
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
File: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft (raw, json)
Hash identifier: 0zHnS5LOhfk2FASooGX14B2YeuxQ+a/fJxdCvPDgK8U=
Subject key identifier: 17:90:29:57:59:B5:EE:77:15:F2:2E:F1:B3:25:44:06:03:41:D5:57
Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94
Certificate issuer: /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694
Certificate serial: 03B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
Manifest number: 03A6
Signing time: Wed 19 Aug 2026 01:01:34 +0000
Manifest this update: Wed 19 Aug 2026 01:01:34 +0000
Manifest next update: Wed 26 Aug 2026 01:01:34 +0000
Files and hashes: 1: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl (hash: OT3m074P0fZ9lQpL9BpBvGptm6EAkBZVq1s7vKcvsQY=)
2: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (hash: FOfdiHMNOd30v0oc6GtprNkh43RjvZ+FfeSOC8C9Y9g=)
3: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (hash: jk9gt1b1frwaDPBZycwnL0X7VizZAM9Vxj6G20XBNHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl
rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951 (0x3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF5C0, serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694
Validity
Not Before: Aug 19 01:01:34 2026 GMT
Not After : Aug 26 01:01:34 2026 GMT
Subject: CN=6a85006e-f0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:4b:89:02:bb:5d:8a:20:e6:78:0a:21:d4:
53:8d:b8:13:8f:24:19:87:2e:5f:61:56:5d:34:bb:
a8:fd:d8:ba:d6:18:8c:c9:c2:e2:b8:68:6c:0e:7e:
cd:d7:af:a5:51:b4:4f:7d:d3:e5:a9:f4:0d:eb:c1:
0e:a8:a1:44:d4:d9:28:a6:b1:3e:16:eb:0c:88:1b:
91:03:e7:ca:bb:d2:2b:86:bd:3b:8e:e5:1d:ef:d7:
59:c5:c1:a8:43:22:c2:c6:e0:45:d3:29:68:1a:60:
a2:2c:b6:55:7b:b5:53:f1:88:ff:05:09:a4:9f:6e:
12:76:f1:ce:10:02:e8:e9:43:69:66:9d:7f:26:38:
34:f4:9b:fb:e8:4d:9c:6a:74:b4:92:49:c9:dc:b6:
f7:d8:31:0a:7b:2e:61:32:4c:0e:47:30:91:be:17:
2b:0d:f8:8e:79:ef:4d:87:af:fb:9e:12:b6:1d:2a:
e4:ba:f0:70:97:3c:09:59:09:66:17:36:21:21:3c:
43:53:32:95:5a:2b:37:84:d3:d9:e8:fa:cd:e6:b7:
b7:63:73:97:f1:e4:df:9e:6d:ee:ba:8e:7b:f3:ad:
26:2f:58:25:15:32:a0:01:88:a0:85:77:63:20:a3:
0a:35:1b:47:8a:4e:1b:5c:61:10:66:a4:8b:24:c5:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:90:29:57:59:B5:EE:77:15:F2:2E:F1:B3:25:44:06:03:41:D5:57
X509v3 Authority Key Identifier:
keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:87:f8:c7:98:e5:51:d2:5b:5c:7b:f9:1b:97:29:bd:e9:b3:
93:81:41:69:2c:f3:1c:eb:62:2c:bd:06:a7:27:45:41:a2:37:
a8:95:ca:6b:77:72:81:10:b4:6a:4d:69:df:02:4d:3b:03:ce:
56:10:93:15:35:ee:12:f1:97:19:7c:68:88:f0:50:de:7f:74:
7f:a4:3a:5c:93:c6:ef:4d:ec:c1:39:28:50:ce:8d:92:0a:fb:
79:78:14:a6:70:23:f7:5a:6b:20:05:99:9f:08:de:6a:53:f3:
84:bf:90:33:b7:32:b2:1c:23:1d:42:6e:90:64:dc:f8:06:03:
36:8f:cb:5e:42:4d:e5:dd:43:15:dc:02:61:ba:bf:06:5c:25:
10:2b:b8:61:c9:ad:39:9c:c9:42:c1:69:40:fd:4c:83:ea:ca:
3f:83:89:1a:bc:4e:ae:02:fd:c0:d0:2f:ab:09:ed:a5:af:b6:
c1:67:f2:d3:d5:6b:3c:5e:f9:4e:a8:76:61:e9:7a:61:1b:23:
9d:64:31:ae:c2:4a:a5:eb:d3:3d:38:8a:99:bf:4a:bd:a4:07:
13:fc:f0:e6:0b:5e:48:3a:14:ef:65:e3:23:4d:f9:92:ba:eb:
cd:d4:5b:c7:47:8c:38:65:2d:e4:f3:db:01:46:17:d2:3c:ff:
b2:07:ce:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkY1QzAxMTAvBgNVBAUTKDg1NzkzNzcyNjFDQTI3OUYxQzJGRjJFQkM0NDI5NzQz
N0RENkU2OTQwHhcNMjYwODE5MDEwMTM0WhcNMjYwODI2MDEwMTM0WjAYMRYwFAYD
VQQDEw02YTg1MDA2ZS1mMGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0kBLiQK7XYog5ngKIdRTjbgTjyQZhy5fYVZdNLuo/di61hiMycLiuGhsDn7N
16+lUbRPfdPlqfQN68EOqKFE1NkoprE+FusMiBuRA+fKu9Irhr07juUd79dZxcGo
QyLCxuBF0yloGmCiLLZVe7VT8Yj/BQmkn24SdvHOEALo6UNpZp1/Jjg09Jv76E2c
anS0kknJ3Lb32DEKey5hMkwORzCRvhcrDfiOee9Nh6/7nhK2HSrkuvBwlzwJWQlm
FzYhITxDUzKVWis3hNPZ6PrN5re3Y3OX8eTfnm3uuo57860mL1glFTKgAYighXdj
IKMKNRtHik4bXGEQZqSLJMXtuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBeQKVdZ
te53FfIu8bMlRAYDQdVXMB8GA1UdIwQYMBaAFIV5N3JhyiefHC/y68RCl0N91uaU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjVDMC9CQ0JENEZCNkYx
QzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1OGNMX0xyeEVLWFEzM1c1
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hYazNjbUhLSjU4Y0xfTHJ4RUtYUTMzVzVwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjVDMC9CQ0JENEZCNkYxQzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1
OGNMX0xyeEVLWFEzM1c1cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjIf4x5jlUdJbXHv5G5cpvemzk4FBaSzzHOtiLL0GpydFQaI3qJXKa3dygRC0
ak1p3wJNOwPOVhCTFTXuEvGXGXxoiPBQ3n90f6Q6XJPG703swTkoUM6Nkgr7eXgU
pnAj91prIAWZnwjealPzhL+QM7cyshwjHUJukGTc+AYDNo/LXkJN5d1DFdwCYbq/
BlwlECu4YcmtOZzJQsFpQP1Mg+rKP4OJGrxOrgL9wNAvqwntpa+2wWfy09VrPF75
Tqh2Yel6YRsjnWQxrsJKpevTPTiKmb9KvaQHE/zw5gteSDoU72XjI035krrrzdRb
x0eMOGUt5PPbAUYX0jz/sgfO7A==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:16 2026 by rpki-client