
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft
File: hhIZKNm0AeMdansgbrAWLThuBHI.mft (raw, json)
Hash identifier: yGHjof1jOS6ceq4xV7NIxJQUWb33WFXJrPImk9ocY2M=
Subject key identifier: 21:0F:C0:40:59:B3:D5:13:4C:12:C0:3C:5A:FF:82:AE:8C:11:9F:35
Authority key identifier: 86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72
Certificate issuer: /CN=A91B8C6C/serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft
Manifest number: 47
Signing time: Sat 18 Apr 2026 15:05:17 +0000
Manifest this update: Sat 18 Apr 2026 15:05:17 +0000
Manifest next update: Sat 25 Apr 2026 15:05:17 +0000
Files and hashes: 1: hhIZKNm0AeMdansgbrAWLThuBHI.crl (hash: TBocmf1sU8+IsjKZRbcpU1OLgj3ooCHKWCHZ8H8/Z4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.crl
rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8C6C, serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472
Validity
Not Before: Apr 18 15:05:17 2026 GMT
Not After : Apr 25 15:05:17 2026 GMT
Subject: CN=69e39dad-e691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:7a:7f:f9:c5:49:cc:57:61:48:8d:19:58:
f2:7f:a6:a5:d2:75:76:4e:a0:89:60:61:d0:8d:87:
09:54:59:9e:41:3c:19:78:2c:e5:1f:2d:bd:95:5f:
00:96:ac:c9:4e:e1:76:77:76:15:f1:f9:c0:4e:79:
d7:c9:58:66:96:b2:bc:34:1c:7a:b4:38:ef:a0:a3:
38:b3:c5:63:8e:cc:46:51:91:43:16:93:e2:34:db:
78:7d:3b:9a:e0:d7:97:d4:39:39:cd:8c:21:95:ab:
21:05:f4:d3:9d:e0:1e:42:74:2e:af:b5:d0:14:18:
02:fa:1f:be:39:a5:9f:31:c9:16:bf:30:dd:43:fd:
a4:9f:3e:69:83:08:35:49:30:f8:ee:e8:77:90:96:
30:1a:78:d9:94:1c:25:00:48:19:a0:6d:d8:b6:1f:
a5:a2:bf:92:08:ed:0d:7f:61:7b:a0:94:2f:62:e8:
47:fc:df:df:36:f0:17:84:b5:7e:5d:bb:9d:a1:ea:
76:11:aa:60:d6:03:bf:e0:1c:b0:41:6c:76:1d:c3:
6b:b3:ea:e1:bf:82:6e:8a:c3:bf:dd:c6:0a:c6:29:
31:65:31:35:66:c9:50:ff:a0:2f:2a:c3:60:48:59:
91:bb:f1:5c:8e:74:10:20:2d:80:e8:10:3e:3f:e5:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0F:C0:40:59:B3:D5:13:4C:12:C0:3C:5A:FF:82:AE:8C:11:9F:35
X509v3 Authority Key Identifier:
keyid:86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:5b:0f:42:ab:57:9d:91:16:38:3a:42:f7:eb:5a:8a:83:db:
6f:74:34:b7:55:ad:73:a1:ff:68:18:a3:4f:e2:75:7c:9c:48:
3c:3f:f8:49:35:3b:78:c4:70:e7:99:05:b9:03:c6:ad:5e:10:
35:ce:d8:e9:52:20:38:95:e8:26:fd:ee:04:c7:c5:71:14:65:
d3:9e:a2:1f:cc:56:cf:91:ca:05:75:f9:64:64:76:f8:36:5d:
f5:80:b4:57:ed:97:ed:1f:df:9d:db:a4:51:e8:15:7e:41:a6:
a9:98:21:f6:40:3a:78:7e:f0:58:3d:48:65:f5:70:c0:76:49:
11:44:4f:b9:0c:a5:10:d8:49:cc:3f:b7:a4:ef:1e:d5:17:a8:
bc:df:b9:30:5f:e6:1e:cf:7b:4a:12:b7:a6:26:61:ab:ba:6d:
17:ca:2d:59:32:2b:f1:72:f0:a8:a8:39:68:f0:eb:d4:4d:85:
33:75:3a:31:7c:a0:04:6a:53:a4:fe:99:18:75:1f:fe:e3:02:
bc:f2:9d:ed:e4:18:17:1d:dd:99:91:01:80:f8:1c:1c:3f:c3:
05:11:8c:62:ea:e0:59:bd:a9:79:65:f3:63:00:e6:14:0a:21:
68:c3:a0:ec:eb:a1:9a:38:65:ca:35:ab:d3:a7:11:7a:a5:2c:
eb:6d:20:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:41 2026 by rpki-client