
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
File: hkuImlN4cQmFJlQfDrkSVv2vp7E.mft (raw, json)
Hash identifier: JfVDT6q88JBdMD0el+YcqiI3HuKWhlzPNrDtT1VjES4=
Subject key identifier: 58:BD:29:39:9E:B8:73:A9:9A:86:49:C5:81:08:EF:11:AC:ED:55:ED
Authority key identifier: 86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1
Certificate issuer: /CN=A91DB53B/serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
Manifest number: 8A
Signing time: Sat 05 Sep 2026 07:19:35 +0000
Manifest this update: Sat 05 Sep 2026 07:19:34 +0000
Manifest next update: Sat 12 Sep 2026 07:19:34 +0000
Files and hashes: 1: hkuImlN4cQmFJlQfDrkSVv2vp7E.crl (hash: 6lOpYo6FUcNuJupaIAd5Hph39lA62sdxhft3zvmQMTM=)
2: 53F3631AE09A11F0A599D036446F56BC.roa (hash: WoFjSSb7IQkAQ4Xj41j5FesrpjNa8U4BYhsQXgjZdyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl
rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 07:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB53B, serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
Validity
Not Before: Sep 5 07:19:34 2026 GMT
Not After : Sep 12 07:19:34 2026 GMT
Subject: CN=6a9bc287-c5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:09:d4:e4:06:40:4f:fc:d9:a6:e3:39:9f:
de:d7:e0:95:be:8c:dc:3b:72:4f:97:2f:36:8e:f1:
21:8b:dd:6b:54:e1:e3:5b:d7:3d:bf:f5:e9:83:62:
03:57:78:ab:c3:20:98:69:a9:c2:5e:a8:d7:a3:7b:
a2:13:ac:16:98:63:16:c3:be:24:13:99:6e:df:7e:
cb:8f:05:a9:0d:e4:ac:72:fb:01:26:43:e7:3a:af:
4e:6b:e7:4b:c5:c6:26:26:df:dd:8c:e8:d3:a6:e3:
e7:20:62:aa:bf:4d:d6:22:f9:68:fd:ea:aa:55:2f:
2b:cf:5a:27:78:88:00:4d:71:75:63:f6:9d:e8:c7:
4e:65:aa:ad:d0:01:00:d7:bd:e8:c4:0f:88:95:fd:
d5:15:ff:a2:e4:82:74:ed:3a:cd:39:be:f7:82:40:
5c:fa:3d:17:5f:26:25:eb:a0:ea:41:d1:26:00:60:
90:16:53:a5:b7:81:67:d3:59:d5:63:21:c9:d5:ab:
39:76:28:7e:ef:8a:b9:25:20:a5:ae:3c:17:69:76:
2d:0b:8f:3d:75:b5:f4:f3:2e:7b:ba:46:24:e6:9d:
62:04:e5:c9:5b:aa:fb:67:e4:eb:60:de:df:5b:a5:
b5:1b:30:46:7e:d7:3b:9a:61:f9:5d:60:af:14:04:
d0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BD:29:39:9E:B8:73:A9:9A:86:49:C5:81:08:EF:11:AC:ED:55:ED
X509v3 Authority Key Identifier:
keyid:86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:4c:6e:7f:1b:03:23:df:25:03:75:47:34:75:72:9d:76:df:
a9:37:3a:89:98:e2:cf:f4:f8:25:b2:65:f5:30:9c:84:47:af:
e3:a1:41:86:9c:4b:9e:94:04:9b:95:a0:b1:a0:d9:41:b4:9a:
7d:ca:7f:b4:60:0a:23:de:15:b2:48:cc:12:e6:d9:cd:08:07:
f7:75:ba:4e:b6:13:87:a2:1a:4d:7b:80:f9:35:cf:cb:8c:df:
5d:2c:1c:3e:89:67:39:9c:6d:b5:63:dd:f3:3d:7b:6a:8a:85:
84:ab:98:ff:29:04:d4:00:e8:64:db:3f:4f:b7:9b:3b:60:9c:
2c:0f:3d:12:66:94:ea:a2:8b:8e:f1:60:45:42:6c:5c:ae:63:
09:71:80:df:d3:4f:b0:54:6d:78:b5:f3:0d:23:01:86:a2:a9:
d3:aa:5b:c8:44:72:f8:5f:ff:8f:df:ea:e3:af:a6:7a:54:50:
15:ac:f4:f7:d6:e8:64:32:5a:ac:cc:d8:ed:31:e1:87:e7:35:
a4:04:17:58:8e:27:69:a9:67:c5:da:3d:59:0f:8e:40:73:a7:
ef:7d:cc:c6:72:13:9e:cf:2b:58:ce:7a:68:f6:f3:34:68:1f:
e7:7f:e9:95:76:b9:8a:d4:65:9e:11:37:5a:0e:f9:c7:2e:ec:
0d:a2:ba:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:10:50 2026 by rpki-client