
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
File: hCMykdLcashg9UvuzoHVSwNEA78.mft (raw, json)
Hash identifier: +8DWWt46DnexjnC2volFfCm+4ED/Qt2ID9teVuhAq60=
Subject key identifier: D2:18:81:E7:70:A5:70:77:08:69:4D:58:69:C7:D8:F7:0C:70:1E:67
Authority key identifier: 84:23:32:91:D2:DC:6A:C8:60:F5:4B:EE:CE:81:D5:4B:03:44:03:BF
Certificate issuer: /CN=A91CAA8A/serialNumber=84233291D2DC6AC860F54BEECE81D54B034403BF
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
Manifest number: 54
Signing time: Tue 23 Jun 2026 08:30:08 +0000
Manifest this update: Tue 23 Jun 2026 08:30:08 +0000
Manifest next update: Tue 30 Jun 2026 08:30:08 +0000
Files and hashes: 1: hCMykdLcashg9UvuzoHVSwNEA78.crl (hash: DqI9lJTtE464AtDIIi4p9Q/b8rx1qmJqbyiJd17uq1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.crl
rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 08:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAA8A, serialNumber=84233291D2DC6AC860F54BEECE81D54B034403BF
Validity
Not Before: Jun 23 08:30:08 2026 GMT
Not After : Jun 30 08:30:08 2026 GMT
Subject: CN=6a3a4410-55ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:7d:b4:4b:05:7c:92:c4:1f:77:32:24:44:
e6:0b:56:12:b2:0d:db:e3:79:6d:93:43:a9:0c:f6:
34:f1:77:e4:f2:dd:be:75:90:cc:3e:1e:2a:cd:ea:
ef:91:59:fa:62:37:66:98:65:85:60:d8:4a:e0:5b:
1b:57:41:d3:b1:04:0f:66:f1:6b:0b:e4:5a:db:24:
69:72:28:5b:24:fd:1d:4a:ec:89:f9:df:7f:9d:37:
a3:5a:68:b5:24:80:db:e8:28:40:23:c4:93:3e:c9:
a6:fa:af:89:f9:e1:9b:d2:2c:d8:da:70:55:83:2e:
84:00:8a:43:2f:c9:da:3c:ee:29:b7:62:f0:70:52:
13:36:99:de:8c:b1:62:26:5f:63:1b:12:99:b7:cf:
97:8a:45:b8:63:bb:06:c4:84:3f:bf:5f:5e:4b:7a:
b3:11:61:11:01:c9:b6:f3:3d:1f:e9:ba:1a:e1:f5:
a4:08:ab:4a:f5:c6:d5:f9:c1:81:7c:f6:3a:4b:9c:
3b:00:81:62:98:fa:ff:52:55:7a:36:02:62:17:cb:
40:55:56:d5:7d:52:02:9e:e4:35:66:a1:cf:1d:99:
b2:46:f9:6a:d2:94:9d:12:7e:98:ed:bb:aa:11:03:
41:0a:0a:dc:e0:0f:d6:f8:8f:a7:cf:f1:2c:5d:0b:
16:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:18:81:E7:70:A5:70:77:08:69:4D:58:69:C7:D8:F7:0C:70:1E:67
X509v3 Authority Key Identifier:
keyid:84:23:32:91:D2:DC:6A:C8:60:F5:4B:EE:CE:81:D5:4B:03:44:03:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:f1:8a:48:7a:db:12:d6:cd:20:4f:67:27:f0:a3:68:a3:f5:
66:db:97:ff:a5:51:ee:e1:81:1b:38:b1:c3:f1:a2:de:1e:aa:
a9:89:52:ec:6f:a2:88:b5:d8:08:f7:68:a4:e6:09:1f:d0:4b:
e6:01:17:a3:e8:64:78:42:2d:71:61:cc:d4:a8:ee:64:ab:47:
42:41:5a:cf:cf:b1:50:9d:23:98:80:25:9c:f7:2c:37:13:c0:
e3:49:86:c8:fc:de:88:8f:7c:4f:95:db:ce:ab:4a:f3:0b:03:
64:43:cf:d7:ea:d2:16:7b:62:32:0c:87:a8:5c:48:55:84:b1:
1f:21:e2:69:c3:68:ea:c8:03:91:72:7d:74:6f:cd:1f:c4:11:
a2:f6:39:b7:c1:34:87:c7:d8:6b:3d:14:1a:f2:fc:fd:53:36:
22:6d:75:df:a3:ba:70:2d:86:18:a8:79:d2:a2:c3:ad:de:b8:
7c:dd:1b:e6:9e:e0:1b:a6:b9:02:ae:53:45:34:bf:1e:7d:5a:
c1:24:7d:67:2e:74:76:9c:6c:d7:fc:73:c3:9e:aa:09:33:5b:
66:51:9b:5d:9d:04:d3:2a:f7:36:cc:ff:39:70:b5:4c:d7:b1:
82:f9:15:95:12:b0:79:8d:2e:2a:ed:35:71:d5:43:ef:26:33:
e9:b1:1b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:07 2026 by rpki-client