
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
File: HT4YuPamfZKWztceIZJFoygFJn0.mft (raw, json)
Hash identifier: bjVlsT3jo8XerHGY/tG7tscLkFFvCqotjJinIcLz1qg=
Subject key identifier: 3A:E2:44:B5:DA:B7:6B:E0:32:EC:A2:FC:B4:D0:2F:F6:49:7E:F4:70
Authority key identifier: 1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
Certificate issuer: /CN=A91AD5C8/serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
Manifest number: 7D
Signing time: Thu 03 Sep 2026 07:59:23 +0000
Manifest this update: Thu 03 Sep 2026 07:59:22 +0000
Manifest next update: Thu 10 Sep 2026 07:59:22 +0000
Files and hashes: 1: HT4YuPamfZKWztceIZJFoygFJn0.crl (hash: 9/gM9WGjQmEFQCYdKKkqKfPZkPSsPJrmDezJQTJOuCE=)
2: 40DFA7D2EF8811F0A94034DF606F56BC.roa (hash: r01cCM8Cr1fBBAypHwZvdCaBHe7BaHRTnIOSdsNilxQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 07:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD5C8, serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Validity
Not Before: Sep 3 07:59:22 2026 GMT
Not After : Sep 10 07:59:22 2026 GMT
Subject: CN=6a9928db-6d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:de:64:c1:dd:88:f2:07:60:b4:4f:62:e6:
1c:60:b3:62:f4:62:f8:61:6d:4e:b2:73:70:96:34:
fc:56:2b:36:1a:07:14:99:54:73:2a:00:db:d2:df:
f3:10:1f:4b:1f:df:0e:65:a9:49:45:98:b7:f3:46:
50:07:4e:70:50:03:3c:d5:31:ca:2c:ea:97:43:f1:
fd:29:37:57:45:ad:35:8c:3f:50:2d:5c:22:70:b6:
7c:e6:85:3e:16:eb:b3:07:44:66:a6:ed:e5:17:e3:
20:17:30:af:52:32:c3:6c:e3:fc:ff:94:2d:44:95:
bf:30:da:a1:f2:aa:41:d2:e5:45:5b:60:4f:da:da:
fd:ba:7f:bb:cc:2f:9c:71:9b:c3:3f:2e:fb:ce:d8:
47:b0:b8:ed:14:4e:eb:a4:16:ad:88:fe:a5:47:59:
70:90:da:bc:ae:35:f1:12:f1:df:b4:e7:2d:93:d7:
e3:4a:44:b4:d3:11:d5:35:80:19:6c:7d:7b:e1:ad:
be:00:b7:07:6e:7b:77:72:83:f0:f2:e6:07:be:84:
07:bb:4f:3e:02:f5:01:d3:ed:ca:cd:75:7f:77:60:
c7:23:67:71:3f:32:ce:aa:8f:69:30:28:99:8d:fa:
69:a9:ca:1f:21:be:dc:5e:cf:c8:ef:62:12:d8:9c:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E2:44:B5:DA:B7:6B:E0:32:EC:A2:FC:B4:D0:2F:F6:49:7E:F4:70
X509v3 Authority Key Identifier:
keyid:1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:df:3f:49:a7:a6:d0:f7:50:30:e4:e6:a2:d1:2d:34:8a:be:
6c:b6:75:26:ef:a4:d2:f9:49:fd:85:7c:dc:70:ed:02:32:03:
c5:0c:8c:ae:52:47:a0:40:fa:94:54:82:8b:bd:57:60:44:94:
f9:1a:44:38:07:43:af:67:ee:a0:34:d5:b7:4d:76:eb:3f:d0:
17:f1:1b:24:43:f9:e5:6e:6e:55:1c:9d:29:ce:5b:03:10:61:
0e:4e:bb:e8:38:45:b5:0a:7f:79:25:ff:b2:86:d8:ff:66:5d:
bc:6b:d7:2a:66:47:ec:95:ea:29:ff:d7:1b:46:94:08:6f:52:
1f:f2:1d:34:df:b0:4b:03:a0:f2:9b:41:68:26:f9:86:82:92:
88:ec:5c:de:8b:7f:dd:60:e7:ab:70:e5:be:27:04:8a:6f:d5:
64:3b:b7:2c:14:99:7b:aa:66:9e:0a:86:cd:2b:b0:45:75:00:
49:0b:b8:a4:3d:b0:11:9c:9e:2e:15:b3:ab:1f:82:aa:e4:73:
7a:e3:9d:ec:e2:b1:06:f1:db:2f:84:54:ad:ad:86:ff:c4:aa:
c6:f5:9b:c2:f6:0d:54:4b:b3:e5:1d:bf:c3:82:21:f3:37:75:
c9:80:cc:99:9e:d2:6e:95:66:7a:9c:51:8a:39:96:2c:52:ee:
e9:fd:0a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:28:09 2026 by rpki-client