
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
File: h1tC98YnJXePVtlRtxLriHk0ikU.mft (raw, json)
Hash identifier: MF4w1S1FCUg80VnyWVH0/z3gPtP4gzOHuwpvzyiGgp0=
Subject key identifier: 6C:F5:6E:76:C4:EC:9A:44:4C:B5:BD:28:84:50:75:23:D9:70:94:C1
Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45
Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45
Certificate serial: 084D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
Manifest number: 083E
Signing time: Sat 04 Apr 2026 20:43:27 +0000
Manifest this update: Sat 04 Apr 2026 20:43:26 +0000
Manifest next update: Sat 11 Apr 2026 20:43:26 +0000
Files and hashes: 1: h1tC98YnJXePVtlRtxLriHk0ikU.crl (hash: gqb29zHCCsSh4PAhELeEbxq8Giz4wEu8cc8C5kXnpJk=)
2: 190BF77EF45111F0A4BBE8C5636F56BC.roa (hash: Hs6ib3TffUGsbUHjDLM2h7Z/Rvg89YIH0XLcITVd2Fk=)
3: 382BB29EF45011F0AF80EBA1636F56BC.roa (hash: qKtjyRx0lLlv/KwvG7LBwoOnxK1cXnW5MTg39ctLvtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl
rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:43:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125 (0x84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45
Validity
Not Before: Apr 4 20:43:26 2026 GMT
Not After : Apr 11 20:43:26 2026 GMT
Subject: CN=69d177ef-0e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:0a:b9:58:a0:ea:6b:09:b8:5f:4d:e1:a0:
e6:25:94:db:ca:ed:19:0a:81:c7:f7:65:3f:43:c2:
77:f3:98:35:b0:45:51:58:b5:c6:d0:a7:f1:21:60:
4d:90:87:5d:9c:f1:b2:c8:fd:9b:c5:31:3b:48:13:
d0:58:54:c5:b1:5c:5e:6a:3a:55:1a:85:fb:0a:35:
fd:23:24:f0:68:4b:31:12:d1:35:f5:b8:43:7c:87:
f1:40:08:04:b1:67:94:eb:f6:65:f7:b1:2d:3a:a1:
28:f1:c3:2f:08:23:84:38:d5:05:0e:a3:9d:db:66:
13:71:42:4e:dc:71:cc:79:f6:91:21:1d:fc:1b:02:
3b:ac:68:ed:15:fc:ee:19:60:20:d8:23:2b:3c:f2:
7d:23:bf:eb:2c:58:34:11:3d:6c:32:bd:bc:e0:e2:
be:49:9c:e7:0e:f9:7d:58:ed:bc:d9:35:2d:52:99:
d6:ae:f3:28:d7:78:4b:6e:d1:6a:0f:1b:2c:bd:04:
2c:34:58:ca:fc:48:77:e2:14:83:b9:f8:a8:ad:06:
c4:03:03:f3:77:db:39:da:0c:59:3c:f3:fc:66:cc:
88:e5:59:67:f4:a3:d9:bf:46:10:ef:06:73:d8:e0:
46:30:b0:a2:8f:19:3f:3c:40:4e:19:01:fa:61:9b:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F5:6E:76:C4:EC:9A:44:4C:B5:BD:28:84:50:75:23:D9:70:94:C1
X509v3 Authority Key Identifier:
keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:ee:4b:1c:a4:9f:33:3d:73:26:ad:19:55:15:3d:97:10:5a:
dc:31:b2:d6:8f:c8:14:92:06:67:f7:f1:ad:6e:aa:85:2f:6c:
68:09:37:8f:38:df:1c:98:9d:d9:5d:46:99:7d:dc:21:c1:c6:
d5:3f:bc:7d:9d:00:cf:42:20:05:fb:ae:2f:b2:e4:a3:6a:0b:
5e:2b:c1:e3:a9:7d:de:02:34:81:32:31:85:9d:55:10:6b:69:
bb:1f:38:1e:75:06:c3:12:ab:ff:91:d0:d5:2b:92:90:67:21:
c7:cc:aa:9d:c5:46:2d:99:07:8a:19:64:b1:78:8c:dd:f2:8a:
87:93:03:5f:c3:5a:d2:49:4d:b2:9c:b6:49:5a:70:be:89:7f:
19:31:0a:b8:ab:4a:8e:0d:50:ec:2a:2e:e4:84:be:fe:9a:aa:
91:cf:c9:b6:c4:61:93:06:e7:20:d2:c9:4c:2a:b2:a4:6e:35:
a1:7b:85:7b:9b:1b:cb:fb:37:89:0b:3c:77:0b:7e:43:a4:fd:
39:5c:ee:f0:ec:46:6a:cf:ee:4f:26:d1:dd:92:ca:f5:0f:17:
53:6b:a3:8c:ee:4b:07:f4:97:28:7b:8e:05:9b:5e:b2:4d:93:
74:43:f5:c1:b9:73:e2:5a:6c:98:e1:e0:70:50:89:4a:db:44:
52:16:5e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:45 2026 by rpki-client