
$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json)
Hash identifier: 0hssJRuXn1B6N/OTwxIwOqmyXciVj+eFCwDLE791x8M=
Subject key identifier: 04:75:B5:85:C6:98:04:37:33:21:D5:7C:5F:1D:36:E7:83:06:70:82
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial: 0483
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
Manifest number: 046F
Signing time: Wed 19 Aug 2026 00:30:14 +0000
Manifest this update: Wed 19 Aug 2026 00:30:13 +0000
Manifest next update: Wed 26 Aug 2026 00:30:13 +0000
Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: JXIfOq/M6EL1PqvmdXFguJ/TQN9BOxmtyQXGiGgxpVY=)
2: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: GiZELc+b+jUgp2lXXKA22MVtc86QrBiVWxgNmFeaq0w=)
3: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: YKkvmk+q8uJbT1Z9J9DbUkbZ+Iajvavs0STqwkz+YJA=)
4: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: iCSd+4enkqxY2lDM1zxQZRRXgBPKUIXfnyxSxCEqtSs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1155 (0x483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Validity
Not Before: Aug 19 00:30:13 2026 GMT
Not After : Aug 26 00:30:13 2026 GMT
Subject: CN=6a84f915-3ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:dd:7c:e9:e4:fc:e5:30:67:95:46:aa:05:
dd:89:6d:8c:93:59:22:96:35:3d:64:a4:32:a0:d2:
f3:55:2e:8b:e1:15:46:c3:fd:34:c6:cf:03:88:5b:
bd:35:0c:48:72:a1:15:2f:cd:67:1e:06:a7:10:35:
65:f1:94:da:1a:50:a3:16:e5:c9:dd:4e:3e:ac:c5:
89:53:d8:29:a8:1e:a0:de:df:49:94:5c:18:0c:24:
19:6e:c2:01:fb:a5:d0:e3:f1:18:f0:34:ff:ca:2b:
9f:73:c2:07:8a:3a:62:c8:55:19:58:fa:43:9e:94:
58:32:ba:0e:9d:8a:2b:a0:15:45:c1:e8:40:73:aa:
bd:a0:14:97:d2:94:f9:76:1d:c4:43:37:d9:54:95:
3a:e6:b5:21:0e:eb:d4:bb:f4:89:fa:f0:da:09:85:
e2:e7:bb:45:18:7b:1d:05:3b:9c:10:8b:22:51:87:
6e:9a:2a:76:f1:bb:c9:8f:a4:c8:67:b6:5b:f7:f3:
5e:47:f6:e2:f1:ac:ea:2f:70:cc:e0:cc:fc:bb:dd:
af:c1:02:ae:cf:fd:b4:73:b1:67:70:b9:d5:7a:b0:
cb:9e:50:55:85:f0:d4:a9:6b:87:1d:24:fe:bb:d7:
8e:33:34:02:22:fc:3a:bc:3a:46:45:0d:bd:4a:d9:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:75:B5:85:C6:98:04:37:33:21:D5:7C:5F:1D:36:E7:83:06:70:82
X509v3 Authority Key Identifier:
keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:b7:c3:7b:fc:9e:09:a3:b8:62:89:80:c5:09:fa:6c:68:5a:
e3:63:2e:80:d2:1a:7e:d7:31:2d:46:50:c8:cf:61:2d:1a:49:
91:4a:87:2f:64:f9:15:b7:72:45:d2:9b:1e:02:c3:f9:ad:3e:
3f:c2:4c:5b:d5:cd:28:16:ae:d4:0e:0d:70:1f:9f:56:8c:6b:
55:38:d1:dc:33:32:50:99:88:af:e1:ec:6a:76:79:86:b1:b0:
c8:18:09:bf:16:1e:51:b1:7a:59:ee:f0:68:4f:4c:cf:75:31:
e0:48:a1:6a:23:23:a6:88:26:ff:07:8d:aa:20:82:67:97:4a:
97:4e:7b:d5:ee:99:cf:63:92:9b:f7:71:e0:b3:5e:88:8e:73:
ea:36:dc:ce:12:cf:bf:0c:40:e3:1b:8b:79:21:39:d6:4c:3a:
9f:fb:10:a6:4f:95:57:6a:72:10:3b:c0:c8:72:e4:69:21:64:
98:ff:a7:16:f4:a9:14:1f:3f:fa:d6:98:fe:e6:16:2d:99:b1:
a0:2a:42:99:d0:0b:3d:9b:fb:74:d0:2b:6f:30:c6:90:9a:17:
68:7a:2d:56:ea:98:69:b5:4b:a1:16:12:cb:e4:9b:3a:f6:a0:
f5:90:54:7f:fb:4a:8b:48:da:c5:44:c8:77:73:26:8b:48:a8:
e7:7f:87:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:02:36 2026 by rpki-client