rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62
Validity
Not Before: Mar 25 06:33:36 2026 GMT
Not After : Apr 1 06:33:36 2026 GMT
Subject: CN=69c381c0-5959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:e4:58:68:10:b8:e8:e9:5c:0b:01:71:f0:
c1:36:67:79:ae:f0:8e:dd:ff:d6:a2:44:3b:92:98:
7d:09:c5:79:18:b2:93:39:94:a1:7d:07:d1:3c:04:
c2:6c:92:1b:e4:52:ad:91:c2:1b:6f:61:2b:07:af:
3c:13:1e:d0:29:48:2d:80:bc:24:d9:72:fe:d9:20:
5f:bf:a4:9f:9c:d7:83:91:53:d3:19:9e:88:d6:54:
26:e8:02:73:83:cf:28:98:04:0d:11:bd:e9:ae:1d:
b6:94:ec:e0:f3:f5:bc:2a:04:a5:eb:fb:0c:65:0d:
45:6a:10:71:7e:0c:86:b2:b9:e7:51:a7:67:b7:1f:
6b:74:4e:bc:f5:88:e4:f1:83:03:15:b9:c3:3b:f2:
50:f8:51:29:35:80:c7:0a:70:c7:e9:b0:49:76:60:
c7:63:6b:9e:f0:bb:aa:e2:b9:ea:3e:97:a5:61:f5:
d1:30:65:60:d2:9b:67:a8:37:39:b1:95:00:66:17:
1e:8d:ad:69:25:52:54:a7:94:8e:f1:e1:68:9f:75:
8e:ba:0f:f9:d9:e5:ab:24:42:2b:04:4b:ed:10:f9:
29:f7:f4:10:52:e1:7c:fa:16:db:28:6b:e0:7c:fe:
b3:b4:69:e4:4e:09:d2:2c:d2:4f:c9:16:60:ad:9d:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D2:F9:07:E6:23:29:B5:83:F9:C0:BD:00:31:87:9C:52:84:7B:B7
X509v3 Authority Key Identifier:
keyid:87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:e9:47:36:2a:04:d6:22:1f:29:1a:b3:c6:37:a1:ce:f8:1b:
44:54:4a:85:85:d0:18:fc:0a:23:9a:ee:fc:2c:29:a2:f2:c0:
e9:7b:2f:5b:cb:e7:73:63:f5:2f:d3:d4:1a:8b:93:6d:8b:04:
5a:6d:ee:ec:f2:ab:38:d7:51:c2:3c:6e:e9:dc:54:ee:09:b9:
54:d3:91:12:85:c2:19:c7:e4:c1:b0:68:92:03:cc:56:e2:68:
92:89:6f:f1:cd:d5:be:d9:1f:7e:2d:6e:59:86:fc:fd:a4:3e:
61:38:c3:72:c0:37:aa:e5:f1:1c:f3:56:36:fe:01:d8:76:31:
e1:c6:61:54:b4:4a:09:ca:00:71:15:83:9e:ac:08:59:92:ba:
af:d6:45:c2:6f:5b:b7:1a:d7:bc:13:30:db:6c:be:b7:4b:6f:
31:b1:be:a5:d5:90:7f:03:06:d9:2c:9f:af:20:77:e5:fa:d8:
0e:60:dd:67:17:ec:a7:d5:30:6c:14:60:7d:09:1f:e9:57:50:
7a:6a:ad:da:0e:12:53:e0:05:a3:fe:d3:cf:1f:20:9f:df:0c:
4b:3f:c0:4e:45:6b:d6:b6:fc:2e:95:49:00:53:3d:50:f4:f0:
f3:d6:a3:d5:f9:b5:d5:64:bc:68:66:11:72:ea:d1:83:8f:fa:
43:68:4c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:39 2026 by rpki-client