
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
File: hm540aRej9EmgIr_fOpPwI59kqg.mft (raw, json)
Hash identifier: Nnzu0Sgo3M9vruZUcvDAZyC5RU+ZrQFz7KmOfhu/bvo=
Subject key identifier: B9:C8:3E:3C:9F:C7:BD:7F:D1:44:C3:A7:4B:EF:53:D0:BF:37:E6:2A
Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8
Certificate issuer: /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
Certificate serial: 01EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
Manifest number: 01DB
Signing time: Sat 03 Oct 2026 04:24:24 +0000
Manifest this update: Sat 03 Oct 2026 04:24:23 +0000
Manifest next update: Sat 10 Oct 2026 04:24:23 +0000
Files and hashes: 1: hm540aRej9EmgIr_fOpPwI59kqg.crl (hash: MhrsRnW0E0pgn+lSD4yz7i6ILfwtB1+MbDdefnYW9NY=)
2: 139B8950382911F1B2EF7ADC9D833773.roa (hash: hVaUELhP5lL/NOJceIrXYGy4lOBy7MgLdEmJ1OSKOf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl
rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CFCE, serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
Validity
Not Before: Oct 3 04:24:23 2026 GMT
Not After : Oct 10 04:24:23 2026 GMT
Subject: CN=6ac08378-13ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:56:6e:f4:64:26:c6:ef:17:31:e5:13:7a:
7a:7e:86:ef:53:a2:f6:21:84:43:a5:de:02:47:b4:
97:c8:68:97:90:d1:53:ff:d4:d3:4c:56:53:10:e1:
cc:30:29:b2:a8:e2:ff:8f:b4:5d:bd:f5:ad:4d:10:
03:85:72:c1:7b:34:46:4e:48:b1:dc:ce:5d:b3:03:
8e:5c:2f:8c:b4:a6:b3:6d:cd:73:fb:e3:5b:b0:00:
06:99:4b:58:ce:44:d3:f0:2d:b6:b4:3a:36:c3:53:
63:a2:86:0d:75:c2:af:04:a8:b3:30:ad:d0:d8:67:
40:ef:98:ff:df:3d:6c:0b:52:0d:41:1d:08:d6:1e:
d2:9c:4e:c3:a2:80:86:cd:72:ec:33:fe:8a:6e:d2:
87:bd:0e:53:c7:d0:dc:54:b4:97:3b:3f:d5:be:9b:
a1:ea:7a:dc:68:9f:98:07:32:3a:77:4c:85:24:31:
8b:0c:84:52:90:bc:02:9b:5b:15:3c:9c:29:ea:5a:
48:7c:bf:a3:a1:9d:46:e4:6d:ec:77:67:d0:0b:ec:
e8:66:ba:37:72:77:ba:b0:7d:8e:30:72:4c:b2:5e:
e6:25:4c:1d:12:04:ba:f2:af:81:22:0e:84:12:9e:
0a:ca:b8:f7:94:ec:8e:84:63:4b:fe:bb:97:0c:e0:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C8:3E:3C:9F:C7:BD:7F:D1:44:C3:A7:4B:EF:53:D0:BF:37:E6:2A
X509v3 Authority Key Identifier:
keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d1:70:74:95:ed:52:1a:f9:3e:96:2a:af:7e:4e:de:74:68:
32:20:bf:52:a6:f2:20:f2:7f:24:91:2c:98:27:ca:37:1e:d6:
3c:aa:a2:0f:6b:18:80:10:39:c9:3e:ff:01:24:91:d4:7c:89:
76:88:63:3d:c4:12:e1:6d:fd:49:d4:52:0d:50:27:5e:2f:50:
72:d8:36:27:f9:b5:fb:cd:55:0f:fc:a2:e9:28:30:b5:5c:e3:
4f:da:04:24:18:71:ce:20:ad:df:58:28:06:68:d5:49:6d:be:
b1:a2:26:e0:79:cd:ee:f2:b9:a9:6e:6b:79:4d:e1:d8:01:07:
55:3d:b4:ad:d2:83:85:8d:8a:d3:f5:f1:09:48:0b:08:17:21:
3f:70:dd:c0:c1:28:9c:4c:c0:16:a3:4e:80:1a:fe:d0:9a:6c:
8d:e0:06:0e:2c:51:d7:1b:92:40:78:3c:f0:03:6a:10:23:d7:
18:dd:31:29:96:c9:03:1d:fc:92:04:17:0e:e9:70:af:da:01:
2b:8a:d7:c2:be:c1:46:4b:a6:20:d2:54:83:ab:68:18:d4:a5:
25:e9:f1:52:46:83:77:3e:d1:86:1c:08:d8:67:cf:36:11:d5:
9a:e2:a6:31:73:44:b3:b6:aa:23:68:ee:51:eb:e4:db:19:b5:
9d:50:b6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:08:50 2026 by rpki-client