
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
File: hDJHwKwYH8NmZqRDchryHZ2mUNo.mft (raw, json)
Hash identifier: DhiwKj/N31GFvKE1Xxx4CNwSyQvA57ogvULU9QF6A0U=
Subject key identifier: BB:70:88:F4:83:24:BC:C6:06:62:52:E6:74:06:A9:B7:F1:25:93:69
Authority key identifier: 84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA
Certificate issuer: /CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
Manifest number: 01C3
Signing time: Wed 07 Oct 2026 04:20:20 +0000
Manifest this update: Wed 07 Oct 2026 04:20:19 +0000
Manifest next update: Wed 14 Oct 2026 04:20:19 +0000
Files and hashes: 1: hDJHwKwYH8NmZqRDchryHZ2mUNo.crl (hash: btQMOOFiWjSKc5DEZ4AQGMifBEllift9gtWHkYw+z0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl
rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAE0, serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA
Validity
Not Before: Oct 7 04:20:19 2026 GMT
Not After : Oct 14 04:20:19 2026 GMT
Subject: CN=6ac5c884-856c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:b0:a8:4e:60:89:ff:72:03:11:de:68:54:
33:c1:70:fd:43:e4:f3:ac:1b:d8:9b:67:7e:9f:7f:
75:b0:a6:d0:c6:b7:15:3f:28:8b:ec:ea:8c:2c:c6:
10:44:67:50:98:d8:f7:52:e6:9a:80:4e:26:93:4c:
e0:c2:94:1c:4e:c6:92:ae:38:30:a0:16:a9:22:62:
7f:d1:1b:f0:b3:96:eb:69:de:2b:a9:9a:00:07:58:
b8:58:04:93:03:72:c7:85:dd:5b:45:8c:19:cc:4c:
8e:cd:7e:cf:f8:f5:29:ed:01:db:df:c6:ad:05:a7:
79:17:84:61:49:2a:88:1e:43:cc:bb:98:cc:2f:02:
25:ce:af:28:96:29:fb:e6:59:d1:b4:d2:ee:db:f6:
2f:96:53:5d:8b:e9:f7:23:07:cc:2d:9e:ce:58:66:
ec:23:d0:98:24:b2:25:8b:bb:1f:7c:86:dc:fc:70:
80:4c:b4:20:ec:66:21:7d:a4:83:38:95:c8:ab:8c:
2f:40:0b:a6:45:cd:a9:2c:a9:a4:ce:45:87:1d:c4:
f0:1b:bb:89:79:19:b6:af:54:e2:5a:d5:55:3d:46:
ce:01:1b:6a:2b:47:2f:9e:e7:06:30:78:c9:bd:c3:
5c:ca:bd:21:95:99:b7:5c:e6:a5:fe:71:18:14:b7:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:70:88:F4:83:24:BC:C6:06:62:52:E6:74:06:A9:B7:F1:25:93:69
X509v3 Authority Key Identifier:
keyid:84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:fa:34:1a:c5:cc:18:63:43:50:9c:fe:e9:c5:f2:dc:08:7e:
26:5f:cd:c6:49:b3:bd:db:8a:4b:7d:c7:1a:04:8b:fd:b8:fc:
56:ed:4b:80:b8:01:21:9c:e7:ef:f9:17:fd:79:39:e9:f7:36:
39:0a:31:e3:ec:b8:32:bd:0a:bc:2f:0a:ca:47:b5:48:44:49:
85:41:f8:c7:e9:a7:04:18:be:22:17:aa:62:25:f4:9b:0c:a5:
ea:1e:fe:04:19:8d:61:f3:a7:a6:44:75:96:a7:8f:32:cb:27:
0f:71:a2:7b:fa:f9:28:2d:6b:e6:23:3f:98:4c:b0:a9:8d:ef:
57:2c:7a:ed:a3:a6:d8:6f:42:c9:1a:5c:6f:d1:b8:64:72:21:
e7:1c:f0:d4:b6:35:52:0d:89:5b:6a:1c:ab:43:5f:64:e5:85:
ac:b8:cf:41:f7:42:75:ac:74:1f:77:23:4b:e6:8d:1a:08:32:
2f:a9:d5:a6:82:00:13:79:6d:01:dd:fc:ba:ef:04:0d:1f:dc:
3b:e8:23:cc:e0:a6:b1:d2:8c:30:a7:d2:af:e2:40:ce:a2:6f:
3b:53:c4:4d:3b:44:bd:e9:3a:97:32:3b:8f:54:be:7c:08:97:
92:03:c7:97:3a:8f:22:ad:d6:1d:28:f6:69:68:c4:a8:21:9e:
c8:69:2e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:04:27 2026 by rpki-client