
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
File: hbfttaaEvj2aYpdZkKcdmY3vUYs.mft (raw, json)
Hash identifier: Hc5ijPQaveRhUm5EqzDvARK9iwoU1fUlcNxW0A+oXjA=
Subject key identifier: 27:C8:0C:A8:A6:8A:32:E0:B9:2F:36:B2:1F:1D:91:EE:53:D0:87:7D
Authority key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B
Certificate issuer: /CN=A91B62E1/serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B
Certificate serial: A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
Manifest number: A1
Signing time: Sat 03 Oct 2026 07:55:56 +0000
Manifest this update: Sat 03 Oct 2026 07:55:55 +0000
Manifest next update: Sat 10 Oct 2026 07:55:55 +0000
Files and hashes: 1: hbfttaaEvj2aYpdZkKcdmY3vUYs.crl (hash: vaDyrEVNTTW4u6kanonWomhc5kE268PFBtxbphyxDEU=)
2: 146F4288C8E711F0A7C33B4CC4F9AE02.roa (hash: mWJy1v+ne8mjUCBxQ8B6n5ShRR6xhgziEl5EgVMvzV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl
rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B
Validity
Not Before: Oct 3 07:55:55 2026 GMT
Not After : Oct 10 07:55:55 2026 GMT
Subject: CN=6ac0b50c-aae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:56:19:d0:c6:d6:4b:3f:12:32:a9:c1:2c:
6a:ef:19:ee:9d:2d:f9:b3:86:88:73:77:4a:c9:48:
5c:76:e4:89:7f:71:d1:5b:ed:5c:9e:ec:8d:02:ae:
e8:d0:67:b7:bd:a7:08:03:c1:24:ef:ab:92:5d:cd:
a4:ef:44:ea:e2:af:5b:e0:ee:ef:6e:71:a8:a2:d9:
74:ce:02:7e:8e:6b:a5:fd:53:e0:18:55:fb:51:2f:
f6:b7:18:f2:2a:1b:38:65:5d:62:ad:f8:a7:fa:e6:
72:a6:20:71:19:ea:c8:4d:c7:4a:25:f2:60:fa:b7:
82:e3:ea:13:15:ec:23:6a:ca:13:7e:b0:c6:54:a7:
64:4d:8d:70:7c:08:61:73:ec:f6:bf:9a:96:82:a7:
e2:15:ce:4c:d8:ee:19:62:26:82:a6:bf:6e:3d:ab:
9d:f5:30:b4:b4:24:bc:e5:b6:1b:ec:1a:d0:7c:36:
d8:ec:13:b5:c8:d7:c3:d3:1c:2a:19:90:c2:89:95:
cb:ff:19:fe:72:13:b8:a1:ef:9d:b5:87:45:43:cd:
df:21:2d:30:40:fd:03:c5:ec:72:1f:4e:35:e6:75:
18:ba:e9:cc:50:7d:0d:d8:f1:c6:a2:c0:e8:2f:19:
3e:c2:fd:1f:68:61:22:3a:1c:5e:24:d9:d9:db:61:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C8:0C:A8:A6:8A:32:E0:B9:2F:36:B2:1F:1D:91:EE:53:D0:87:7D
X509v3 Authority Key Identifier:
keyid:85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:d8:f7:ec:de:35:39:1a:6e:31:a8:d7:c0:68:88:7c:16:d9:
43:3d:ba:33:72:58:6d:b1:36:de:42:bd:3b:c2:ac:20:f7:e4:
f6:0d:6d:e8:7b:64:c9:e8:1c:e8:31:79:ac:f5:92:4a:c4:86:
3e:27:36:da:80:4e:ba:15:0e:b8:0d:21:73:b1:82:25:17:26:
2d:9a:0b:93:fe:0e:4f:69:8d:3e:39:08:c8:57:ff:9e:6e:74:
80:80:ca:2e:0f:bf:2c:21:20:65:4a:f2:03:97:34:41:9e:a7:
66:1f:88:16:ab:86:35:2a:8a:a2:ca:00:f6:49:d5:23:55:8b:
02:7a:32:ba:10:08:2e:9e:09:a6:9d:7d:c4:de:90:20:4f:af:
fe:d9:06:53:14:50:f7:93:16:d7:22:41:ad:a3:49:94:e3:01:
a6:74:e2:4e:37:0e:32:2c:0a:47:a6:90:d1:42:6e:ed:44:54:
f9:f8:3f:48:ef:24:cd:3b:0d:5d:75:93:91:32:fd:9a:1f:fe:
75:24:f5:62:f1:fd:2c:f2:0d:15:ba:e2:74:74:05:2d:8f:62:
ec:f9:ed:c6:7d:d4:25:f6:f2:67:2e:42:8e:77:c2:77:3b:9a:
a5:6f:26:1a:d8:aa:75:3a:6b:d0:1c:f8:4b:a6:3d:1b:7a:ec:
19:02:44:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:33:45 2026 by rpki-client