
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft
File: mHokA1wVORcCC2UduY8JHwqqMic.mft (raw, json)
Hash identifier: QtOgFa5NdTTLPK+Zh+rCBitgoeCs+5Sxr7hCtPNVGPg=
Subject key identifier: 1D:84:BE:FF:33:6D:AA:34:61:CF:AA:14:E5:E7:BF:19:67:46:ED:AE
Authority key identifier: 98:7A:24:03:5C:15:39:17:02:0B:65:1D:B9:8F:09:1F:0A:AA:32:27
Certificate issuer: /CN=A91A31F5/serialNumber=987A24035C153917020B651DB98F091F0AAA3227
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft
Manifest number: 0129
Signing time: Wed 19 Aug 2026 06:22:21 +0000
Manifest this update: Wed 19 Aug 2026 06:22:20 +0000
Manifest next update: Wed 26 Aug 2026 06:22:20 +0000
Files and hashes: 1: mHokA1wVORcCC2UduY8JHwqqMic.crl (hash: zUnCSXfPEedumbD44AO0Nyvku7iuY7EheQmFsCNKGk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.crl
rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:22:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A31F5, serialNumber=987A24035C153917020B651DB98F091F0AAA3227
Validity
Not Before: Aug 19 06:22:20 2026 GMT
Not After : Aug 26 06:22:20 2026 GMT
Subject: CN=6a854b9d-c82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:97:8d:f7:64:5f:cc:cb:92:a9:d0:b8:4e:
1a:2a:d9:42:75:5c:79:44:1b:a0:ee:70:f3:6d:98:
b9:3c:e7:be:21:fd:53:ac:c2:5e:cf:e2:39:eb:1f:
9f:40:13:25:3e:5d:4b:d9:85:7c:e2:76:3c:f4:1d:
e1:cd:5f:28:49:c0:44:25:2e:0c:79:4e:19:19:37:
ab:b9:48:c6:0d:d2:84:da:df:d0:6b:b3:11:ee:e9:
24:44:58:73:52:76:f7:a7:b4:b9:8c:95:4c:7b:da:
8a:1a:58:62:16:ab:98:c9:40:e3:21:5b:28:65:fb:
79:d8:fc:dd:2c:65:0c:51:4c:d4:3d:86:01:08:ea:
b0:90:a2:76:97:e6:4f:16:2e:46:94:f2:51:41:02:
61:bd:69:d0:73:3e:d0:41:6e:f9:5c:de:a9:e9:37:
2f:2b:00:10:c8:61:61:ea:48:39:f5:59:8f:b5:a8:
11:c0:4c:f9:18:77:d9:56:10:d1:aa:a1:76:8b:08:
24:66:3e:03:50:2a:4b:36:b7:81:5f:48:a9:80:fe:
4c:ce:f3:e1:0c:33:17:30:07:7a:91:0c:e7:01:ad:
e9:0e:64:bb:2b:22:dc:20:b8:30:0f:26:f7:c1:db:
7b:40:50:d0:63:e4:75:08:3c:c5:cd:76:b2:46:d8:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:84:BE:FF:33:6D:AA:34:61:CF:AA:14:E5:E7:BF:19:67:46:ED:AE
X509v3 Authority Key Identifier:
keyid:98:7A:24:03:5C:15:39:17:02:0B:65:1D:B9:8F:09:1F:0A:AA:32:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:a0:1d:c5:56:ea:52:dc:ce:ed:d2:56:15:5a:25:55:bd:40:
3b:2c:d5:58:8e:01:c2:72:e2:15:57:4b:be:2e:7d:98:4d:b4:
88:13:7b:c3:c5:36:0d:82:21:ac:91:e5:42:c3:60:ce:35:b1:
60:1d:bc:be:1f:cb:f6:f2:b9:b9:d0:f2:05:7e:d9:7c:b6:99:
11:69:cf:d0:43:24:04:56:46:b8:3d:22:94:84:b9:4a:6d:a2:
bb:5e:9f:dc:bd:be:48:6b:1b:83:a2:f6:a2:e5:fd:e4:bf:7f:
43:65:f0:bf:3b:85:fd:02:76:66:c4:d9:7f:5b:ad:43:da:3d:
16:e0:47:c1:21:2c:30:b8:4e:9c:6e:fc:49:c5:d3:66:6f:36:
71:52:bb:14:8f:25:6f:5d:38:9c:7f:0c:70:fc:99:67:7b:ab:
0b:20:29:c1:9b:d2:ff:ee:c6:58:bd:df:7b:a5:60:59:97:be:
ea:ac:53:88:e6:48:80:fa:90:22:e1:65:ca:08:b3:f6:3b:a9:
ef:db:21:d2:2b:d0:75:9f:bf:2c:a5:38:8d:0a:36:21:11:fe:
48:37:99:91:3b:02:8d:c4:d7:1e:14:53:c8:da:49:c8:08:59:
80:f7:27:5c:6d:f1:c0:32:c8:b2:a0:3c:64:4a:d2:e1:de:ea:
a1:27:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:37 2026 by rpki-client