
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
File: Hhb4PQxAM115a-W6IckMvumXWbw.mft (raw, json)
Hash identifier: RDDLKVMUsn5xzg+2ASFjMfAH0+t937cd2UBBFac26SA=
Subject key identifier: E2:87:E3:C3:1E:B1:45:A2:A6:F3:5C:57:FD:3A:E3:09:48:59:4D:89
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Certificate issuer: /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial: 0764
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
Manifest number: 073F
Signing time: Sat 28 Mar 2026 21:41:07 +0000
Manifest this update: Sat 28 Mar 2026 21:41:06 +0000
Manifest next update: Sat 04 Apr 2026 21:41:06 +0000
Files and hashes: 1: Hhb4PQxAM115a-W6IckMvumXWbw.crl (hash: 230OYckVDQ7dpu9zMP4g97qJHFqs0IdUSNcchUXwA60=)
2: 1745A0504D7F11EE8487CA3CC4F9AE02.roa (hash: LJp9euumgUJgvg5bgQ/2zKDBr11uJnsBS5Uac9bJJe4=)
3: 7E11B25E632A11EEA4BAF91FC4F9AE02.roa (hash: UKLpGhXiwCvflU/JIo9s5JXcYpAGjEULFWmk3jFbGHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 21:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1892 (0x764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5606, serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Validity
Not Before: Mar 28 21:41:06 2026 GMT
Not After : Apr 4 21:41:06 2026 GMT
Subject: CN=69c84af3-7c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:99:97:65:1b:01:bb:5e:39:97:f8:78:9e:
1d:28:56:b2:0f:f2:ed:6a:48:83:cb:60:eb:aa:7d:
03:dd:e8:68:53:cc:39:c5:59:0d:1e:ed:e1:7a:79:
62:1e:62:fd:35:e9:9e:4e:19:2f:97:6c:95:62:f7:
33:0f:43:f6:59:6d:f8:ca:39:b4:3b:f9:1d:0d:e5:
d7:58:66:d2:10:64:65:c5:f6:01:cd:b1:a7:34:6a:
b1:5f:46:55:c1:f6:5e:6b:82:d0:21:98:8a:cd:af:
09:6a:16:0d:07:e6:ce:ee:25:b7:3b:a7:0f:08:e6:
1d:dd:e4:c4:4c:1c:b2:06:74:92:6e:d4:93:a2:85:
92:8f:7e:2f:bc:3a:38:79:ff:cb:5b:2d:7d:40:f8:
74:7a:32:49:e7:35:b6:1e:d5:5e:80:56:78:12:a8:
e9:ed:6d:6a:f3:85:41:de:98:f3:32:29:f9:2c:b7:
94:8e:1c:4b:eb:2a:6e:82:e0:25:bf:c3:71:32:0a:
64:ff:1e:ae:b3:ce:8f:9e:28:7b:ff:6e:c0:06:ad:
bf:2f:cc:f4:c7:07:df:d2:40:b3:c7:13:d5:63:cc:
5e:97:9b:b1:87:30:c8:80:e1:7a:9d:78:64:76:69:
39:48:75:f1:c7:fe:dc:76:48:42:23:12:c9:2f:41:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:87:E3:C3:1E:B1:45:A2:A6:F3:5C:57:FD:3A:E3:09:48:59:4D:89
X509v3 Authority Key Identifier:
keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:be:a8:4f:48:fb:2b:d8:11:db:bf:97:18:5c:68:dc:9b:c7:
