
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
File: HNLU8yahhKSHvyKs14rVwGj0ZmE.mft (raw, json)
Hash identifier: NCKu3KO5gQOrnrFiiGGMmWJRYUmEg7wcT6nRWoXtcQ4=
Subject key identifier: FC:71:7F:91:07:1C:F2:14:C1:96:F7:0C:D1:A5:E2:75:F5:28:64:F3
Authority key identifier: 1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61
Certificate issuer: /CN=A91F8177/serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
Manifest number: FB
Signing time: Fri 25 Sep 2026 06:21:05 +0000
Manifest this update: Fri 25 Sep 2026 06:21:04 +0000
Manifest next update: Fri 02 Oct 2026 06:21:04 +0000
Files and hashes: 1: HNLU8yahhKSHvyKs14rVwGj0ZmE.crl (hash: G8CvNCyjzfqZp446J2t9wvoqPdlmpZGw1NZu+KLuuP0=)
2: 447A88023DDC11F0ACD9F475C4F9AE02.roa (hash: yApvKnBxIUvq7AlUwJW85McmrlejDSLKrMcrZmKRC/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl
rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8177, serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
Validity
Not Before: Sep 25 06:21:04 2026 GMT
Not After : Oct 2 06:21:04 2026 GMT
Subject: CN=6ab612d1-2802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:60:ab:35:48:72:26:eb:af:5f:08:6a:bc:
05:01:b0:a3:7b:f2:36:93:8a:96:17:ff:3e:98:93:
82:77:49:6f:dc:43:cc:95:59:c0:94:74:28:0b:6b:
56:5e:b3:1a:ab:75:7e:27:92:86:bc:47:8a:0f:82:
4c:07:de:f0:15:9c:46:40:a3:29:a5:33:d2:18:c7:
f6:2a:98:03:ff:f6:85:8f:07:76:64:db:ef:a3:a6:
43:d3:03:c1:3c:26:45:69:71:17:1d:fd:15:1d:26:
bc:f9:d5:61:65:6d:c7:3b:f9:d1:20:b7:4d:b5:48:
2c:93:bb:1a:03:68:38:10:c1:b4:39:7e:bb:45:63:
ea:19:f9:87:e8:6c:93:ee:54:98:23:29:3b:a6:4e:
ce:24:b5:12:09:88:3c:b2:72:54:3e:66:e3:5a:aa:
c6:50:8f:2e:ea:2d:96:d0:f0:53:af:ee:8a:b9:1f:
84:87:31:2e:8e:1d:e9:d0:73:ae:58:21:99:58:11:
a9:c2:cd:b5:cc:66:9e:06:73:1b:ff:61:0a:48:db:
f0:56:53:7b:44:d4:19:f6:f6:d6:6c:18:98:c8:3f:
ba:89:bc:59:b4:10:42:e9:9e:49:6e:04:17:96:fa:
76:30:09:c5:a6:3f:b3:3e:63:91:3a:9a:f4:cd:4b:
fd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:71:7F:91:07:1C:F2:14:C1:96:F7:0C:D1:A5:E2:75:F5:28:64:F3
X509v3 Authority Key Identifier:
keyid:1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:f2:e5:65:35:8c:84:0f:61:86:b5:96:b0:d8:38:5a:3d:76:
8b:5e:b2:f2:59:c4:97:67:18:82:b8:b7:cd:1a:5d:0e:58:e9:
36:81:60:77:7f:ad:90:db:21:8b:52:3f:47:ea:ee:d0:21:1d:
57:aa:c0:b0:ed:86:0a:c4:dc:77:a8:8e:63:19:02:42:06:46:
4e:4e:c8:48:1a:1c:93:f7:e5:87:d1:ee:45:6f:a8:b5:94:fc:
74:91:21:d3:14:94:be:76:93:7c:d6:51:e4:b8:94:4d:13:70:
8e:fa:f8:9d:91:21:4a:ea:d2:51:ac:7e:3d:42:00:2a:03:4d:
06:0c:70:1b:f4:32:6e:eb:6d:5f:2d:f3:f3:eb:d2:4d:a2:43:
74:26:b2:4f:be:6b:e1:a4:7c:a1:64:b5:91:a3:c1:fd:61:04:
1b:54:57:a5:b0:58:34:36:a6:14:3b:d7:35:96:bf:57:a1:d6:
ad:7d:05:1b:19:ad:6b:06:48:1e:7d:68:3f:9c:ef:0b:73:70:
0d:e5:28:76:1f:0d:0a:85:51:20:2a:4a:ea:b0:c1:35:af:69:
a8:45:cd:f0:f6:12:cc:d3:74:15:ba:3d:9c:41:5f:16:15:dc:
f0:0c:48:6f:53:47:4f:85:11:0d:1d:37:89:26:d9:80:9e:e1:
32:4d:cf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:18:11 2026 by rpki-client