
$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
File: HjKemPZ2kum1dgI6L7xVfVfdVWw.mft (raw, json)
Hash identifier: RMWL9k6qoYCpFEMQ97wT0yCTN8PdPt8gTq+zWAcA0SQ=
Subject key identifier: 15:4D:F5:09:31:7D:45:FF:F5:77:73:5D:53:12:DC:37:02:D6:1F:AD
Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Certificate serial: 0E6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
Manifest number: 0E37
Signing time: Wed 10 Jun 2026 17:49:19 +0000
Manifest this update: Wed 10 Jun 2026 17:49:19 +0000
Manifest next update: Wed 17 Jun 2026 17:49:19 +0000
Files and hashes: 1: HjKemPZ2kum1dgI6L7xVfVfdVWw.crl (hash: ALfC4MVjIJsuSYLhFCSvILr4BXsEqatZ49ZoTMIpqi8=)
2: 4EF1DE0E822A11EDB2081A49C4F9AE02.roa (hash: kuKfhwok7IV2xZV+q15Uru1Qvlc7Ty7LyqYda2rZjaY=)
3: 8F7DDD8889B811EE9E7ABE26C4F9AE02.roa (hash: bJa45JxM0BM6SHPylrF6iczdI3TR6YwWJGhmk5n+6Co=)
4: 50063EE8822A11EDB2081A49C4F9AE02.roa (hash: hFX5YE8MCfCx/kmb790trFxkpl5n33coYoMd9aDEGes=)
5: F2826A504FCF11EB88444467C4F9AE02.roa (hash: Ucwe0TblfY65Z8jyUiAbiD9N4E5gQiucEqZR5BprIfA=)
6: 79B042BAF3BD11EE961D7A7AC4F9AE02.roa (hash: OYQ8Q3ql6qFWt6j+WB79+jUAS4lPKWiDOJJ6WWsPhFE=)
7: D0551B50046411F09760073DC4F9AE02.roa (hash: rp8AtmMvaJKirkqtM8xsbLFfIx4jMN0u7R5/2vGn/yo=)
8: 87BB6D70822711ED94C3212CC4F9AE02.roa (hash: m40Au0D9D53HHKA3UY789RoJoXUIJ7gV5QbX6BIo4EU=)
9: FD120CC2D94411EDA95E3613C4F9AE02.roa (hash: fHXngSTjkehnoyzfzZzWQmngco23iukL2koF5Ddr+ak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 17:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3693 (0xe6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Validity
Not Before: Jun 10 17:49:19 2026 GMT
Not After : Jun 17 17:49:19 2026 GMT
Subject: CN=6a29a39f-842a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:f0:44:95:2b:32:e2:ab:5c:bc:a2:95:7a:
2b:8f:ad:2f:cf:f6:d0:a1:69:78:7c:c4:35:8c:94:
30:33:33:af:6c:cf:c3:89:41:30:02:79:45:93:19:
85:31:ac:e9:aa:6f:70:16:b7:aa:0c:8c:5b:aa:c5:
5d:0a:cf:4a:66:a1:39:9d:6c:e1:e7:50:c1:d4:7e:
4f:32:9e:ba:78:4d:1f:63:cd:fc:15:58:10:91:bf:
08:7f:e1:00:dc:e2:c1:3d:cc:dc:7f:0c:0d:76:50:
67:bf:48:3c:40:4e:c1:17:d1:d4:f0:5b:1b:fe:04:
dc:f9:1f:de:5e:ae:ea:83:ae:c4:5d:ec:02:ad:d6:
35:2f:94:2c:f7:a5:51:b3:b9:1a:4b:26:b0:33:af:
71:af:60:ed:1a:4d:6c:bf:af:f3:4a:1e:00:bf:29:
bc:e3:6e:7f:2c:49:12:46:19:43:6c:5f:f4:15:a9:
d6:1e:ca:55:fc:25:39:49:ec:c6:da:ae:08:9f:be:
e1:33:07:f7:be:60:5e:0a:0a:e3:10:91:e6:38:dd:
d8:db:78:14:b9:f7:f5:05:0a:35:c9:fe:ce:7d:5a:
6b:65:95:82:f3:ac:27:81:ba:8c:f0:07:ed:6e:f8:
2d:d8:b5:44:51:7f:a6:fe:a2:10:8e:d9:53:04:4f:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4D:F5:09:31:7D:45:FF:F5:77:73:5D:53:12:DC:37:02:D6:1F:AD
X509v3 Authority Key Identifier:
keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:fd:3c:14:f3:2f:70:b3:64:3a:6b:69:ab:71:60:8f:62:d4:
21:43:eb:7b:2e:7a:c2:83:50:02:bd:b5:b4:28:9c:1d:ce:14:
d6:94:2d:8b:0a:81:fe:4d:c5:b1:2f:8e:15:7a:d0:b3:12:b7:
7e:a8:42:a2:ea:db:31:99:61:81:dc:e4:0e:bd:46:e9:b5:05:
16:c7:87:d4:78:fb:c7:b9:e8:56:86:b0:10:59:a4:f9:bc:bf:
3e:96:4f:ae:e7:05:c4:a6:0c:97:4d:2d:96:fd:44:39:99:cd:
5c:5f:64:26:de:1e:ea:53:f3:1b:ec:43:2c:36:80:ab:57:4e:
60:af:1d:99:bc:8a:ff:9a:34:b9:dd:9b:7a:8b:0d:57:89:45:
dc:5e:9f:fc:51:60:55:7a:67:dd:42:6b:65:b6:c0:53:1d:00:
c0:a1:94:f5:4c:1d:cf:b5:f1:d1:83:12:fb:5e:a3:4c:4b:e7:
e2:43:9c:85:33:d9:c1:1d:9b:fc:ee:52:aa:1b:51:fd:7b:86:
b7:e4:ba:90:5b:ae:4a:86:eb:4b:d2:4e:30:df:a5:2a:7e:db:
e8:fc:6f:27:1e:3d:a9:4c:98:90:cd:48:ad:ed:3c:ff:cc:05:
32:f6:7c:e1:e0:c1:11:66:7b:82:51:7e:64:1e:a2:fa:9a:33:
13:b4:12:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:44 2026 by rpki-client