76:53:e3:5b:43:bf:c1:d2:b7:b1:67:d9:c2:53:93:5d:c3:e7:
c0:aa:4d:68:3b:41:4f:7c:6e:7e:19:4e:db:b3:14:24:9c:2b:
a4:a6:13:1c:7d:11:e7:b6:7d:92:2a:b3:dd:b8:5b:d3:48:51:
97:fd:b3:35:c1:af:f3:19:ba:69:7f:68:9c:27:70:5d:a7:34:
6b:b3:86:aa:5c:72:e6:38:3f:26:fc:49:8c:01:78:57:3c:7c:
2e:1e:db:a0:37:9d:1e:43:5e:67:82:d0:27:57:57:f5:08:62:
9b:29:4a:c9:5f:e6:c9:16:70:52:0b:30:e0:f6:9a:5e:85:cb:
42:6f:8a:06:7c:e9:17:fc:86:d1:0f:12:5e:d6:e8:45:0d:55:
e3:64:2f:c5:34:43:fa:44:a7:cc:bf:12:f1:58:ee:3d:81:28:
79:ad:f3:f7:af:9c:b7:9f:26:e6:7b:01:94:a9:9b:46:f6:94:
7b:5c:88:99:74:78:6d:55:49:f7:18:e3:f2:58:7c:31:dd:1f:
3d:2e:60:7b:37:bd:e2:b7:16:d6:ce:1c:9d:3c:a6:56:db:6d:
7e:92:cc:b9:d5:51:03:2a:33:f7:c7:54:a3:74:43:6d:57:ba:
86:d0:fd:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU2MDYxMTAvBgNVBAUTKDFFMTZGODNEMEM0MDMzNUQ3OTZCRTVCQTIxQzkwQ0JF
RTk5NzU5QkMwHhcNMjYwMzI4MjE0MTA2WhcNMjYwNDA0MjE0MTA2WjAYMRYwFAYD
VQQDEw02OWM4NGFmMy03YzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsYKZl2UbAbteOZf4eJ4dKFayD/LtakiDy2Drqn0D3ehoU8w5xVkNHu3henli
HmL9NemeThkvl2yVYvczD0P2WW34yjm0O/kdDeXXWGbSEGRlxfYBzbGnNGqxX0ZV
wfZea4LQIZiKza8JahYNB+bO7iW3O6cPCOYd3eTETByyBnSSbtSTooWSj34vvDo4
ef/LWy19QPh0ejJJ5zW2HtVegFZ4Eqjp7W1q84VB3pjzMin5LLeUjhxL6ypuguAl
v8NxMgpk/x6us86Pnih7/27ABq2/L8z0xwff0kCzxxPVY8xel5uxhzDIgOF6nXhk
dmk5SHXxx/7cdkhCIxLJL0HM3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKH48Me
sUWipvNcV/064wlIWU2JMB8GA1UdIwQYMBaAFB4W+D0MQDNdeWvluiHJDL7pl1m8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwNi85NDBDNUQ5Qzcx
MDIxMUVCODcwNzNCNzBDNEY5QUUwMi9IaGI0UFF4QU0xMTVhLVc2SWNrTXZ1bVhX
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hoYjRQUXhBTTExNWEtVzZJY2tNdnVtWFdidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTYwNi85NDBDNUQ5QzcxMDIxMUVCODcwNzNCNzBDNEY5QUUwMi9IaGI0UFF4QU0x
MTVhLVc2SWNrTXZ1bVhXYncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOL6oT0j7K9gR27+XGFxo3JvHdlPjW0O/wdK3sWfZwlOTXcPnwKpNaDtBT3xu
fhlO27MUJJwrpKYTHH0R57Z9kiqz3bhb00hRl/2zNcGv8xm6aX9onCdwXac0a7OG
qlxy5jg/JvxJjAF4Vzx8Lh7boDedHkNeZ4LQJ1dX9QhimylKyV/myRZwUgsw4Paa
XoXLQm+KBnzpF/yG0Q8SXtboRQ1V42QvxTRD+kSnzL8S8VjuPYEoea3z96+ct58m
5nsBlKmbRvaUe1yImXR4bVVJ9xjj8lh8Md0fPS5geze94rcW1s4cnTymVtttfpLM
udVRAyoz98dUo3RDbVe6htD9CA==
-----END CERTIFICATE-----
Generated at Mon Mar 30 22:51:44 2026 by rpki-client