
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
File: hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft (raw, json)
Hash identifier: SWUE6jiNmMtdbErRA8igJ56T5QbPpz4vjY2q19HwFTo=
Subject key identifier: 10:4C:53:56:84:F0:26:5D:8B:F3:6A:01:5A:18:73:E3:15:3D:E7:2D
Authority key identifier: 85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE
Certificate issuer: /CN=A91E5EEA/serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
Manifest number: 0129
Signing time: Wed 19 Aug 2026 06:21:42 +0000
Manifest this update: Wed 19 Aug 2026 06:21:42 +0000
Manifest next update: Wed 26 Aug 2026 06:21:42 +0000
Files and hashes: 1: hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl (hash: 3r5hRsXw51vuJAW5savT73L5W6NaxPZaU+QsobvOxAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl
rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5EEA, serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE
Validity
Not Before: Aug 19 06:21:42 2026 GMT
Not After : Aug 26 06:21:42 2026 GMT
Subject: CN=6a854b76-3a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:6a:0c:5c:1c:fb:27:80:c7:7a:1e:12:74:
bf:5e:30:58:a6:30:96:99:05:62:1c:35:21:d5:e2:
86:1c:76:f1:20:ce:64:10:4e:b8:12:d4:87:fb:ae:
16:da:4d:e8:c8:bf:ec:38:31:a8:70:8c:08:a2:f1:
21:0d:41:81:32:46:10:65:9e:90:68:2d:89:b3:79:
b8:fd:77:b3:17:16:4d:26:df:8d:f3:38:0f:a2:83:
6c:a5:78:0d:00:f5:39:0f:5d:fd:ba:d5:4c:a8:4f:
2b:91:40:f2:57:b7:50:6a:4f:0f:d0:89:bf:b6:6b:
13:dc:ff:9d:16:3b:7e:3a:29:d6:b4:98:a8:2a:dc:
02:58:82:7d:13:23:e8:0f:66:b8:e6:77:66:0d:93:
b2:29:40:63:bb:30:56:ef:2d:cc:64:1e:e1:fc:89:
75:8b:b0:be:82:46:e8:cf:3c:12:4d:a1:61:3d:27:
5a:e6:c3:b3:8c:01:eb:5a:8a:14:0f:66:f2:2e:c2:
38:4a:8a:6f:df:ea:02:08:59:ab:42:f9:d5:3d:d6:
af:71:66:de:e4:d6:bf:cf:73:c4:bf:93:d3:94:d2:
e6:84:ff:80:d6:92:a1:e9:6c:39:b3:62:7e:3e:a0:
a8:b7:58:4d:63:bc:3d:dd:48:b8:91:04:55:06:38:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4C:53:56:84:F0:26:5D:8B:F3:6A:01:5A:18:73:E3:15:3D:E7:2D
X509v3 Authority Key Identifier:
keyid:85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:41:3e:da:18:09:b6:f9:4c:6a:6e:a2:12:e9:56:f0:58:22:
47:2a:9b:cc:7f:ca:3e:f9:09:d9:b1:ee:46:37:ab:1b:de:cc:
5d:d0:e3:7c:9a:4b:be:8b:03:7f:66:73:35:06:7e:d4:97:37:
35:78:14:eb:be:25:c6:f9:78:26:f2:ab:02:1d:68:54:b5:6b:
53:0b:5d:57:d5:40:56:23:11:27:f5:b1:29:16:f0:a2:47:fd:
33:c2:e2:28:bf:2c:55:18:08:b9:d0:cf:51:ed:61:d2:77:34:
38:77:0c:a2:78:42:66:de:99:fc:8a:eb:fc:c0:5a:35:4d:a4:
94:52:09:ac:84:bf:96:28:59:3a:40:16:6a:6a:2e:ed:9f:19:
30:74:ea:13:18:4e:6e:1e:b5:3d:3c:7a:e9:86:11:c5:73:08:
94:98:8b:5d:0d:a0:3e:10:48:a1:95:ac:40:cb:dc:f7:a8:cd:
03:52:f0:eb:0d:65:68:c1:65:e6:12:06:e0:db:ba:a9:4f:69:
fd:a2:5d:24:e8:0b:1f:35:d7:2a:be:bb:9a:51:67:3f:13:06:
1a:c7:66:1e:c6:1c:44:64:ef:6a:43:ee:8e:55:6f:e4:9a:b0:
3a:5d:f3:22:e5:d6:b9:a5:4b:32:d5:fd:71:2b:7f:15:7b:9c:
c7:fa:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:46:07 2026 by rpki-client