
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json)
Hash identifier: o5IAPLaLgILaY4y5wvZgFCY0oTP7bvsdyrgAh6luL74=
Subject key identifier: 96:8C:8B:DD:3B:2D:B7:52:53:65:4D:76:FB:D5:3E:50:EC:CD:EB:1D
Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
Certificate serial: 1099
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
Manifest number: 108D
Signing time: Tue 12 May 2026 17:23:18 +0000
Manifest this update: Tue 12 May 2026 17:23:17 +0000
Manifest next update: Tue 19 May 2026 17:23:17 +0000
Files and hashes: 1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: DAwASZ/QFzpjB+FAUNThIpO5lX4WjFdql89jh3RyM10=)
2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: Ao3jfGsh9U1xkNSfRtTIAsdPf+38NYLkOVbSpZBnBWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl
rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4249 (0x1099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
Validity
Not Before: May 12 17:23:17 2026 GMT
Not After : May 19 17:23:17 2026 GMT
Subject: CN=6a036206-3086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0a:ea:10:41:98:a6:e7:20:f8:9a:ef:b2:18:
96:c7:af:68:e2:dc:fa:c8:bc:c6:34:2c:85:3b:5a:
4c:0c:11:ce:e4:99:ea:f5:1d:a3:7f:95:9f:e6:4d:
fe:80:cc:23:e3:53:9d:90:b3:77:0e:bb:2c:1b:3c:
2e:c7:ff:75:eb:3c:89:37:bd:b3:2a:33:67:55:94:
f0:9f:b4:62:9f:93:19:4f:f6:01:5e:27:63:4d:9d:
dd:a0:15:46:ff:e2:41:c3:43:2c:5f:9c:e6:77:22:
11:49:67:db:5c:f0:73:48:8c:6c:13:bb:7f:bf:2b:
7e:bf:a5:c2:fa:04:bf:4a:75:01:51:43:33:f3:e2:
09:86:f3:46:49:4a:99:d1:bf:30:6e:52:f2:74:11:
e6:50:4f:7b:15:fb:bc:33:67:6e:f2:9f:62:56:57:
fb:e9:a5:bf:29:47:34:36:52:01:14:a2:a7:39:37:
4d:b2:eb:7e:fd:f2:8d:d8:92:6b:80:04:8a:51:2f:
d6:87:80:43:1f:86:38:b1:4d:b3:33:5f:c0:46:19:
52:d0:99:ea:73:cc:78:99:df:8a:df:58:a0:63:76:
71:71:0d:bd:6b:da:24:6e:f8:22:c4:d9:57:d8:34:
26:c9:dd:35:57:fb:56:b7:2d:a5:bc:a5:74:22:54:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8C:8B:DD:3B:2D:B7:52:53:65:4D:76:FB:D5:3E:50:EC:CD:EB:1D
X509v3 Authority Key Identifier:
keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ce:1f:05:88:5d:9e:0c:97:60:52:07:ba:34:50:84:9a:ec:
21:93:6a:c0:75:f7:f4:57:ea:a6:d8:19:35:0e:e5:28:d2:be:
12:d7:4a:64:4b:35:e4:03:c5:8c:01:8b:b9:94:1a:ab:55:59:
7d:d0:d7:e9:98:70:78:50:01:99:4a:1c:ba:89:be:0d:df:f7:
16:e9:d6:0d:9d:79:46:34:fb:0f:db:ae:0d:11:1c:44:70:b1:
70:27:d5:25:5b:f3:69:1c:f8:2e:01:75:6b:21:6e:6b:e3:83:
60:68:ae:7a:3d:cd:8f:a4:74:17:a4:2a:86:96:50:66:3f:68:
1b:23:63:09:47:30:a4:8c:6d:f6:ef:d4:6c:ab:f7:7c:fb:c7:
e5:47:8c:2d:73:05:b3:c4:ef:a7:c5:3e:fd:f0:70:05:e3:76:
ed:70:24:27:40:1b:11:0e:6b:89:48:b5:1a:12:89:58:7b:5a:
bf:17:93:c1:a9:ce:cf:7b:f3:73:17:8a:95:0c:b6:84:2a:07:
13:f5:f3:1e:89:d5:fe:7c:31:72:52:c1:68:6f:c5:6d:fe:0e:
57:26:c7:af:2e:90:31:2c:5b:2d:f3:79:5c:c8:71:8c:aa:0a:
f6:d1:0a:e8:84:88:8a:2a:d1:57:aa:f4:15:d5:d4:8d:5c:25:
0c:30:45:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:15:28 2026 by rpki-client