
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
File: e-hwMVM9L_QxwRpYeani2dyFJ_I.mft (raw, json)
Hash identifier: HzQyqTZ7XrCVHVCzQo30JsPHH3xoeWk6OMaD0+8bHZs=
Subject key identifier: CF:C4:59:9D:1C:C0:46:07:F9:AD:C1:19:A7:EF:D8:EA:EF:67:1E:A7
Authority key identifier: 7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2
Certificate issuer: /CN=A91C35C9/serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2
Certificate serial: 0276
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
Manifest number: 0271
Signing time: Mon 19 Oct 2026 02:32:09 +0000
Manifest this update: Mon 19 Oct 2026 02:32:08 +0000
Manifest next update: Mon 26 Oct 2026 02:32:08 +0000
Files and hashes: 1: e-hwMVM9L_QxwRpYeani2dyFJ_I.crl (hash: KWNBGpgWBn6EhMxzeq+2u5udjyHlL+KLhsUP5aoWZ7U=)
2: D1315D7C0FDD11EEB007DA41C4F9AE02.roa (hash: g9WptSrp0FQu0iVnhChNaPPvWIwIz6IXqc9QntDt38I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl
rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 02:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 630 (0x276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C35C9, serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2
Validity
Not Before: Oct 19 02:32:08 2026 GMT
Not After : Oct 26 02:32:08 2026 GMT
Subject: CN=6ad58129-e043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:9c:4e:55:bf:18:f2:7b:05:59:93:92:a6:
ce:18:72:c2:81:13:7c:24:49:1b:a6:3b:32:de:dd:
8e:f6:f6:09:d1:85:4a:37:59:86:fe:2d:56:c9:28:
41:d2:6d:6a:ee:7b:30:8d:06:ae:74:32:c6:b0:17:
10:1a:c8:2c:c8:b2:fd:00:98:3c:41:d7:e6:c4:8b:
f8:de:3d:aa:fa:74:98:a6:44:07:4f:f7:46:9b:1e:
47:5a:19:5d:06:df:73:73:48:9c:ad:2a:a1:72:42:
ad:5e:1f:14:19:d2:b9:00:96:1f:b9:88:db:74:c0:
a3:bc:da:e3:e8:66:aa:bf:49:8c:c3:d5:9f:7b:cb:
38:12:83:08:17:4e:85:1e:db:e7:1b:4c:a5:d9:be:
0b:f8:13:c8:5c:c8:01:ce:a2:fb:6a:b1:f7:a3:fd:
fe:a2:07:7f:6a:b2:94:87:ed:83:28:d0:a6:91:b8:
2c:2a:79:ae:53:6e:a8:43:47:aa:e0:dd:87:3c:9d:
3d:af:2f:0a:c6:1c:80:b2:bf:44:98:6e:f3:36:4d:
03:cd:68:b1:97:a8:98:50:0f:3d:2b:2c:28:64:f2:
4d:65:22:6b:66:4c:ef:9a:03:5c:ee:0b:d2:76:2a:
1e:6e:81:65:4c:89:e5:52:7e:8a:62:11:25:aa:b5:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C4:59:9D:1C:C0:46:07:F9:AD:C1:19:A7:EF:D8:EA:EF:67:1E:A7
X509v3 Authority Key Identifier:
keyid:7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:7f:f7:35:f7:cb:22:ce:ee:d2:d1:8d:f3:57:96:fc:43:ae:
3a:3d:c8:aa:b9:f8:a3:45:f5:40:72:b9:a7:66:75:0f:a2:0e:
9a:f7:1a:ac:ed:7e:b2:0b:68:4d:07:d1:21:8c:9f:51:15:4f:
3d:58:c2:9e:17:e5:ff:c9:ab:f4:cf:8a:56:31:dd:c6:1b:bd:
df:89:b8:38:e4:57:27:26:da:5b:09:e2:a8:e4:a8:ba:c1:f5:
0d:9f:31:33:5f:46:41:92:60:c8:ed:aa:1b:61:3f:48:81:53:
13:a0:95:16:a6:8c:c7:e8:b8:91:c5:38:20:8f:b1:07:1a:0e:
ca:c7:e1:e7:96:74:4d:f4:5c:59:c2:35:da:b1:97:00:d5:9b:
ce:39:ce:64:da:49:fd:3c:84:87:82:3a:69:30:5c:8c:a2:2b:
e8:ab:08:a5:62:ea:8a:50:f5:d5:1d:b1:b3:05:7e:cf:c5:58:
97:86:04:d1:3b:a3:37:27:5c:c9:bb:e2:45:27:07:f4:34:25:
37:75:52:9d:6e:d4:e4:dc:7e:bb:cb:f6:46:53:4f:2e:0b:93:
67:6e:57:1f:a6:56:6d:13:4b:c6:5a:be:51:15:f2:ac:75:88:
ff:51:de:be:39:6d:24:8f:86:39:fc:57:05:68:e3:ad:39:4c:
15:a7:47:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 14:29:29 2026 by rpki-client