
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft
File: huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft (raw, json)
Hash identifier: YKl2Mse9fcBFiadMvexG6f8/czpLnZTPtdDYg06Q8HY=
Subject key identifier: F1:6E:37:B1:71:4D:4C:07:0F:3F:32:23:90:CC:F9:CB:2F:92:B9:83
Authority key identifier: 86:E4:25:23:7B:D2:3C:E4:3D:11:98:35:18:12:60:9B:F4:05:55:F5
Certificate issuer: /CN=A91C6A87/serialNumber=86E425237BD23CE43D1198351812609BF40555F5
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/huQlI3vSPOQ9EZg1GBJgm_QFVfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft
Manifest number: 0C
Signing time: Sun 05 Apr 2026 08:27:31 +0000
Manifest this update: Sun 05 Apr 2026 08:27:30 +0000
Manifest next update: Sun 12 Apr 2026 08:27:30 +0000
Files and hashes: 1: huQlI3vSPOQ9EZg1GBJgm_QFVfU.crl (hash: uojk8j30xciAMpwbkkB1p0AhaWbA22FudtpQEsaUlfM=)
2: 55D930E024C611F1B0EE1E69A6833773.roa (hash: Hw7ENTeCIJUN2Q7kCZRq1jtY4Qdg596dbpso11pOaj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.crl
rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/huQlI3vSPOQ9EZg1GBJgm_QFVfU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A87, serialNumber=86E425237BD23CE43D1198351812609BF40555F5
Validity
Not Before: Apr 5 08:27:30 2026 GMT
Not After : Apr 12 08:27:30 2026 GMT
Subject: CN=69d21cf3-5ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:ff:2c:33:4b:a7:aa:50:a5:5a:e9:28:6f:
41:df:34:d4:15:e2:14:00:b7:90:4a:5a:a7:9a:ba:
f1:e7:13:19:91:64:1f:6e:c5:c4:37:41:68:1b:e5:
4a:3d:3b:e2:e1:9e:04:de:d2:bc:18:ed:e2:93:fd:
9a:6e:b7:c8:f8:cb:e4:89:86:d8:5a:2c:0e:fd:ad:
19:da:6e:04:cc:a7:85:0f:14:f6:e2:a5:b8:b8:a0:
dd:bb:42:c2:07:cb:a3:8d:b9:f0:3c:d7:a3:02:b0:
2a:be:23:67:84:c9:10:e0:4a:97:93:ce:d0:24:ef:
93:8a:43:c2:0b:75:79:d7:3d:8c:a7:b8:a9:9c:d0:
5e:cf:a9:ca:34:46:20:2a:33:de:74:bb:7e:60:ad:
fb:b8:38:f2:b1:c3:cc:11:8e:df:b3:2d:8b:4c:d7:
96:0b:d9:b0:61:0a:b6:d9:81:7e:12:ba:4b:cc:f0:
35:5f:a8:ae:41:5c:fd:58:c5:4c:1c:d2:32:c2:ac:
7a:6d:8b:25:83:5a:ea:e9:f9:bd:fd:b6:ae:c4:45:
77:b1:98:47:30:37:b7:90:55:8f:0d:97:1f:87:06:
65:45:8f:33:30:cf:f0:3c:fe:2e:63:94:9b:a8:53:
e5:7f:20:2e:8f:34:9e:d6:4a:11:98:bc:a4:d5:b1:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6E:37:B1:71:4D:4C:07:0F:3F:32:23:90:CC:F9:CB:2F:92:B9:83
X509v3 Authority Key Identifier:
keyid:86:E4:25:23:7B:D2:3C:E4:3D:11:98:35:18:12:60:9B:F4:05:55:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/huQlI3vSPOQ9EZg1GBJgm_QFVfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:aa:74:36:cd:9b:a3:86:ca:64:be:8c:3c:35:bc:cc:a5:7b:
