
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
File: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft (raw, json)
Hash identifier: qtMfoljW+2D4yc+YJUe5oVF0D1yTZPFj7IvUo+mfck0=
Subject key identifier: DE:AC:01:78:93:69:5B:60:3E:31:DA:3F:6A:CA:0E:B7:C0:24:D9:E2
Authority key identifier: 68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A
Certificate issuer: /CN=A91C4750/serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
Certificate serial: 090C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
Manifest number: 08FA
Signing time: Tue 18 Aug 2026 20:37:19 +0000
Manifest this update: Tue 18 Aug 2026 20:37:18 +0000
Manifest next update: Tue 25 Aug 2026 20:37:18 +0000
Files and hashes: 1: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl (hash: FFn0xsCLchiLF6QEev+1H08s82s+XI4nAOJtGSTXB5U=)
2: DA1A98C4DABE11EAB12A5209C4F9AE02.roa (hash: Q2tDi7aDCqJfPbKlsvpv/Im3EMBA1tZp/jy9biarem0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl
rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2316 (0x90c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4750, serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
Validity
Not Before: Aug 18 20:37:18 2026 GMT
Not After : Aug 25 20:37:18 2026 GMT
Subject: CN=6a84c27f-a411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:9b:15:e4:0e:4c:ea:80:bb:ed:fa:b1:b6:
ce:20:92:be:3b:96:c7:47:b8:aa:9d:80:e8:51:a9:
04:fc:b3:33:cb:24:d2:98:83:c4:b6:f5:06:bd:d4:
a1:58:05:49:e0:d9:53:db:5b:04:d3:35:77:e0:6d:
7f:f4:b0:60:6a:f5:41:1f:96:a0:d1:69:3b:12:90:
b9:c5:0f:90:bc:bf:a5:24:1e:d4:f1:f6:84:a3:02:
d4:31:46:2b:d4:22:f5:ad:be:7a:2c:f8:c1:cf:26:
da:7d:9b:bd:15:3b:85:0b:6f:a3:58:4a:b4:11:f8:
01:72:1a:a9:c2:41:44:0a:2c:7d:0a:7a:2b:75:fd:
5b:91:a5:51:33:b6:a2:05:fb:a9:55:e7:87:42:d0:
89:77:56:b6:d1:be:b0:8b:64:79:15:f4:82:57:40:
19:a2:a1:9b:27:b1:11:a1:4a:c9:4e:d4:ac:10:3b:
36:9e:7b:76:ec:b8:6c:6e:e9:21:f4:20:27:d3:f1:
bb:c8:84:d5:6d:74:ca:13:68:bc:18:fd:c4:60:e6:
35:f5:e5:be:7a:99:23:07:dd:a4:0b:92:3d:6f:d2:
e5:32:e9:f9:b6:78:20:2a:39:f4:90:51:62:ac:0f:
a2:86:28:2f:6b:e0:4a:05:03:e3:78:ef:4a:f0:65:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AC:01:78:93:69:5B:60:3E:31:DA:3F:6A:CA:0E:B7:C0:24:D9:E2
X509v3 Authority Key Identifier:
keyid:68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:40:ab:3b:5c:56:34:f8:c3:e2:91:24:8b:7f:a8:71:8a:42:
53:68:45:98:54:91:85:89:c6:ba:c9:d4:3e:2d:aa:5a:81:f1:
88:2d:a9:80:7b:45:c8:32:d1:79:ed:f0:a2:3e:00:a4:15:97:
c1:08:24:f9:d1:63:87:e9:c5:92:2b:41:3d:fe:a1:3c:d2:da:
87:13:c1:01:b2:6a:10:3e:b7:8a:20:94:7d:44:58:43:7a:3b:
d0:13:e6:21:79:0b:49:1b:ee:f8:ad:63:e7:08:bd:10:a3:07:
f4:e2:31:e7:79:98:7c:17:a4:eb:93:55:12:73:25:75:d6:f3:
54:a7:44:f2:6c:89:b7:cf:75:da:71:ed:ff:0d:82:d9:0a:ba:
6c:5a:93:c4:b2:82:ae:ac:db:51:b8:10:05:1d:22:02:8a:b4:
30:51:07:bf:69:47:ca:9c:be:ab:1f:fb:85:70:40:76:99:e5:
07:14:b6:ea:40:4b:d9:ef:7e:15:e3:d7:e3:77:7a:9e:c0:6e:
57:70:c9:fb:bd:a3:09:a1:ac:5e:2a:2c:e2:09:eb:3f:61:21:
83:b1:08:3d:5f:97:d8:8a:bf:59:7f:f8:4a:23:1d:60:66:3b:
87:ba:cb:0d:39:69:88:54:70:ac:e4:ec:e5:72:c4:08:d6:ea:
e1:37:66:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:01:58 2026 by rpki-client