
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
File: hemZwivuAcMmTT0iZ1ghCS__0Cw.mft (raw, json)
Hash identifier: 8y8DKKB8TkzvpHF1r5JNXJT4HLydhtJKy0JH23Thz8g=
Subject key identifier: 27:84:DA:85:6F:44:51:B9:1A:CA:C1:86:94:68:45:4C:CE:65:A9:F2
Authority key identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C
Certificate issuer: /CN=A91AC132/serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
Manifest number: F9
Signing time: Sun 05 Apr 2026 05:40:49 +0000
Manifest this update: Sun 05 Apr 2026 05:40:49 +0000
Manifest next update: Sun 12 Apr 2026 05:40:49 +0000
Files and hashes: 1: hemZwivuAcMmTT0iZ1ghCS__0Cw.crl (hash: v8cPXNKm5qBgDZRSAEXqKLLL1u9qq9MpspE/Q2H6gec=)
2: 8B91AD8CD6B811EF86FC5149C4F9AE02.roa (hash: UTKE8OB36Bwcjc1JGfweQcZlItW6iUFLSvYsOlfMWTM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl
rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC132, serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C
Validity
Not Before: Apr 5 05:40:49 2026 GMT
Not After : Apr 12 05:40:49 2026 GMT
Subject: CN=69d1f5e1-8fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:82:90:33:fe:32:f5:08:de:5d:ed:e4:86:
73:a0:1c:1b:95:ce:91:70:99:ad:e1:92:6e:db:3b:
be:24:b5:3f:68:53:5b:68:5e:87:a6:f3:d6:c0:91:
e7:1e:85:9b:21:48:54:33:b4:3b:6c:3d:5c:dd:18:
f2:0e:41:19:3c:43:3e:98:2d:a9:18:96:53:89:62:
73:f3:24:d0:a7:f6:a1:8e:e9:ea:b3:f6:16:a2:14:
43:78:15:8d:82:4a:8d:2b:0e:67:08:e6:34:dc:8e:
97:c8:c4:22:e3:80:88:8c:a3:31:0f:fa:ea:3a:8e:
d7:55:8e:2c:b0:d2:36:41:47:26:61:45:79:9f:8b:
19:57:ad:10:e4:32:8d:fc:69:70:76:4f:fc:77:99:
e5:c3:7f:97:4e:39:0a:a7:ef:8a:7f:a1:89:64:34:
6e:f9:41:12:59:71:c3:fa:25:bd:02:10:e7:ea:5c:
9a:64:9b:98:4e:54:f4:bb:38:9e:2c:f1:b3:36:c4:
a3:81:5e:b2:88:20:7e:b3:1b:d2:32:ea:e7:b2:5c:
96:b5:5c:d7:7d:d8:cf:67:90:1e:47:04:b9:e9:6e:
7e:ec:3a:95:5a:29:92:9c:9d:16:cb:23:a0:5d:71:
22:9a:f7:a4:b9:0d:83:d8:4d:c4:76:bd:50:e8:c4:
bd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:84:DA:85:6F:44:51:B9:1A:CA:C1:86:94:68:45:4C:CE:65:A9:F2
X509v3 Authority Key Identifier:
keyid:85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:71:db:02:b6:fb:b9:6c:a9:c6:74:65:93:ed:ba:2c:2f:5e:
fc:b9:fa:b3:94:1f:de:c3:15:59:11:33:3c:ca:bb:75:80:41:
42:3a:3c:e1:5d:36:c7:a7:48:a7:75:4a:a1:d5:76:69:a9:97:
6c:26:e6:04:e3:83:42:76:bc:50:7e:e8:3e:32:41:28:9f:75:
30:ec:a5:bf:76:a1:78:96:11:fd:e7:f7:55:60:95:1a:c6:d4:
91:73:f0:5f:c0:5d:ca:8e:57:ff:3f:26:29:da:d4:d1:d6:79:
73:96:66:03:5d:ac:3e:d5:61:33:18:bb:48:43:ec:dc:19:43:
87:f8:fa:f0:c7:4b:7d:c5:90:52:af:dc:5b:a2:11:12:ce:82:
24:05:8f:54:88:fa:0b:58:1c:21:2c:f5:c0:21:43:92:b5:b5:
8c:52:be:a8:9d:25:5a:eb:98:a6:85:f9:ad:6d:c4:58:08:6e:
b3:3b:d1:b1:4a:98:3f:0f:43:00:27:e2:22:2f:56:a7:84:d7:
15:82:11:bc:93:9f:2f:aa:0b:a9:23:12:c1:41:dd:de:26:99:
84:08:47:4c:af:58:b0:10:89:d3:8f:c8:9f:05:27:3d:3b:2e:
3f:73:d4:a9:3d:4e:13:8a:30:42:c5:29:39:27:fc:40:ad:87:
a2:57:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:20 2026 by rpki-client