48:cc:eb:e5:d2:3c:ae:7a:4e:eb:82:d0:c4:f8:28:c5:a0:07:
da:44:88:c5:00:41:17:13:62:2b:63:58:2c:6a:e1:1c:1f:f6:
4a:07:14:a1:e1:0e:f0:b7:21:89:50:8f:d0:f7:ff:a9:93:f3:
01:57:03:ac:2e:25:e7:5a:39:1b:e3:e1:53:a1:05:fe:63:35:
ac:b1:99:22:83:49:62:62:ad:36:d0:1a:eb:b7:e7:a6:a7:47:
49:1a:e7:c4:65:50:d1:ee:80:6b:9c:56:e3:49:1b:95:53:9b:
85:71:4f:dc:67:0d:71:ee:1c:d2:fc:82:47:df:3b:9a:1a:08:
09:43:1e:5c:89:41:8c:70:33:2c:17:0e:7a:a5:91:5b:9a:0b:
83:22:b2:79:c4:56:93:99:4b:04:e5:f6:75:3b:ec:cf:53:2e:
e4:9c:73:6c:3c:81:71:27:b1:f1:20:96:17:2f:ba:66:d5:39:
e2:89:f3:b8:02:c0:ca:f6:78:c1:71:84:d9:cf:d4:5e:5e:e3:
33:c5:51:0e:5a:a0:a7:ff:76:72:87:13:c9:bb:ba:b1:05:04:
4c:2e:cc:af:9c:b9:7d:a2:b5:ca:31:f6:2e:5c:69:db:50:0c:
4b:60:1c:f8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NkE4NzExMC8GA1UEBRMoODZFNDI1MjM3QkQyM0NFNDNEMTE5ODM1MTgxMjYwOUJG
NDA1NTVGNTAeFw0yNjA0MDUwODI3MzBaFw0yNjA0MTIwODI3MzBaMBgxFjAUBgNV
BAMTDTY5ZDIxY2YzLTVjZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgwP8sM0unqlClWukob0HfNNQV4hQAt5BKWqeauvHnExmRZB9uxcQ3QWgb5Uo9
O+LhngTe0rwY7eKT/Zput8j4y+SJhthaLA79rRnabgTMp4UPFPbipbi4oN27QsIH
y6ONufA816MCsCq+I2eEyRDgSpeTztAk75OKQ8ILdXnXPYynuKmc0F7Pqco0RiAq
M950u35grfu4OPKxw8wRjt+zLYtM15YL2bBhCrbZgX4SukvM8DVfqK5BXP1YxUwc
0jLCrHptiyWDWurp+b39tq7ERXexmEcwN7eQVY8Nlx+HBmVFjzMwz/A8/i5jlJuo
U+V/IC6PNJ7WShGYvKTVsaiNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8W43sXFN
TAcPPzIjkMz5yy+SuYMwHwYDVR0jBBgwFoAUhuQlI3vSPOQ9EZg1GBJgm/QFVfUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTg3L0RBMjQzNTRFMjRD
NTExRjE5QTQyMEVFQkE1ODMzNzczL2h1UWxJM3ZTUE9ROUVaZzFHQkpnbV9RRlZm
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvaHVRbEkzdlNQT1E5RVpnMUdCSmdtX1FGVmZVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2
QTg3L0RBMjQzNTRFMjRDNTExRjE5QTQyMEVFQkE1ODMzNzczL2h1UWxJM3ZTUE9R
OUVaZzFHQkpnbV9RRlZmVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBEqnQ2zZujhspkvow8NbzMpXtIzOvl0jyuek7rgtDE+CjFoAfaRIjFAEEXE2Ir
Y1gsauEcH/ZKBxSh4Q7wtyGJUI/Q9/+pk/MBVwOsLiXnWjkb4+FToQX+YzWssZki
g0liYq020Brrt+emp0dJGufEZVDR7oBrnFbjSRuVU5uFcU/cZw1x7hzS/IJH3zua
GggJQx5ciUGMcDMsFw56pZFbmguDIrJ5xFaTmUsE5fZ1O+zPUy7knHNsPIFxJ7Hx
IJYXL7pm1TniifO4AsDK9njBcYTZz9ReXuMzxVEOWqCn/3ZyhxPJu7qxBQRMLsyv
nLl9orXKMfYuXGnbUAxLYBz4
-----END CERTIFICATE-----
Generated at Mon Apr 6 01:00:48 2026 by rpki-client