
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft
File: _hniRte_DjbyHipWt8mvtJ1Z1tQ.mft (raw, json)
Hash identifier: SeYUYMqvpCr/L9U4+TqPnEENavPrKDNFnfxH2DqoeOE=
Subject key identifier: 49:90:6C:10:B5:47:C9:46:07:EC:40:FF:BC:29:A6:41:DD:49:26:B0
Authority key identifier: FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4
Certificate issuer: /CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4
Certificate serial: 04CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft
Manifest number: 04C7
Signing time: Tue 24 Mar 2026 23:34:32 +0000
Manifest this update: Tue 24 Mar 2026 23:34:31 +0000
Manifest next update: Tue 31 Mar 2026 23:34:31 +0000
Files and hashes: 1: _hniRte_DjbyHipWt8mvtJ1Z1tQ.crl (hash: rPmNXC1ZAe84+WlRvJznrKvne6I+jvIxSGaeOtqoPgM=)
2: 5DB5AFEE635C11ECB7C65C23C4F9AE02.roa (hash: YYtRF1n214A/jogYTeW/d4vTTDsRQg650s9T/ZVBTMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl
rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:34:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230 (0x4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F30C0, serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4
Validity
Not Before: Mar 24 23:34:31 2026 GMT
Not After : Mar 31 23:34:31 2026 GMT
Subject: CN=69c31f87-4f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:da:4c:0f:18:6b:dd:aa:c4:f9:29:00:8f:
89:fa:73:dc:d3:17:d1:10:50:fe:c7:07:68:f1:35:
1c:ec:ea:28:78:25:f0:ef:c4:ed:fd:3e:90:87:16:
4f:11:52:28:8c:71:ed:3f:b9:4a:f6:dc:64:49:66:
c6:79:73:19:00:b7:a7:4a:34:b1:ab:61:4d:da:f4:
18:db:c0:88:99:26:0b:db:2e:4c:b6:f4:b7:7a:07:
1f:97:8d:67:9b:9b:e8:e6:79:d2:13:90:0f:49:b2:
23:f1:26:b7:86:93:26:48:fa:87:d1:bb:f1:0d:5f:
c5:bb:95:9e:e7:37:ee:7f:50:05:bd:94:8a:3d:3f:
05:74:a9:06:bd:7f:51:a1:9b:06:15:f5:71:d2:32:
2f:7d:ff:8b:b8:43:71:fd:5c:e8:48:29:f8:41:8b:
06:09:ad:43:fc:28:f7:a1:52:99:b9:0e:1f:89:7e:
23:9e:91:2e:47:66:92:22:eb:00:f5:09:d8:92:6b:
8b:d1:48:07:1f:77:40:fb:02:7a:7c:bf:ef:4c:91:
c3:4a:ad:0e:d7:2e:44:7b:da:b1:b8:7b:61:7c:b4:
69:65:6d:a6:f3:a9:79:e9:1d:aa:22:23:ad:ec:76:
b3:36:29:57:df:51:e1:6a:14:ce:95:e6:a2:62:03:
50:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:90:6C:10:B5:47:C9:46:07:EC:40:FF:BC:29:A6:41:DD:49:26:B0
X509v3 Authority Key Identifier:
keyid:FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bf:b0:b4:8b:77:9c:90:e6:06:f2:66:1a:11:fb:f6:d7:b9:
a6:f0:2b:5a:01:75:e2:b4:54:be:5f:b5:da:1f:86:ac:0b:c2:
66:2c:d7:1a:8e:69:8c:a3:11:49:da:c4:41:61:79:20:d4:dd:
81:e2:71:b5:cf:c6:2c:2a:4e:8a:1a:7d:6c:ea:5c:09:18:af:
ae:bd:66:33:94:ab:cc:1b:14:4a:55:08:e5:6d:e4:d4:f2:77:
22:0d:ce:5f:9f:a7:fd:8b:7a:0d:2b:3d:da:98:42:6d:24:1d:
7c:40:aa:68:63:25:41:55:36:6b:5a:e9:2f:25:be:89:d3:11:
dc:76:52:d4:df:79:b0:ca:e9:8a:1e:4e:31:02:b3:60:b8:d4:
59:36:23:ba:2d:04:bc:b3:71:16:cc:17:1a:af:94:a4:33:d3:
e9:3f:97:50:c3:d2:c0:17:18:73:84:52:1e:07:8b:39:82:5e:
4b:fc:51:ad:fe:3a:2b:2d:e5:16:da:17:f6:d0:fd:de:a5:42:
7e:82:62:13:9d:b6:66:f5:21:a1:1d:07:4c:82:82:54:b9:07:
ea:1b:66:11:1a:e2:ba:2e:55:9c:6e:54:6c:69:bc:dd:e8:23:
a9:8f:2d:2b:44:ce:f5:65:9c:1c:b4:81:31:14:9b:fc:d5:7a:
ae:47:06:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:20:04 2026 by rpki-client