
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
File: HmATrx-FZOqgCX2x8haHTEt4Zw4.mft (raw, json)
Hash identifier: h0UWP4yHfayqVyUIjtVJ/WNSGH1NCcplVJ6wUTWJzjM=
Subject key identifier: D3:2E:A9:A6:E4:46:03:01:DC:AC:86:AA:83:6F:24:B2:85:AD:1B:E8
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Certificate issuer: /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial: 026B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
Manifest number: 025C
Signing time: Thu 29 Oct 2026 02:51:26 +0000
Manifest this update: Thu 29 Oct 2026 02:51:26 +0000
Manifest next update: Thu 05 Nov 2026 02:51:26 +0000
Files and hashes: 1: HmATrx-FZOqgCX2x8haHTEt4Zw4.crl (hash: MYHPTZebPqVWhl1tceWk8Ph+le/Izpvj9OvRLXArgmI=)
2: F1A4DAD6403211EEB47BF84AC4F9AE02.roa (hash: /i61ongesRVs6GzFE6G2KDY9aaIP3uRMFwQZFR3nHRc=)
3: 1042D952157F11F0BA309342C4F9AE02.roa (hash: V3mSD2PmxvztBCh6XpV5mCgqBcH3iqbAbCPx3PCcyPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 02:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 619 (0x26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Validity
Not Before: Oct 29 02:51:26 2026 GMT
Not After : Nov 5 02:51:26 2026 GMT
Subject: CN=6ae2b4ae-d37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:bc:9e:5e:a8:49:03:78:cf:d6:23:4f:59:
43:13:44:91:69:5a:86:a8:fd:e9:80:42:a4:2e:2b:
dc:98:ab:72:83:f4:4e:d1:7b:9e:51:9e:d8:7f:0e:
0d:2d:43:71:01:a9:aa:5a:ad:49:cc:5c:8a:88:dc:
44:43:49:5d:40:e0:4c:40:e3:84:e4:82:dc:ba:80:
2c:e1:54:ca:33:67:b3:9e:09:1e:7c:ba:26:b0:be:
6b:d0:f2:c4:47:d8:c7:ca:ea:54:fd:13:20:2b:bb:
0f:ca:84:5a:b4:49:b6:df:bf:26:65:44:05:65:c6:
4e:44:3c:64:b1:ee:8a:26:65:b8:4d:42:39:89:8a:
5d:68:e5:7d:a7:bc:95:2d:f9:64:01:59:a6:46:60:
4f:3a:01:6b:e4:94:5d:95:bb:2a:48:cb:51:67:50:
f2:38:e2:db:27:34:58:0e:3b:62:ff:20:79:da:35:
e5:a9:ac:2f:ce:60:80:7d:ba:b1:50:82:6a:ae:76:
e0:2d:42:8d:98:d4:63:94:02:7d:65:cd:a0:3f:65:
df:4d:83:1d:60:11:17:b0:ad:ae:78:7a:71:20:90:
6e:38:d8:9c:3f:17:3b:43:4e:4e:1d:4d:59:67:1a:
56:0d:e9:aa:8e:1a:9d:f4:5b:54:5d:b4:16:b1:16:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2E:A9:A6:E4:46:03:01:DC:AC:86:AA:83:6F:24:B2:85:AD:1B:E8
X509v3 Authority Key Identifier:
keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b9:79:33:ad:65:b7:15:6b:b1:4f:c0:d5:b2:b8:7f:85:ce:
11:ea:d8:ab:e3:48:dd:83:7e:68:1b:1e:64:d3:7a:24:47:71:
9a:c1:09:1a:2d:32:bc:b5:13:01:c1:fb:c3:3c:1f:dd:03:64:
b3:82:13:8a:a9:44:d6:2e:59:72:e6:7b:ab:db:dd:71:1d:bc:
95:fb:a9:57:c9:ce:c3:6f:9c:5c:56:07:57:01:bb:42:a9:2f:
e1:aa:fc:9e:1f:99:81:83:ea:1d:2e:d8:00:4d:64:63:84:e6:
9d:39:5c:61:0b:bb:8e:1a:55:2b:c7:4e:d9:23:29:1c:8c:05:
47:55:e8:ca:04:44:14:8e:75:ed:d2:d6:89:ce:c7:23:58:45:
0b:03:d7:c1:20:15:75:d4:45:a9:e9:61:9a:dc:2a:ab:53:bb:
5f:04:d0:62:7d:15:14:9d:ba:79:f2:75:f4:dd:33:21:84:cd:
eb:7d:08:78:7f:cf:2f:9f:dd:67:80:e0:3b:fc:bf:eb:d2:94:
4d:91:a1:9f:77:3c:75:75:73:06:0d:eb:17:8a:da:cb:fd:af:
2a:0a:b7:b8:6c:5c:c9:c9:92:38:a0:8f:8b:7e:77:ad:57:bd:
9b:eb:fd:e2:7c:f1:68:12:cd:d2:e4:c5:1a:82:a8:28:65:a5:
0e:ae:1d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:13:59 2026 by rpki-client