
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
File: Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json)
Hash identifier: aICpdk+FSyzdVkO5V3gmPpEM6QffWWRknYxFsfwE+8s=
Subject key identifier: D2:BD:A2:C7:82:1B:69:3F:0D:E8:8C:DF:FC:47:65:FD:B4:28:A9:63
Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Certificate serial: 0572
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
Manifest number: 056B
Signing time: Mon 01 Jun 2026 00:00:58 +0000
Manifest this update: Mon 01 Jun 2026 00:00:57 +0000
Manifest next update: Mon 08 Jun 2026 00:00:57 +0000
Files and hashes: 1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: Xi1E+yMMIbzNTzYy/3AyCLsTg7KM/xCYXD5T5GryvDY=)
2: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: PcJZfXfLy1L3lPjl8IWMOAup670DbyOJDvUTrpg2JcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl
rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1394 (0x572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Validity
Not Before: Jun 1 00:00:57 2026 GMT
Not After : Jun 8 00:00:57 2026 GMT
Subject: CN=6a1ccbba-3e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:50:ad:c3:bd:50:95:c1:55:1f:f9:6c:cb:
c8:c3:5a:fb:9f:60:f0:c0:6f:13:4c:c5:fc:12:6b:
eb:53:1c:87:97:31:1d:6f:eb:8f:c8:c6:90:70:7b:
40:58:c1:bf:33:35:39:d1:42:a4:f5:64:cd:7d:09:
7e:95:e2:ca:65:2f:6e:0c:93:cb:66:bc:fb:09:34:
c0:fd:27:0b:e7:ba:62:f4:5f:c6:21:54:c8:44:24:
d0:2f:7f:ee:f0:12:db:68:93:eb:16:39:67:b8:c9:
cd:9c:21:1a:6b:5c:c7:2e:48:20:d7:73:04:2f:77:
92:1e:19:41:06:82:42:6c:1d:3e:3b:7f:38:ee:82:
6e:60:6e:fd:12:c9:c2:39:52:4d:b2:69:e7:1a:aa:
23:02:3c:c7:06:9b:7e:37:d1:88:e8:3d:71:99:8a:
9c:b3:4c:f8:1a:61:bb:94:b6:c5:67:b0:e0:3d:a2:
2b:f6:64:62:ee:be:4a:d4:d2:89:74:bf:bd:19:b5:
61:16:d0:be:8e:11:76:fc:53:53:9f:c0:8e:aa:07:
eb:98:98:2a:9c:c9:79:81:e6:c2:59:ef:a5:46:8b:
e1:09:b0:8f:55:31:10:29:41:41:54:b0:34:00:18:
d4:b0:b3:74:8c:df:ff:95:69:16:ba:c7:c2:c6:da:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BD:A2:C7:82:1B:69:3F:0D:E8:8C:DF:FC:47:65:FD:B4:28:A9:63
X509v3 Authority Key Identifier:
keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d6:7d:cb:4d:35:5f:2f:a1:82:66:72:6a:73:83:6e:7b:a3:
2b:41:0f:8f:58:91:c4:c3:d3:80:c4:9e:43:ae:fb:33:fe:fc:
90:7d:03:d3:5d:98:74:65:6c:fc:cb:68:f6:af:f6:86:63:26:
89:df:1f:01:a5:3c:bc:b2:2d:7d:d9:ab:3a:7f:9f:50:c6:9a:
0a:d4:2d:7e:08:60:70:d6:f1:75:d8:d4:da:d3:b7:ef:1b:02:
ba:1a:7f:68:f4:7c:75:70:08:31:61:3a:ad:95:97:76:da:5d:
75:fc:53:10:a3:4e:3a:3a:25:e8:ec:78:b9:91:55:87:e5:d3:
de:6e:a8:dd:8b:43:27:de:04:70:ee:02:08:c5:61:e4:52:77:
35:15:b1:47:55:f6:9a:37:36:b9:c7:7b:1e:f0:5f:74:21:bf:
38:26:01:f7:5b:10:10:03:92:05:19:c5:73:da:49:ad:e4:0c:
41:f7:2b:38:91:56:47:13:65:ff:ab:f0:3b:b2:4c:c8:b6:4c:
82:84:7a:2c:81:a1:7e:91:2d:89:e5:92:6e:9e:29:19:cc:02:
43:c9:80:d7:dc:2b:d0:8a:7e:6b:c3:b4:6d:be:cc:a2:9a:9a:
5f:36:50:df:f0:85:8d:62:0d:cd:90:fb:1d:d7:66:8e:a4:52:
71:06:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:12 2026 by rpki-client