
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json)
Hash identifier: Xik9WlOjhZSOn4xFnVk7j/v5O8yGB5Ynt7EsPzdAooA=
Subject key identifier: 33:26:A2:0E:F9:F2:CA:AB:6F:55:CF:5E:29:2C:C6:9C:D9:7B:DC:25
Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31
Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931
Certificate serial: 0191
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
Manifest number: 0191
Signing time: Thu 23 Jul 2026 05:45:05 +0000
Manifest this update: Thu 23 Jul 2026 05:45:04 +0000
Manifest next update: Thu 30 Jul 2026 05:45:04 +0000
Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: SoOLJcGUGodW6cJmTFBK01/0L2ULhg6ek0Jv1iJtXek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl
rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931
Validity
Not Before: Jul 23 05:45:04 2026 GMT
Not After : Jul 30 05:45:04 2026 GMT
Subject: CN=6a61aa61-6fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:1b:4e:1e:d2:f2:e3:56:c2:f4:dd:2b:62:
a6:bd:d3:5c:f2:c4:24:9e:62:6a:7b:b0:4c:9a:05:
02:7f:e5:b5:83:6f:d7:65:90:45:ee:de:a9:64:e4:
6d:07:1c:60:6c:9f:a1:08:95:27:90:b4:a4:1e:14:
00:1f:31:d0:3f:45:51:70:e0:0f:b5:29:76:96:71:
7b:11:63:84:5a:b1:9d:8c:b3:ac:7a:0e:70:4e:71:
4d:da:53:e7:2a:bb:70:6a:4f:cc:3a:c6:19:5d:9c:
1b:bb:73:b4:85:4c:8b:6d:2a:94:b7:2b:15:d3:7e:
fd:73:82:e9:03:19:6a:4b:e2:81:97:a6:0b:2f:de:
e8:73:4d:b2:a0:55:d7:4e:5a:98:d0:38:fc:e6:59:
e8:fd:e0:cf:e3:69:c1:4b:71:77:8d:84:6f:7b:c9:
44:2c:df:08:64:07:e0:a7:89:bd:ea:98:f3:d2:79:
84:3e:db:2f:46:25:61:3e:39:34:52:d9:85:34:63:
4a:cb:8d:71:ea:f1:d1:79:a1:65:54:44:47:3a:aa:
ee:aa:be:ed:95:7f:9f:2e:06:b3:41:d3:77:8a:34:
b6:4d:fb:d5:9a:32:0f:15:6a:7c:00:51:8b:ea:37:
e8:4d:bb:18:5c:57:f9:51:28:09:eb:1c:b9:6a:cb:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:26:A2:0E:F9:F2:CA:AB:6F:55:CF:5E:29:2C:C6:9C:D9:7B:DC:25
X509v3 Authority Key Identifier:
keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8f:aa:c5:d4:ed:96:22:b1:50:34:b1:7c:1d:85:0a:e5:b0:
07:9b:fe:b7:66:b5:a4:de:55:34:92:14:48:c5:99:f0:ca:d5:
ec:2d:df:16:8e:c2:0a:dc:2d:14:52:26:3f:9e:ad:21:a1:3c:
cc:ca:8a:9e:a0:f3:6c:91:ee:eb:6d:42:71:aa:1a:4f:cd:aa:
61:41:cb:8b:a7:79:8d:29:5e:9f:9c:b1:d3:38:2e:bf:8e:68:
68:f0:6e:b4:b4:89:6f:90:ab:7c:f6:80:6d:5c:ce:c7:f4:dd:
89:a3:57:02:71:fc:e2:18:b2:d5:28:02:78:40:40:75:16:11:
76:4d:06:0d:8b:f1:fe:6a:9c:26:5e:da:2c:39:f9:95:0e:12:
4a:8f:d8:81:82:b1:3e:90:eb:ef:a0:d4:d8:35:56:12:7a:e2:
56:02:7d:35:02:71:cd:5a:52:b2:1d:44:81:a9:dc:b9:85:3e:
05:58:ed:8e:f3:4e:4b:77:f3:39:30:59:5a:73:bf:1d:89:3c:
d1:5b:e9:a9:5a:0c:e2:74:a9:7f:0e:ee:45:67:d2:51:09:0e:
e8:cf:8b:e8:99:f7:03:26:0b:89:d4:7a:ca:a0:fc:44:c3:b0:
c7:26:dc:19:16:06:7b:eb:df:4b:3f:6f:80:08:ba:88:c1:9d:
2c:be:47:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:57 2026 by rpki-client