
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
File: Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json)
Hash identifier: anA/n6tmwuBS5/1ZpCgfHxOLj8UUFHWK8f9/r9gqzoI=
Subject key identifier: A8:71:77:FF:58:FC:ED:E9:D3:51:A1:F5:EC:8B:7E:1E:B6:E0:7E:F8
Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Certificate serial: 05BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
Manifest number: 05B6
Signing time: Sat 24 Oct 2026 23:05:26 +0000
Manifest this update: Sat 24 Oct 2026 23:05:26 +0000
Manifest next update: Sat 31 Oct 2026 23:05:26 +0000
Files and hashes: 1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: JHazJIJ05ixfJ1S1B0C0oXGJqlMxpqTI9sDf6f6m/Y8=)
2: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: PcJZfXfLy1L3lPjl8IWMOAup670DbyOJDvUTrpg2JcM=)
3: FE0D78046DE911F18A77D2D25CA30FBC.roa (hash: XiBXgFzUAWL1pwnYSYxy1I5MTxdL8wu1faYe0BCjxYY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl
rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 23:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1470 (0x5be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Validity
Not Before: Oct 24 23:05:26 2026 GMT
Not After : Oct 31 23:05:26 2026 GMT
Subject: CN=6add39b6-264c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:80:3c:24:6c:87:2e:20:81:25:17:fd:a9:
7e:7f:d3:6b:49:ed:ef:d7:16:da:ad:aa:5a:f7:ba:
43:aa:d9:c5:80:ae:6b:74:ac:4a:81:f0:0e:f5:3f:
af:0e:bd:fb:05:e2:57:03:22:63:97:51:ec:cf:1f:
0d:89:3b:3a:27:87:19:8a:25:2e:e6:ed:37:38:e0:
49:76:b4:94:c4:a2:5c:73:80:e5:03:21:92:ce:eb:
5a:40:34:68:da:4d:6b:12:e4:78:8c:8e:e6:c2:6b:
ea:86:e2:9b:29:e8:95:2f:ff:08:1d:95:4b:01:84:
49:93:73:bb:99:d6:f9:43:f8:79:2f:4f:85:e2:0d:
3e:b9:c2:20:3d:1f:bb:a9:26:7c:7d:91:0e:f2:fa:
53:7b:d3:24:0e:5b:8c:5b:f5:e7:53:28:92:1f:f8:
03:8a:ab:ab:4a:ba:d8:66:3d:ef:85:ca:5a:aa:f4:
14:28:bf:25:22:c0:12:73:82:b0:72:7c:77:82:31:
bc:43:9b:d7:8f:3c:70:6a:42:90:be:27:ee:06:a5:
d8:96:fc:5e:09:ba:ca:24:ef:74:54:f9:6f:93:d8:
5a:ea:c2:6c:be:22:e3:cb:0e:be:4f:67:7c:eb:00:
04:6c:e0:8f:e0:fb:54:ab:4c:df:66:d6:f6:98:ca:
75:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:71:77:FF:58:FC:ED:E9:D3:51:A1:F5:EC:8B:7E:1E:B6:E0:7E:F8
X509v3 Authority Key Identifier:
keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:d7:b4:c4:1c:d3:7f:2e:d6:d3:f1:02:11:d0:9e:59:c6:08:
fd:b7:8c:6f:e8:89:7e:c7:ac:f3:3e:7e:a4:16:68:e8:59:73:
b7:33:44:0e:46:6d:41:0b:da:81:86:7c:bc:4e:4a:46:7c:a7:
20:0f:51:36:ee:d5:8a:c6:45:8f:59:ef:a4:6b:7f:58:b2:d1:
d7:99:d7:fb:b1:45:bc:3c:62:12:9d:44:87:d9:44:72:79:3e:
45:97:fd:2f:2d:f5:38:9e:6e:55:25:6b:79:f6:78:a6:e2:c0:
34:3e:8d:34:84:51:e0:4c:46:3a:54:dd:63:bc:75:1f:51:2c:
ec:b4:7f:99:73:70:1e:87:66:9a:bf:39:e3:55:36:0c:76:7b:
ca:b4:e6:3f:da:b4:99:9c:21:2d:7a:26:b6:b0:3b:bc:fa:2c:
38:2b:8b:73:5c:d3:af:38:e1:97:60:fb:29:5b:2e:08:2e:26:
5f:9f:72:b8:f7:df:87:cd:af:81:d2:26:7f:71:c6:c6:13:01:
e2:07:4f:f7:d3:37:17:ca:77:bc:4f:ba:eb:01:d6:e0:22:2d:
2c:ad:29:30:73:60:3f:03:c1:cd:48:04:81:31:b0:d4:2e:06:
72:ee:95:19:46:c3:da:85:93:77:fc:e6:fc:83:f3:2b:e5:7e:
d7:2f:3e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:04:04 2026 by rpki-client