
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft
File: HQ2sEe2C41wjsMvv--4AYmOwmVc.mft (raw, json)
Hash identifier: 0gmWSKBQY1CZntTwziFJAIuWeSBNYM1EsrTsXVbsS+s=
Subject key identifier: C0:5D:62:AC:0D:07:C5:EB:56:3E:50:6D:4D:9E:C1:66:7D:5A:4F:61
Authority key identifier: 1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57
Certificate issuer: /CN=A91EA9C0/serialNumber=1D0DAC11ED82E35C23B0CBEFFBEE006263B09957
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft
Manifest number: E9
Signing time: Wed 19 Aug 2026 07:07:25 +0000
Manifest this update: Wed 19 Aug 2026 07:07:24 +0000
Manifest next update: Wed 26 Aug 2026 07:07:24 +0000
Files and hashes: 1: HQ2sEe2C41wjsMvv--4AYmOwmVc.crl (hash: 9NK/BiSM4OFa22LGkDaCsn2vP2iRPxwXT0lP0vYwRPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.crl
rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9C0, serialNumber=1D0DAC11ED82E35C23B0CBEFFBEE006263B09957
Validity
Not Before: Aug 19 07:07:24 2026 GMT
Not After : Aug 26 07:07:24 2026 GMT
Subject: CN=6a85562c-99ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:a2:ad:c2:c3:4a:de:80:a8:99:78:4a:39:
bc:b1:1a:a5:08:07:6f:26:4d:b8:38:ff:04:73:1b:
c4:66:37:af:bf:a8:2b:58:d7:17:23:5d:d2:75:29:
29:84:b6:65:57:e8:cf:ae:bb:f1:e0:c6:e5:3b:72:
23:b4:57:e8:e6:2c:b0:2f:d3:59:0e:61:ed:2b:94:
50:d3:07:8f:f6:37:20:40:ae:7e:cf:85:7e:59:5b:
d8:76:2c:50:dd:4b:6f:a0:0d:bd:a5:31:d9:cd:7d:
4f:dc:98:08:a8:45:f5:d5:30:69:a9:4a:79:95:77:
0d:4a:ef:60:21:dc:56:01:4e:3f:28:6f:b6:ff:46:
8d:ab:3e:65:cb:19:80:3f:e1:e2:23:b8:c1:f8:11:
32:00:be:2c:f6:14:bb:c0:b5:e7:76:8e:7e:3a:b4:
ae:b1:f3:4f:04:46:06:bb:c7:3b:27:fa:e5:54:47:
42:62:f7:d9:48:ed:18:23:a6:01:10:71:14:b1:65:
ff:03:1a:44:89:de:69:bb:a9:08:62:d0:b4:e9:d5:
d7:bd:db:a1:43:37:25:52:7c:7f:2e:7b:e1:52:ad:
07:4d:31:08:8b:b5:80:c3:63:a5:13:ee:94:06:1e:
fd:5e:d2:8e:38:f3:5f:73:80:e6:8f:6f:10:23:24:
4d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5D:62:AC:0D:07:C5:EB:56:3E:50:6D:4D:9E:C1:66:7D:5A:4F:61
X509v3 Authority Key Identifier:
keyid:1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fa:d0:6c:a5:f7:aa:14:85:c6:7b:28:cd:72:2d:4b:95:c8:
2d:18:52:9a:53:ec:ca:9c:c8:25:51:fc:42:cb:85:be:06:f0:
45:bc:79:c0:01:9b:e8:1f:66:96:d0:d6:83:64:24:f6:30:3f:
ae:ac:8c:18:33:2d:73:10:12:9f:21:97:71:1a:8d:e7:0a:3c:
20:22:18:43:f4:dd:34:df:78:9a:3c:c7:24:cd:fe:e5:69:a4:
8d:bc:a6:cb:29:79:33:5d:9f:3e:7b:3e:9b:f8:e0:2d:fd:13:
16:49:9e:1b:79:c7:97:99:2f:78:5d:1c:0c:12:c2:4b:d0:f6:
e7:88:fd:70:40:37:96:91:5d:38:60:b6:5d:4e:33:bd:b1:2f:
9b:44:aa:a5:8f:a8:f1:42:d9:2b:b5:7a:f4:16:7a:ea:82:df:
fd:9a:f9:7d:49:cc:ed:d3:ca:69:2d:e3:51:57:bf:af:86:0a:
0e:82:b0:2d:7c:dd:47:d2:b6:6e:f3:1f:5c:84:f6:a1:cf:da:
8c:2c:95:0e:60:56:3b:b4:52:c2:34:3e:ab:72:df:eb:e0:1b:
98:9e:92:c4:24:4f:8f:26:68:61:33:39:f2:3a:a5:9a:d1:6a:
a3:69:b4:0e:52:51:9b:74:33:ae:18:64:d7:2e:f7:7a:73:17:
2d:ca:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:28 2026 by rpki-client