
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
File: hQh9CO2zN-4B6xruuBLL7jStjmM.mft (raw, json)
Hash identifier: DruASdMjWyquA1/0VESE+IPzqnLsENpDtzHFs2bocX4=
Subject key identifier: 26:AB:91:21:55:17:3D:36:3B:21:27:C6:C1:FC:C6:66:FC:54:CF:47
Authority key identifier: 85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63
Certificate issuer: /CN=A91DE01E/serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63
Certificate serial: 4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
Manifest number: 4D
Signing time: Sun 05 Apr 2026 07:35:13 +0000
Manifest this update: Sun 05 Apr 2026 07:35:13 +0000
Manifest next update: Sun 12 Apr 2026 07:35:13 +0000
Files and hashes: 1: hQh9CO2zN-4B6xruuBLL7jStjmM.crl (hash: qpPlfsx0UlgmARidNm60GNieDHAKov/IsREtlOrrtGI=)
2: F7DB315EBEC811F0A266E40FC4F9AE02.roa (hash: w+kCz29PMoE0vXbHOHzh6jQZ1Wd2peHTD++7Yo/0GCA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl
rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE01E, serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63
Validity
Not Before: Apr 5 07:35:13 2026 GMT
Not After : Apr 12 07:35:13 2026 GMT
Subject: CN=69d210b1-ce7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:80:dc:fd:17:33:53:3d:bf:3e:18:74:03:
ba:ee:d7:e7:7f:2b:d9:6f:21:58:3c:30:19:7a:00:
6f:5e:34:a2:90:06:56:36:83:57:33:84:55:79:de:
9d:00:6a:58:e1:25:b5:bd:52:66:b9:cc:a5:27:3d:
c5:0d:e6:1f:e1:f3:7a:1f:2d:9e:f2:35:19:ae:96:
82:72:2e:f1:2b:30:f5:a4:eb:6d:0a:29:19:72:dc:
91:b4:f1:83:32:ba:c2:24:40:41:b3:e3:63:01:4d:
71:a0:bb:30:fc:1b:91:d3:9c:a8:b2:83:36:e7:f1:
cf:b1:32:da:12:b9:d0:68:b3:f1:d5:e1:b3:4b:07:
f8:be:7c:da:70:29:8b:2e:e0:9f:42:a0:72:a3:8d:
f6:38:97:2c:c2:5a:15:38:3d:2e:d6:0b:54:9a:8c:
c1:ad:51:61:d7:e7:57:1f:03:1a:49:51:c3:ae:79:
ee:4e:4c:39:0f:a5:0d:6c:57:1b:49:b1:a0:a3:7e:
41:f2:a1:36:c3:d2:04:c7:c7:cb:a2:2d:56:9a:da:
0b:2b:c9:19:1c:11:1f:65:4f:fa:f3:a6:0d:e6:06:
87:4b:84:f6:8d:9a:50:03:bf:de:5d:c2:45:27:b4:
4a:84:10:8f:85:10:d0:0c:89:07:ba:2d:a7:97:b6:
01:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AB:91:21:55:17:3D:36:3B:21:27:C6:C1:FC:C6:66:FC:54:CF:47
X509v3 Authority Key Identifier:
keyid:85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:04:59:8a:1a:60:3b:b7:47:af:58:6e:fc:f9:af:60:3f:92:
9a:59:2f:3f:e8:0a:61:ef:03:7a:33:e4:0c:ac:cc:d0:07:c7:
f5:6b:a7:68:0f:c6:75:47:d3:66:d0:1d:02:a1:bf:e7:2e:d8:
42:80:95:83:1c:d9:0c:f5:1b:1f:7f:57:2a:27:55:8d:31:a0:
e6:4a:bd:f8:be:c6:2e:0c:05:9b:6f:c6:e5:5f:83:7d:26:72:
c5:93:93:a4:14:48:c7:f8:0b:ac:b7:e3:72:db:47:06:b3:a9:
f8:86:4c:06:d2:19:1b:f3:7b:c1:c4:ff:81:8d:6d:6e:af:3f:
f2:cd:c8:07:cf:72:7a:44:dc:49:6f:70:b8:df:5e:e2:06:1d:
e2:28:3f:ab:8c:ee:2d:88:35:26:53:25:6f:d4:6c:f4:4b:7a:
a1:ff:1a:97:49:28:cf:9d:2d:a6:2e:29:ad:b4:11:f3:ba:72:
df:bc:02:85:cf:06:bc:ba:96:da:c7:88:af:14:8e:9b:28:df:
25:25:29:fb:ec:89:4e:22:ab:61:60:31:fd:2f:0e:5a:ff:55:
6b:c8:18:bc:44:36:a1:b8:fb:09:54:bd:78:e6:f5:55:26:b2:
59:b6:84:70:32:eb:01:ee:81:c8:fe:a2:ad:de:26:e2:66:aa:
8b:c7:9c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:39 2026 by rpki-client