
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
File: Hhb4PQxAM115a-W6IckMvumXWbw.mft (raw, json)
Hash identifier: lSFRMxVu33NId2G60N74+afQaseRlR/6t2m/b5R3/cg=
Subject key identifier: 49:D9:D3:D1:F3:9C:2A:31:33:B3:08:62:23:DD:C2:16:86:25:C6:FD
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Certificate issuer: /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial: 0780
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
Manifest number: 0759
Signing time: Thu 14 May 2026 21:48:46 +0000
Manifest this update: Thu 14 May 2026 21:48:45 +0000
Manifest next update: Thu 21 May 2026 21:48:45 +0000
Files and hashes: 1: Hhb4PQxAM115a-W6IckMvumXWbw.crl (hash: xq/KD64B3vkguAC89FiB8Kz/6wbpm2pmY1r4/Y7yEEc=)
2: 7E11B25E632A11EEA4BAF91FC4F9AE02.roa (hash: WeQVo7fwV+V9bl8424+RhWXTOrNJfa47Vs9LGPlEi9s=)
3: 1745A0504D7F11EE8487CA3CC4F9AE02.roa (hash: 92S13xMUtTa9ngZEJpHZILOhTqRPbqcQrnmdTEujx6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 21:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1920 (0x780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5606, serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Validity
Not Before: May 14 21:48:45 2026 GMT
Not After : May 21 21:48:45 2026 GMT
Subject: CN=6a06433e-ce61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:17:27:ca:8c:8e:f3:c5:75:ad:97:34:12:
61:15:f4:b3:78:1b:81:12:29:23:72:67:02:63:32:
22:bb:55:8f:a3:04:e8:ee:3b:36:fd:03:96:38:3f:
94:f2:30:3d:12:39:6f:e3:c8:64:21:b9:93:54:c4:
6a:9c:7d:c4:d8:1a:df:f4:ee:e6:2f:75:34:f1:f9:
5b:2d:a5:43:cf:d2:c3:88:47:18:41:4e:ca:e0:f1:
9c:ea:0e:29:27:47:09:78:8e:aa:f4:f1:f4:e6:8a:
aa:60:dd:9b:41:18:aa:c7:98:83:07:5d:9d:bc:d7:
a9:91:7f:e7:4e:6d:db:73:22:df:40:0c:18:02:38:
b9:b7:4b:96:a7:70:e3:da:8c:f8:7f:e5:95:b5:45:
1d:47:8f:c9:9d:b3:bc:4d:ab:71:97:cc:3a:81:60:
16:a8:d1:db:f8:6e:f2:c5:27:c0:c8:0c:2e:27:be:
e0:fb:62:36:fd:3b:bb:6d:c0:c8:b6:c5:30:47:e9:
35:c9:45:39:c9:ee:d5:97:40:30:f3:41:b9:a3:d8:
63:26:12:f8:5c:fc:2c:15:e7:c1:78:ab:19:2c:da:
7b:33:4a:9d:eb:26:96:e1:c7:92:d8:43:17:0a:84:
20:16:99:33:03:19:cc:36:5c:3e:30:a8:26:ae:fa:
95:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D9:D3:D1:F3:9C:2A:31:33:B3:08:62:23:DD:C2:16:86:25:C6:FD
X509v3 Authority Key Identifier:
keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:96:52:be:b8:9f:09:66:4b:ad:8b:68:db:91:3f:a5:db:de:
54:6a:6c:c9:6c:35:b9:41:3c:29:73:b8:f9:f6:65:72:88:6b:
01:f1:94:dc:a9:94:1b:0d:38:d4:12:2a:12:6c:7e:07:87:34:
0b:d7:5e:c8:85:94:e8:23:99:3b:36:b5:5f:78:e0:55:88:39:
f5:4d:e0:72:7e:86:a0:65:19:e5:fd:3b:0c:1d:a7:f3:a5:be:
6c:bc:e1:5a:b8:e8:88:c4:ce:22:bc:d6:9c:d3:72:99:94:1c:
e6:ed:b6:2b:e0:c9:2c:13:1d:b1:9e:a1:ae:60:dc:6e:4e:7f:
19:e7:b9:c9:c9:6c:76:e5:84:e0:79:81:e8:f2:33:cb:1b:82:
f9:db:5f:01:4b:13:d4:cd:04:a6:7b:11:fc:be:08:d5:c6:ea:
7c:58:04:ed:99:8b:63:2c:b7:2a:5e:03:d6:80:48:ac:b0:8e:
e4:98:f5:f0:c0:24:7c:66:73:e9:d7:b5:c0:45:c8:db:96:cb:
7b:ef:8e:d6:5b:60:71:8a:ad:62:6c:60:33:f3:d6:01:6d:4f:
a9:76:27:77:9c:d8:f1:ef:49:9b:99:da:99:fb:73:9a:14:15:
a1:1a:22:93:3e:9e:2f:ec:40:a2:6f:88:4d:e0:08:4a:7c:84:
c6:d7:11:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:54:22 2026 by rpki-client