
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft
File: hneZBT7JF0sRHLtGspf6ZH6YKqU.mft (raw, json)
Hash identifier: YwvWvAAkLcLgx+hHOQ2INvll63GqAdpLx9fj9TemtOs=
Subject key identifier: F9:AB:68:91:D4:44:3C:3F:34:54:D0:70:34:AF:52:0A:D3:2A:DB:B5
Authority key identifier: 86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5
Certificate issuer: /CN=A91A00E4/serialNumber=867799053EC9174B111CBB46B297FA647E982AA5
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft
Manifest number: 010C
Signing time: Sun 05 Apr 2026 05:23:40 +0000
Manifest this update: Sun 05 Apr 2026 05:23:39 +0000
Manifest next update: Sun 12 Apr 2026 05:23:39 +0000
Files and hashes: 1: hneZBT7JF0sRHLtGspf6ZH6YKqU.crl (hash: SdDtrn/cgZQ1HX0f7dyZvxQy/A+dtWerph2Hf9DnnfQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl
rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A00E4, serialNumber=867799053EC9174B111CBB46B297FA647E982AA5
Validity
Not Before: Apr 5 05:23:39 2026 GMT
Not After : Apr 12 05:23:39 2026 GMT
Subject: CN=69d1f1dc-8dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:86:6b:e0:7c:5b:a8:70:42:2a:c0:16:ac:
aa:08:07:84:b6:69:90:8e:4e:5e:49:51:9d:67:70:
6e:1e:96:c5:78:c1:9f:82:f0:9a:09:fd:1f:f4:0e:
a8:77:6a:54:04:1a:c1:a6:d0:39:ad:0e:e6:49:f8:
e5:3d:2b:96:24:a9:b5:38:99:bf:0d:11:99:a6:a6:
92:9b:37:a3:a9:4f:6f:ab:70:9d:5f:da:76:70:ce:
5d:26:2a:2e:1a:b9:b9:0b:ae:c5:47:6b:69:f3:c7:
c2:8a:5a:a7:dd:5e:9f:68:d7:ef:5e:bd:5a:56:51:
c6:7d:d7:15:eb:34:0b:01:dc:5c:02:cb:21:a1:51:
6d:d8:7b:8d:f5:42:2f:7d:f8:3d:52:1e:01:48:72:
03:1f:e5:96:c2:83:44:0d:de:6d:e5:31:78:f5:89:
80:c7:c3:ee:01:86:60:de:ea:30:ae:fb:2d:ab:f6:
6f:df:65:2a:cb:75:4b:af:bf:2d:cd:31:c6:58:da:
26:4d:c5:36:d7:56:f2:ae:da:59:9b:47:8a:30:0f:
7b:bf:7b:87:fe:e8:73:64:18:3c:51:15:6f:6e:4c:
88:e7:9b:b3:61:f8:9a:9f:ba:e5:56:68:e3:a0:9b:
a5:6d:44:93:96:f6:26:d8:84:b3:9e:4f:98:02:1c:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AB:68:91:D4:44:3C:3F:34:54:D0:70:34:AF:52:0A:D3:2A:DB:B5
X509v3 Authority Key Identifier:
keyid:86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:5f:b9:04:e3:0c:a1:1a:88:39:01:72:71:19:5d:a5:ae:f6:
49:d5:97:86:48:c2:d1:cc:40:ca:49:be:f8:09:19:6e:05:6c:
2a:7b:37:e9:c0:0c:57:63:b4:d7:f5:24:8a:b3:2f:b0:02:33:
cc:75:4b:12:02:a0:af:1b:9d:36:f6:c0:60:60:8a:bd:92:1d:
13:95:c5:b3:50:c7:e5:6a:5f:27:07:e4:fd:74:2a:9d:73:c8:
ec:47:77:f4:7f:5c:aa:5a:5f:d2:89:30:ad:67:a6:60:11:d6:
a1:f2:95:5a:32:5b:04:6d:2f:ed:c2:08:ed:73:5a:ab:2a:a5:
ae:f7:36:ec:04:ad:87:e8:86:6c:a4:58:d4:f3:4b:94:97:1b:
07:99:4b:7a:83:e7:1e:5f:dc:86:d7:f5:0a:c9:52:4d:8a:7d:
34:79:7a:e0:ac:9f:89:5d:5d:17:28:31:b8:9a:9b:54:5b:e5:
59:d5:10:66:2e:0b:91:71:18:8c:43:e7:ae:cf:8d:44:cf:7e:
8e:bf:0a:72:da:9b:5f:42:64:3d:09:75:3c:71:8c:77:28:04:
1f:54:01:17:73:31:ca:cc:01:1b:38:6b:08:f5:05:9f:85:19:
9a:86:17:c2:cb:dc:df:3d:db:76:b4:81:74:c7:9d:7f:0a:a1:
da:89:3d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:05:41 2026 by rpki-client