
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
File: s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json)
Hash identifier: 7t1koeWWPneYWYLLGxq3xaFPsWINDUBR1eWwfmJ1EVE=
Subject key identifier: 30:30:5F:E9:37:EA:6C:DE:17:4C:94:75:2B:A4:17:5F:1D:61:E7:3B
Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC
Certificate issuer: /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
Manifest number: EE
Signing time: Sun 05 Apr 2026 05:46:10 +0000
Manifest this update: Sun 05 Apr 2026 05:46:09 +0000
Manifest next update: Sun 12 Apr 2026 05:46:09 +0000
Files and hashes: 1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: dVIcjwgaVxSBhin28fpRkawKnPgYi0xnoC2H3d75OLs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl
rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC
Validity
Not Before: Apr 5 05:46:09 2026 GMT
Not After : Apr 12 05:46:09 2026 GMT
Subject: CN=69d1f722-db60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:70:b5:33:b3:ae:27:2b:ac:b2:06:2b:ea:bc:
9f:dd:c1:a4:62:af:b1:0d:c6:48:87:6f:9f:15:d2:
77:d2:5d:dd:13:cb:e2:c0:f7:1c:ab:d7:41:79:ad:
0a:93:59:c0:e3:b5:79:d1:64:9d:34:49:31:48:ef:
f7:a3:31:60:ec:f6:f0:68:15:d7:62:d5:7b:19:7f:
6b:28:f8:73:85:b1:a9:68:1a:06:5f:13:cf:28:39:
6b:51:0d:89:dc:ce:21:31:7a:b9:2c:3e:2a:18:9a:
85:03:2e:c1:b7:12:f2:c1:a0:a2:bb:67:20:17:53:
77:50:bc:a0:58:87:6a:85:30:8e:40:fa:a7:84:87:
43:8a:ab:4a:19:e5:76:37:8b:30:0e:95:3c:08:b5:
7b:09:aa:73:cf:56:24:aa:67:0a:2a:87:9b:44:f9:
d9:67:03:54:85:9b:a6:7f:0d:58:eb:39:03:b4:3f:
12:57:8b:90:7e:22:b6:4d:ac:54:20:e2:75:29:f5:
24:d9:0e:29:9f:7b:2d:64:fa:83:df:d9:2a:29:ab:
f9:a8:af:19:b8:e1:5e:fa:83:31:34:51:67:8e:bc:
c8:77:79:6e:49:b7:6f:b3:e5:b5:f4:d1:5c:fa:37:
80:a9:f2:57:d6:3c:72:9f:81:67:32:4e:36:50:de:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:30:5F:E9:37:EA:6C:DE:17:4C:94:75:2B:A4:17:5F:1D:61:E7:3B
X509v3 Authority Key Identifier:
keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:2d:5e:1c:a6:50:be:e3:31:fc:78:16:2a:55:da:6f:0b:54:
74:11:b5:eb:1e:8d:05:dd:20:8a:d8:cb:55:f3:47:cb:aa:98:
2d:76:8f:6b:79:74:26:e8:49:b0:de:86:54:77:52:bf:a0:3d:
4f:51:03:71:50:b6:46:54:13:04:90:e1:54:a3:91:48:b5:7f:
d8:fc:1a:41:0e:88:9f:07:e3:3c:88:8b:38:bf:65:07:30:b6:
73:31:73:f7:b6:f7:bd:67:85:e9:03:81:3e:09:8f:3d:d7:81:
64:37:0b:79:8e:1a:86:b1:d6:39:9a:5f:70:91:38:84:95:be:
e4:32:8f:58:89:82:19:fa:ec:59:fa:a9:fd:7f:95:f1:b2:5d:
4b:b2:87:53:19:f7:e4:79:c7:8c:e3:89:5b:98:ac:90:c9:fa:
ee:d4:1c:c5:05:3b:b9:59:6e:c1:80:52:a8:3a:11:6b:3c:e6:
6e:4c:50:ba:38:d5:ea:e4:1a:a8:1a:82:82:5c:34:c5:83:de:
77:64:d6:01:ac:03:a6:3e:b2:da:37:05:45:14:e3:12:b5:82:
e6:c7:89:78:2e:d2:28:1a:2d:77:e1:16:07:dd:ba:55:d6:c6:
04:62:d7:cd:16:49:d5:96:f3:e7:c4:1b:37:11:66:e2:7d:d9:
b0:b1:e0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:06 2026 by rpki-client