
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
File: hs2LQhipuaG84vrF7m3HhbAKkx0.mft (raw, json)
Hash identifier: q4ZdFvJ276hO0dIcFSZmK3lm01jI02aQ6/2GEHGUJtI=
Subject key identifier: 9E:55:A2:68:D3:A7:12:68:79:55:27:0E:FB:89:2F:47:2C:07:47:F6
Authority key identifier: 86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D
Certificate issuer: /CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D
Certificate serial: 031A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
Manifest number: 02F5
Signing time: Wed 19 Aug 2026 01:44:07 +0000
Manifest this update: Wed 19 Aug 2026 01:44:06 +0000
Manifest next update: Wed 26 Aug 2026 01:44:06 +0000
Files and hashes: 1: hs2LQhipuaG84vrF7m3HhbAKkx0.crl (hash: inrZpoCIlzKfOdQfMnWcaGMVkvT0jqFyTxTHXikcLMw=)
2: FB9DB0B8778011EFA197A558C4F9AE02.roa (hash: NdFnlMSr/V5noQXIsNx/D5f9zVB2iTgM5spp/nQu96Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl
rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF28F, serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D
Validity
Not Before: Aug 19 01:44:06 2026 GMT
Not After : Aug 26 01:44:06 2026 GMT
Subject: CN=6a850a66-8263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:56:2a:b7:b5:4c:74:a6:0b:9c:9a:03:6d:
f7:08:32:c9:e1:af:4f:37:e8:1c:d7:50:cf:8d:b7:
8e:b6:b6:b9:e6:35:00:49:a0:8d:31:23:1c:4a:9f:
30:d7:2c:23:ae:19:4a:94:f3:ea:bf:11:df:a8:b1:
5e:af:fd:41:04:b4:f3:d9:af:96:29:b4:6d:24:47:
7e:8f:be:6b:39:4d:d1:26:9b:88:a4:20:ba:8a:72:
e5:6c:e4:bf:85:2d:12:9d:62:12:30:2a:9b:4a:96:
75:dc:cd:bb:81:b7:6f:3e:56:ac:0f:7a:9e:c9:b7:
87:b6:1a:0c:d4:f2:ea:83:e2:6d:53:d1:65:f8:82:
67:fc:c0:1d:6b:47:e2:01:93:d1:8f:89:cc:58:06:
d4:7b:09:f5:21:2a:24:01:7a:bc:9a:37:dd:d6:3e:
9c:61:6f:e6:e4:1a:17:7d:e0:2c:8a:cd:45:37:64:
3a:cc:58:25:a7:2c:5a:6a:56:99:c5:e8:ba:79:c7:
b6:59:85:7a:84:d8:72:9a:0b:db:52:d0:ee:69:cd:
34:c4:e8:e3:ec:88:30:16:7e:7c:16:bb:ee:99:9a:
7d:61:05:6c:5d:e6:7a:3f:e8:3e:ab:da:46:7f:a0:
08:d5:12:2b:1c:89:3e:ac:f2:bd:a2:cc:97:d9:57:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:55:A2:68:D3:A7:12:68:79:55:27:0E:FB:89:2F:47:2C:07:47:F6
X509v3 Authority Key Identifier:
keyid:86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:af:8c:57:be:82:c9:a1:e1:83:32:77:3a:80:69:cf:61:00:
68:b3:ef:ef:7e:69:e9:d7:fe:48:9d:0e:83:09:2e:5c:04:89:
e3:34:d8:4c:96:b7:07:b5:7c:57:13:30:54:9d:bd:b9:86:f4:
2d:cc:93:7c:c2:de:cd:0d:54:a1:b3:84:52:d7:81:ad:0e:16:
02:77:0a:d1:0a:c0:ee:bf:b1:62:a7:3a:3d:87:31:45:0f:25:
13:13:d2:10:cd:8e:39:04:bf:b2:eb:6a:b6:18:d0:d0:70:10:
37:d2:05:d8:e0:0d:6e:76:80:d3:a7:ef:b7:51:23:76:3a:e4:
5d:0e:b7:e3:78:4c:17:fd:8d:2f:a7:20:eb:11:31:a0:45:97:
6c:87:d6:04:f6:90:ff:42:e3:c3:55:18:87:87:ba:39:c6:c4:
5c:3d:db:2c:4d:d3:88:03:9d:3a:3d:35:38:df:0c:0f:9b:a2:
6b:88:4d:d3:a6:39:38:83:e2:b0:77:78:93:38:07:a6:e8:85:
e8:9f:aa:6b:fd:5c:72:f2:bb:3d:35:50:ad:50:f3:0d:2d:07:
15:70:3e:09:df:74:0f:51:a7:04:13:23:22:27:05:0b:c5:c0:
0d:91:f2:84:58:ad:b0:4d:31:7a:9c:5a:af:0a:5f:57:74:c3:
c5:0f:c8:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYyOEYxMTAvBgNVBAUTKDg2Q0Q4QjQyMThBOUI5QTFCQ0UyRkFDNUVFNkRDNzg1
QjAwQTkzMUQwHhcNMjYwODE5MDE0NDA2WhcNMjYwODI2MDE0NDA2WjAYMRYwFAYD
VQQDEw02YTg1MGE2Ni04MjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz5NWKre1THSmC5yaA233CDLJ4a9PN+gc11DPjbeOtra55jUASaCNMSMcSp8w
1ywjrhlKlPPqvxHfqLFer/1BBLTz2a+WKbRtJEd+j75rOU3RJpuIpCC6inLlbOS/
hS0SnWISMCqbSpZ13M27gbdvPlasD3qeybeHthoM1PLqg+JtU9Fl+IJn/MAda0fi
AZPRj4nMWAbUewn1ISokAXq8mjfd1j6cYW/m5BoXfeAsis1FN2Q6zFglpyxaalaZ
xei6ece2WYV6hNhymgvbUtDuac00xOjj7IgwFn58FrvumZp9YQVsXeZ6P+g+q9pG
f6AI1RIrHIk+rPK9osyX2VehYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5VomjT
pxJoeVUnDvuJL0csB0f2MB8GA1UdIwQYMBaAFIbNi0IYqbmhvOL6xe5tx4WwCpMd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ri83RERDNUEyRTU1
NDcxMUVEQjQ3QjMzMkJDNEY5QUUwMi9oczJMUWhpcHVhRzg0dnJGN20zSGhiQUtr
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hzMkxRaGlwdWFHODR2ckY3bTNIaGJBS2t4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjI4Ri83RERDNUEyRTU1NDcxMUVEQjQ3QjMzMkJDNEY5QUUwMi9oczJMUWhpcHVh
Rzg0dnJGN20zSGhiQUtreDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAna+MV76CyaHhgzJ3OoBpz2EAaLPv735p6df+SJ0OgwkuXASJ4zTYTJa3B7V8
VxMwVJ29uYb0LcyTfMLezQ1UobOEUteBrQ4WAncK0QrA7r+xYqc6PYcxRQ8lExPS
EM2OOQS/sutqthjQ0HAQN9IF2OANbnaA06fvt1EjdjrkXQ6343hMF/2NL6cg6xEx
oEWXbIfWBPaQ/0Ljw1UYh4e6OcbEXD3bLE3TiAOdOj01ON8MD5uia4hN06Y5OIPi
sHd4kzgHpuiF6J+qa/1ccvK7PTVQrVDzDS0HFXA+Cd90D1GnBBMjIicFC8XADZHy
hFitsE0xepxarwpfV3TDxQ/IKg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:37 2026 by rpki-client