
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft
File: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft (raw, json)
Hash identifier: eni8jgSBcA8obbBlFS0RPRbCdBPulJ5iF8sgTrGwcRs=
Subject key identifier: A5:3C:C2:07:D8:0C:8F:F9:52:33:74:A9:4D:E2:10:C1:68:C7:2C:A4
Authority key identifier: 1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7
Certificate issuer: /CN=A91F5BCC/serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft
Manifest number: 0122
Signing time: Thu 23 Jul 2026 07:27:03 +0000
Manifest this update: Thu 23 Jul 2026 07:27:02 +0000
Manifest next update: Thu 30 Jul 2026 07:27:02 +0000
Files and hashes: 1: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl (hash: iw/QRcOakxb8X5Jr1rkcmG47LsNdTpEqQFfZuiNyaOc=)
2: 7A092C88E9E211EFAD188675C4F9AE02.roa (hash: VYzj3AeenQpibuJcJi+RGSfALT2kN6QBqvlUfKfEKWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl
rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5BCC, serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7
Validity
Not Before: Jul 23 07:27:02 2026 GMT
Not After : Jul 30 07:27:02 2026 GMT
Subject: CN=6a61c247-00aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:82:ab:c4:e2:47:ff:5a:b6:cc:89:d7:f1:
4f:98:fd:12:38:b9:76:dd:42:41:d2:60:d1:72:81:
f7:1c:bb:f7:5c:52:02:8b:d5:ce:c3:ae:d2:2b:2f:
3d:d6:8b:76:16:0b:bb:c2:28:43:e5:9f:59:a4:62:
db:5a:59:ff:6e:2b:f6:0f:db:44:9c:24:5d:bc:c0:
14:55:a4:d2:12:5e:c9:c2:97:09:6b:dd:74:04:4d:
32:77:c0:73:b8:34:ce:78:83:59:45:a3:0a:da:1d:
b6:00:ad:51:0a:52:bf:18:56:d7:f2:3c:53:80:1f:
b6:81:b2:fd:0a:d4:e6:29:6e:e8:3c:29:1d:0a:b5:
2a:f8:54:e3:e7:92:9f:55:58:69:92:8a:8a:38:de:
cc:d7:6a:0b:d7:16:ab:07:d0:27:5e:01:90:90:5b:
22:b3:f8:5d:bb:9a:3c:c5:19:57:b6:85:e0:cb:a8:
76:e7:5d:31:36:5a:b6:cf:c6:75:3e:d4:db:37:81:
19:50:e6:bf:f0:ec:9f:0f:90:2a:5b:0e:c1:4b:3d:
d0:7f:3a:84:0c:5b:ad:70:c7:a1:84:13:38:ae:d2:
80:12:e8:3c:5c:eb:63:3c:35:8c:69:58:01:4b:0b:
a4:f2:0a:5f:d8:6f:34:63:94:80:19:00:39:b6:8a:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3C:C2:07:D8:0C:8F:F9:52:33:74:A9:4D:E2:10:C1:68:C7:2C:A4
X509v3 Authority Key Identifier:
keyid:1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:a6:fa:f5:15:90:fd:93:17:ab:81:6b:19:f8:60:8a:10:0b:
3d:9b:3a:03:2f:7f:e0:a1:d1:bb:b5:b9:79:5b:bb:8e:3b:4d:
56:39:b7:d4:5e:9c:fb:6e:e7:fb:de:fa:ff:c6:e1:6d:a9:92:
a4:14:10:77:b6:55:d4:53:b7:64:a8:07:55:2f:fd:63:9e:f4:
51:14:4c:5d:2c:10:73:c1:7c:6e:d7:cf:af:c8:6c:11:05:7c:
f6:3a:a1:78:7d:a4:6c:51:ac:aa:86:40:7b:7d:50:b9:fc:98:
cc:85:68:d6:e3:44:f6:c3:cb:b6:c5:2e:91:ad:db:c1:16:95:
48:39:ff:f9:05:c5:17:f1:4e:5d:5a:2a:18:61:23:0a:1b:ea:
af:75:dd:66:f4:86:3c:42:0e:8f:9c:6a:94:9a:18:1f:ef:89:
93:03:e1:d2:d0:0c:c2:71:5a:b2:05:ba:19:56:f1:93:c2:43:
c6:f8:fa:2a:81:4e:0a:89:10:33:27:79:e1:28:62:0d:67:fd:
a9:7e:a3:ac:6f:f2:b4:ad:4e:c9:d5:1c:17:eb:db:5d:48:10:
46:af:3d:cc:ff:0a:9e:69:89:3f:b0:9f:67:d7:b4:b3:bb:38:
ff:f3:e9:cc:7e:2d:3e:84:99:75:0c:9e:b1:23:cc:47:19:49:
81:8d:d9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:11:48 2026 by rpki-client