
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft
File: hhIZKNm0AeMdansgbrAWLThuBHI.mft (raw, json)
Hash identifier: XEKMlkfxm68YC/nYlZuT/bZHmqGvwifkinKhS736Jc8=
Subject key identifier: 32:06:D2:FE:21:F4:A0:DF:67:37:44:CD:1C:CE:B3:8C:92:B3:F2:EB
Authority key identifier: 86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72
Certificate issuer: /CN=A91B8C6C/serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft
Manifest number: 74
Signing time: Thu 16 Jul 2026 15:09:57 +0000
Manifest this update: Thu 16 Jul 2026 15:09:56 +0000
Manifest next update: Thu 23 Jul 2026 15:09:56 +0000
Files and hashes: 1: hhIZKNm0AeMdansgbrAWLThuBHI.crl (hash: EBJGoinA1KgrCvIBbuXS0//FNSwYgJjLupECr+Ve9EE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.crl
rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 15:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8C6C, serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472
Validity
Not Before: Jul 16 15:09:56 2026 GMT
Not After : Jul 23 15:09:56 2026 GMT
Subject: CN=6a58f445-bcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:9d:69:36:14:f1:70:ee:95:e2:2d:fb:3a:
98:53:1d:c1:9a:33:36:f2:86:ea:20:a0:b1:5d:ce:
79:ab:8c:70:f9:b6:1c:a0:a7:d9:4f:7f:53:32:31:
53:57:86:2a:71:aa:4e:1e:87:ac:5b:fa:9a:93:e7:
e3:a3:9e:d9:56:5e:6d:dd:b5:a3:36:53:db:31:c5:
5f:09:a9:a1:55:3a:08:f9:ed:c3:c4:63:1c:eb:d9:
95:7c:db:ef:a1:1d:36:35:a9:87:cc:67:6e:1f:49:
da:7f:43:bf:27:2a:aa:dd:3e:39:b4:b2:3d:57:62:
78:c2:d8:11:43:cd:ad:b5:c0:04:50:6a:29:8b:a4:
03:3c:40:34:9b:0f:d8:2d:50:70:80:54:3b:ca:72:
eb:f8:fb:7f:0c:3e:3c:c1:d2:2e:f0:95:72:58:35:
76:f7:91:0c:42:e1:27:32:29:ed:bf:d3:f3:fb:bd:
4e:f6:2d:c2:22:44:1f:6b:51:83:62:ea:9f:c8:21:
68:45:75:9f:c8:d6:50:04:50:97:f6:3b:00:af:da:
f9:f9:ee:74:1b:0e:15:8d:50:59:42:6d:6e:f2:a8:
fc:4d:8d:e6:16:e9:5e:46:5b:25:da:44:8d:9d:36:
9c:ff:c8:34:87:ba:e9:be:34:17:46:f4:e4:ab:ac:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:06:D2:FE:21:F4:A0:DF:67:37:44:CD:1C:CE:B3:8C:92:B3:F2:EB
X509v3 Authority Key Identifier:
keyid:86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:c2:2b:af:84:6f:53:85:8d:ca:df:0a:34:a3:6d:da:2e:e4:
9a:4d:f7:73:ba:1b:f0:91:91:bd:33:0a:8c:12:e5:08:23:52:
95:88:68:bb:1c:6a:29:b1:da:ca:3a:06:0d:1d:b4:c1:0b:a7:
58:3b:ab:2d:cb:6a:3c:22:a6:94:9f:b1:e4:8e:02:1a:82:e3:
b5:db:5c:e9:01:f5:d8:7e:81:1c:0d:1d:4d:39:8a:a8:18:0b:
9d:67:81:7a:1b:1a:3b:12:d7:bb:40:15:46:b2:1d:35:31:ca:
bc:84:22:07:cd:2d:88:bd:80:a7:96:ea:41:01:90:fc:63:3e:
3e:3c:b6:69:44:c5:b2:cd:8f:db:15:46:fd:df:c7:a2:41:78:
68:c7:28:3e:fe:ec:2b:61:8c:8b:68:24:29:d3:13:8e:a9:67:
6a:e0:18:82:8d:04:76:50:0f:8b:34:82:2a:81:c4:00:fc:49:
a5:b3:dd:04:ed:c3:b9:6a:1b:b0:8e:13:1e:ad:35:82:0b:24:
a4:41:96:88:e5:75:58:d8:67:e0:4a:46:69:ad:07:ce:22:ef:
2f:74:5b:7c:24:b3:9f:16:27:54:0b:c5:96:f9:27:2b:6d:d1:
61:16:5a:e0:3f:dc:08:8e:b3:25:83:d8:7b:de:29:8e:a7:a2:
f9:97:79:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:27:15 2026 by rpki-client