
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft
File: hsjX-0IuFSejmUSD0fne8sYKMHI.mft (raw, json)
Hash identifier: WUlGrM1d165XewZECl5fIrUV//E4zFfFHEibx9FLwUc=
Subject key identifier: C0:DF:8A:78:16:02:2D:D6:31:53:7E:24:8F:C2:55:2E:80:0E:A0:AD
Authority key identifier: 86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72
Certificate issuer: /CN=A91BEB11/serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072
Certificate serial: 354E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft
Manifest number: 354E
Signing time: Mon 22 Jun 2026 14:55:15 +0000
Manifest this update: Mon 22 Jun 2026 14:55:15 +0000
Manifest next update: Mon 29 Jun 2026 14:55:15 +0000
Files and hashes: 1: hsjX-0IuFSejmUSD0fne8sYKMHI.crl (hash: GWXKiRQFkm2Xruh42OV0fvgT5OhnjhLIN5mxqKP7VUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl
rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 14:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13646 (0x354e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEB11, serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072
Validity
Not Before: Jun 22 14:55:15 2026 GMT
Not After : Jun 29 14:55:15 2026 GMT
Subject: CN=6a394cd3-ae73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:80:48:17:8d:e1:01:1b:ed:79:13:ff:11:
55:c4:74:61:5d:33:3a:a0:19:31:37:6c:e6:96:9a:
6a:76:29:21:70:d6:bc:f3:1e:b8:1f:11:7d:f0:23:
69:19:3f:06:a7:09:00:0c:1e:47:04:a1:f8:4b:cb:
4b:06:af:ca:6f:f4:de:85:bb:d8:14:08:c0:55:a6:
0f:56:5f:80:32:7f:dc:a8:c0:18:65:be:00:c0:4a:
a7:78:a7:1a:3f:fa:4c:2f:cb:79:4a:87:cb:82:8b:
34:56:f3:28:ce:10:6e:ef:70:77:a1:22:ca:b0:a8:
de:ed:84:87:1c:16:ed:cb:fc:7d:41:5a:7d:6b:95:
fc:46:4c:f7:87:7d:63:a7:b1:9e:b0:51:62:ca:52:
da:12:30:b1:5f:40:55:5c:a8:67:39:fe:2e:41:8c:
9d:53:7c:81:65:78:6c:de:cb:7c:73:bf:99:ce:00:
5d:a8:be:b6:dc:fa:0e:a0:24:8d:af:f3:1f:29:d2:
64:1b:8e:52:b4:45:86:06:85:bd:7e:e6:33:e5:da:
09:4d:f6:63:98:af:aa:0d:38:36:01:eb:04:10:0d:
45:c9:ec:68:49:25:75:7d:99:53:aa:c4:ff:25:5f:
6e:17:8a:b6:72:a8:3a:9b:f4:33:be:9d:11:78:25:
36:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DF:8A:78:16:02:2D:D6:31:53:7E:24:8F:C2:55:2E:80:0E:A0:AD
X509v3 Authority Key Identifier:
keyid:86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:19:52:f6:aa:d6:f4:1d:d9:95:0c:49:4c:94:ab:e6:cd:d5:
f5:83:dc:dd:52:ea:ae:49:38:9e:9e:80:0a:b9:c8:b4:e4:bb:
e6:47:5e:2b:ff:33:16:ce:95:f0:07:a6:47:f3:cc:8d:a0:ff:
56:d9:e9:9b:5a:9e:3c:2b:07:b0:5f:48:96:c9:0a:b4:d3:91:
b7:d2:19:62:6e:f2:bd:a7:2a:62:26:82:c7:22:d8:1b:fb:d2:
65:9c:1f:19:31:15:1c:b9:09:0f:66:bd:9a:4c:88:ef:a3:d7:
d0:59:ed:4b:2e:a9:51:d7:38:e4:ce:6b:a4:2d:e1:02:db:17:
f1:d9:dc:94:35:41:4d:4b:16:20:c1:4c:d2:d4:06:1f:05:9c:
a0:8e:e6:58:dd:40:79:36:9a:49:76:e2:ad:40:1c:48:29:2a:
29:88:40:f7:37:c3:e4:93:f7:01:27:7f:d0:16:b6:3f:fe:5d:
49:df:68:81:a8:f8:9e:bd:04:3f:cf:4e:bb:1e:7a:8b:97:d8:
ca:98:8a:fd:bd:3e:bc:03:5c:5f:f9:3e:95:22:1e:86:b8:28:
3f:a9:d7:32:ea:c3:e0:fd:1c:95:16:92:18:0b:77:a0:0d:1f:
43:77:89:ff:67:54:84:ea:96:3d:42:2a:9f:90:9e:5c:70:39:
f6:d6:cb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:18 2026 by rpki-client