
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
File: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft (raw, json)
Hash identifier: ce2iqexhorUvc7uLgOWSbBXARJ4tAf/mab4EOF8EvrY=
Subject key identifier: 4F:84:D7:3A:F7:F2:F5:35:90:E8:D2:A9:27:D4:05:86:F0:CF:CC:65
Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12
Certificate issuer: /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412
Certificate serial: 085A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
Manifest number: 0850
Signing time: Tue 22 Sep 2026 20:46:48 +0000
Manifest this update: Tue 22 Sep 2026 20:46:47 +0000
Manifest next update: Tue 29 Sep 2026 20:46:47 +0000
Files and hashes: 1: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl (hash: RGMKPL1P7YhCPM0FWcgLLg0PxKHZ4wwC5QcZ7DwwGo0=)
2: D9BD904224B611EBAE734152C4F9AE02.roa (hash: 4sy5bo4x5IejnxnpTcgGrJIpJDDeVrJ7W1QqzKsRoZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl
rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:46:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2138 (0x85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412
Validity
Not Before: Sep 22 20:46:47 2026 GMT
Not After : Sep 29 20:46:47 2026 GMT
Subject: CN=6ab2e938-3764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:52:c9:82:7d:f2:60:82:b6:5c:85:8c:38:
92:3d:21:4b:49:3c:d1:d9:ef:91:1a:3c:85:ef:52:
69:10:28:12:77:1c:80:11:e8:31:6c:42:d5:b7:a5:
b2:46:3c:46:4e:44:fc:bf:16:c0:34:4a:36:03:36:
cc:5a:b7:27:62:e3:3d:1b:e0:e5:1a:68:79:59:7a:
5d:3f:08:a7:c4:c5:44:d6:3a:d3:57:28:ec:04:b0:
62:03:3b:66:97:61:67:b6:b1:7d:63:3d:e0:56:85:
c3:fd:f2:2a:8f:8c:b2:64:df:4c:9e:5e:d3:f4:ce:
7f:e6:c3:4c:fd:ce:57:c5:61:9e:02:5b:55:71:23:
b6:dd:91:36:65:52:33:3c:8d:2a:50:d5:87:3e:ab:
11:b1:97:bf:35:29:34:4d:51:90:1c:19:28:d2:59:
e6:59:76:86:0e:4b:2d:80:88:ca:c9:39:4d:db:97:
15:91:eb:71:3c:da:90:20:4c:71:e9:8a:2a:91:d3:
ae:a2:36:4c:8c:29:b1:d0:c7:03:15:62:12:fb:98:
30:c2:d4:62:1f:b5:25:ec:7c:42:f8:30:18:70:6a:
75:d7:92:09:84:54:51:0c:7c:cb:b6:72:28:30:c7:
81:a6:6b:57:ff:3c:7c:e4:30:73:9d:16:e8:3f:a5:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:84:D7:3A:F7:F2:F5:35:90:E8:D2:A9:27:D4:05:86:F0:CF:CC:65
X509v3 Authority Key Identifier:
keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:85:f2:82:52:0a:dd:19:1a:06:25:45:62:51:55:f1:f6:db:
26:a6:e1:ca:b8:c1:b8:70:8d:d8:90:16:ec:37:6b:5f:d6:39:
b0:da:cf:8c:92:e3:e5:3a:35:20:f2:f5:b5:1f:96:8e:bf:db:
0a:b5:0b:3d:c7:ce:52:ca:89:6d:9b:5e:88:f5:a3:f6:5a:2f:
df:b8:45:db:4a:84:7c:25:3e:da:46:25:52:87:33:1b:bd:6f:
3c:a6:c1:00:3d:46:37:d3:9f:74:33:40:0d:d8:be:41:a3:69:
13:8c:28:b8:df:c7:2d:ec:8f:c1:cf:04:bd:75:75:c7:36:41:
8a:0d:f9:8a:a7:30:64:da:03:41:e4:07:f5:86:ab:92:d5:0a:
b2:ea:96:13:58:0c:96:6d:d1:41:79:c9:69:dd:5a:7f:5d:f8:
ad:96:0c:81:97:67:80:8e:08:66:76:f2:cc:b3:59:12:12:da:
9e:d2:cc:4e:94:28:56:5a:20:eb:67:45:6f:05:57:6b:d1:81:
e7:83:78:cc:84:64:15:8c:62:df:fc:83:e0:26:2a:9a:e1:79:
bb:db:de:54:38:eb:ef:92:ae:39:c4:19:69:ec:8e:5e:58:88:
50:dc:97:44:66:46:2a:c6:bc:70:12:63:6c:48:31:a6:d8:a8:
89:bb:38:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:12:50 2026 by rpki-client