
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
File: hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json)
Hash identifier: upBvDlgmjgDPVYmyswoViYysdN+c9QMloXAj77WWFtc=
Subject key identifier: B9:E2:F2:CD:6D:42:69:27:AA:23:9A:D4:83:90:43:7D:D7:1F:6B:ED
Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51
Certificate issuer: /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251
Certificate serial: 010A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
Manifest number: 010A
Signing time: Wed 25 Mar 2026 05:15:22 +0000
Manifest this update: Wed 25 Mar 2026 05:15:21 +0000
Manifest next update: Wed 01 Apr 2026 05:15:21 +0000
Files and hashes: 1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: vc118DFBfJXMcHeBOOQwHloEs64hQa8yY9XMLFi/Vlc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl
rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F320A, serialNumber=8632CD25669DD87220204517406E3F6B2F129251
Validity
Not Before: Mar 25 05:15:21 2026 GMT
Not After : Apr 1 05:15:21 2026 GMT
Subject: CN=69c36f6a-f7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:93:f5:4b:fe:55:bb:91:c9:f7:7d:4b:9e:
9f:8f:4a:db:33:cc:5d:b7:0e:14:43:c9:2f:48:11:
55:e4:5a:b3:70:e3:6a:7d:5f:7c:0d:79:c7:6f:86:
ab:11:37:80:8a:bc:32:c6:de:fc:ea:00:b0:87:10:
96:d3:8a:33:fd:a8:6d:02:29:0c:d8:a3:90:c8:d1:
3e:6a:89:44:1e:d6:73:43:1e:1b:0c:3c:ac:80:e0:
2d:d4:4c:4a:38:88:3d:2f:55:3d:ae:d5:79:e8:3a:
79:ee:07:e6:35:6f:a8:33:c2:3f:1e:e6:02:b8:bd:
58:bc:0c:6c:4c:84:97:3a:29:48:32:51:8e:a8:86:
da:57:65:90:aa:73:5a:23:f5:38:62:77:ef:59:02:
d4:a9:e0:b2:e0:94:ad:4f:27:76:3c:bb:2c:eb:cb:
c8:87:37:b3:ca:57:4a:b4:13:8b:0a:b9:7a:6f:a0:
8e:06:f4:b8:09:a1:b1:a1:03:e6:2f:bb:7b:00:98:
61:ee:1d:c6:99:bb:b2:f7:2a:8c:ff:1c:df:bf:7e:
bf:b3:f5:90:83:e9:ab:9e:46:4e:db:6c:26:80:33:
ce:78:e4:61:3b:84:d4:53:63:76:69:c0:1d:45:39:
b3:63:f9:80:83:69:59:bd:13:2a:d3:42:32:63:d8:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E2:F2:CD:6D:42:69:27:AA:23:9A:D4:83:90:43:7D:D7:1F:6B:ED
X509v3 Authority Key Identifier:
keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:7f:54:4c:dc:21:f9:6b:ba:3f:c1:b8:b7:d0:aa:6b:13:f2:
9d:a7:23:56:0d:a3:df:12:ca:c5:49:78:99:1f:3c:c7:56:cd:
31:7a:f9:3a:0a:60:d7:58:4a:77:72:75:e2:09:cd:1b:b8:e8:
5d:6c:a0:64:65:a4:bf:c2:70:b3:68:70:02:f2:5d:28:5b:03:
60:3e:c1:7d:ed:f4:b6:dc:55:36:9b:d3:13:03:80:be:8a:0c:
53:4a:c5:1d:7c:18:9c:38:dc:94:38:48:06:cc:d3:1c:32:77:
75:25:2d:11:bc:6e:ff:ed:f3:73:6f:57:4f:d1:4d:8a:87:24:
a3:ee:95:99:38:d7:27:e1:9a:44:55:3b:0d:3b:0a:9f:71:2e:
3a:6b:0f:72:82:06:57:1d:ed:9b:a8:a9:2d:c2:1a:85:7c:0b:
3d:42:4d:be:ed:aa:60:15:49:96:4f:aa:f8:e3:15:07:d1:f0:
3b:41:2e:6c:63:6c:7a:b9:21:e6:b7:65:38:e4:fc:d6:40:85:
c5:ef:0a:dc:a9:47:c7:67:4b:f9:6b:15:e4:99:4b:2f:2e:50:
b3:cd:84:42:f1:71:20:34:9c:1e:4c:77:45:c4:fa:e1:ce:93:
40:ec:52:8b:82:03:84:d3:7e:ad:a0:05:80:67:ff:b5:61:12:
f1:96:fd:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjMyMEExMTAvBgNVBAUTKDg2MzJDRDI1NjY5REQ4NzIyMDIwNDUxNzQwNkUzRjZC
MkYxMjkyNTEwHhcNMjYwMzI1MDUxNTIxWhcNMjYwNDAxMDUxNTIxWjAYMRYwFAYD
VQQDEw02OWMzNmY2YS1mN2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo1mT9Uv+VbuRyfd9S56fj0rbM8xdtw4UQ8kvSBFV5FqzcONqfV98DXnHb4ar
ETeAirwyxt786gCwhxCW04oz/ahtAikM2KOQyNE+aolEHtZzQx4bDDysgOAt1ExK
OIg9L1U9rtV56Dp57gfmNW+oM8I/HuYCuL1YvAxsTISXOilIMlGOqIbaV2WQqnNa
I/U4YnfvWQLUqeCy4JStTyd2PLss68vIhzezyldKtBOLCrl6b6COBvS4CaGxoQPm
L7t7AJhh7h3Gmbuy9yqM/xzfv36/s/WQg+mrnkZO22wmgDPOeORhO4TUU2N2acAd
RTmzY/mAg2lZvRMq00IyY9iZMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLni8s1t
QmknqiOa1IOQQ33XH2vtMB8GA1UdIwQYMBaAFIYyzSVmndhyICBFF0BuP2svEpJR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzIwQS84MEFBRUQ4Mjk1
NzQxMUVGODVFMEZCMjBDNEY5QUUwMi9oakxOSldhZDJISWdJRVVYUUc0X2F5OFNr
bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hqTE5KV2FkMkhJZ0lFVVhRRzRfYXk4U2tsRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzIwQS84MEFBRUQ4Mjk1NzQxMUVGODVFMEZCMjBDNEY5QUUwMi9oakxOSldhZDJI
SWdJRVVYUUc0X2F5OFNrbEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgH9UTNwh+Wu6P8G4t9CqaxPynacjVg2j3xLKxUl4mR88x1bNMXr5Ogpg11hK
d3J14gnNG7joXWygZGWkv8Jws2hwAvJdKFsDYD7Bfe30ttxVNpvTEwOAvooMU0rF
HXwYnDjclDhIBszTHDJ3dSUtEbxu/+3zc29XT9FNiocko+6VmTjXJ+GaRFU7DTsK
n3EuOmsPcoIGVx3tm6ipLcIahXwLPUJNvu2qYBVJlk+q+OMVB9HwO0EubGNserkh
5rdlOOT81kCFxe8K3KlHx2dL+WsV5JlLLy5Qs82EQvFxIDScHkx3RcT64c6TQOxS
i4IDhNN+raAFgGf/tWES8Zb9Jw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:06 2026 by rpki-client