
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
File: hmRWQenizPzosun9-5X-a_CfBcU.mft (raw, json)
Hash identifier: b0GEQygHPtnYbRw51WJMSVa6bky3eItwNmYdnU4Knrg=
Subject key identifier: 2F:EF:BC:51:CD:91:5E:0C:0E:66:E8:47:90:E9:F4:BC:1E:CE:40:F4
Authority key identifier: 86:64:56:41:E9:E2:CC:FC:E8:B2:E9:FD:FB:95:FE:6B:F0:9F:05:C5
Certificate issuer: /CN=A91C3DEA/serialNumber=86645641E9E2CCFCE8B2E9FDFB95FE6BF09F05C5
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
Manifest number: 4D
Signing time: Tue 23 Jun 2026 08:34:09 +0000
Manifest this update: Tue 23 Jun 2026 08:34:09 +0000
Manifest next update: Tue 30 Jun 2026 08:34:09 +0000
Files and hashes: 1: hmRWQenizPzosun9-5X-a_CfBcU.crl (hash: 5TMLJkWIVNh+s1e+uEzAHPYgi9eSQWTzK52dy2uL6ow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.crl
rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 08:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3DEA, serialNumber=86645641E9E2CCFCE8B2E9FDFB95FE6BF09F05C5
Validity
Not Before: Jun 23 08:34:09 2026 GMT
Not After : Jun 30 08:34:09 2026 GMT
Subject: CN=6a3a4501-3efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f2:4e:0e:cb:c6:b2:68:15:07:54:89:79:f4:
23:f5:d6:2f:95:e7:e2:ef:b8:31:4d:32:35:a4:6f:
21:90:a8:30:76:da:45:f0:ce:33:19:c8:58:0b:0f:
af:a5:44:72:f3:97:31:73:4f:d1:5d:6e:c8:5b:05:
e9:ac:fc:5e:8c:b6:c1:e7:71:83:76:80:20:d0:4f:
47:8a:0a:c5:7a:d6:53:b1:f7:63:1f:4a:9f:e3:b4:
2f:2e:78:09:1a:96:75:cb:36:1b:f1:2d:94:fc:da:
04:2b:11:f0:ec:6c:dd:6c:97:42:07:10:00:14:de:
7a:07:f2:32:6c:05:80:12:38:2c:f5:39:87:4b:de:
e0:30:fa:89:98:0f:36:4f:43:e7:14:7c:1a:11:1c:
51:fc:e5:bd:fd:08:cc:2e:4f:9c:dc:2d:cc:ba:bc:
fe:1a:de:20:fe:39:2d:a7:ef:df:c0:68:c9:e9:fd:
ef:5d:21:cc:58:f5:0a:18:cb:b7:5a:7a:3a:0f:2c:
62:22:b7:7a:7f:50:7a:b4:42:ba:e0:71:80:c7:87:
13:43:89:d7:e5:72:24:15:6e:4e:87:1d:41:d2:0c:
26:55:66:13:e7:fd:cb:8b:6a:71:b4:12:74:1d:13:
f5:13:3d:f1:79:49:3f:13:5b:3d:97:cd:48:52:18:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EF:BC:51:CD:91:5E:0C:0E:66:E8:47:90:E9:F4:BC:1E:CE:40:F4
X509v3 Authority Key Identifier:
keyid:86:64:56:41:E9:E2:CC:FC:E8:B2:E9:FD:FB:95:FE:6B:F0:9F:05:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:53:3a:c8:1d:20:af:e9:6d:7b:74:4b:01:1d:89:95:90:06:
76:1d:db:cf:f1:3e:98:29:44:09:49:92:ac:1d:8e:3b:2a:d8:
9c:44:c3:d2:26:4e:8c:af:3b:db:02:d3:94:3a:e3:7b:b5:d3:
9b:f2:4a:74:9d:3f:ff:98:a5:89:a7:45:b3:97:66:c0:be:36:
65:85:54:ad:3a:cc:44:ec:68:a0:1b:2e:9f:14:4b:d1:4d:ae:
be:20:2e:d5:7d:a5:1b:89:73:29:50:11:3a:2b:a3:3b:96:33:
dd:1d:5c:a7:46:12:38:15:b5:74:ef:ba:99:52:43:b9:55:e1:
2e:34:a9:3e:19:fb:e0:de:32:23:91:c7:ce:8f:f0:35:05:12:
d2:08:57:e2:bb:0a:29:dc:11:fb:3c:72:a4:2c:28:37:64:9d:
74:3f:fd:d9:bf:02:a6:5a:0d:d4:0b:08:a6:b8:72:d9:83:c5:
0f:87:88:8a:77:d1:ad:3c:78:48:67:80:ef:16:92:ad:b9:35:
4b:d0:57:12:2b:22:dc:4b:56:4d:3b:a7:c3:d8:48:75:8c:cd:
cc:ba:1a:fa:8f:57:ad:85:3a:62:9c:67:99:b6:44:05:0b:82:
c2:b6:4a:c2:af:0d:f9:24:6d:1f:28:e1:2a:3f:05:9a:2f:ec:
e2:59:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:29 2026 by rpki-client