
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
File: HmHgACzkS79ZVTyASgrJEub-vzs.mft (raw, json)
Hash identifier: 5VXmzBIeBoeJ0RhNHl125YfSRC3B8tvgUEEMwL/Zmq4=
Subject key identifier: C9:01:31:9C:BE:23:EB:AD:7D:B4:1C:63:4D:F7:F3:D5:83:AE:82:36
Authority key identifier: 1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
Certificate issuer: /CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Certificate serial: 0344
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
Manifest number: 033A
Signing time: Fri 09 Oct 2026 01:09:54 +0000
Manifest this update: Fri 09 Oct 2026 01:09:53 +0000
Manifest next update: Fri 16 Oct 2026 01:09:53 +0000
Files and hashes: 1: HmHgACzkS79ZVTyASgrJEub-vzs.crl (hash: emYY4EzWDZ3JbKBJ2hsN9/kmWODo0PTBz/0drd+Ifqs=)
2: 654307DC26CC11EDB395A078C4F9AE02.roa (hash: Q48Y/wp7RhZuuL2sntpKBoS0Dfa5UCP/oik4uhuXQww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl
rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 01:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 836 (0x344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EACB9, serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Validity
Not Before: Oct 9 01:09:53 2026 GMT
Not After : Oct 16 01:09:53 2026 GMT
Subject: CN=6ac83ee2-9332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:d4:ac:3c:68:99:41:71:b3:b0:f3:70:24:
87:5c:fb:18:8b:77:d9:7d:3f:c8:cc:9b:1d:f8:0d:
79:93:bd:81:b0:4a:53:f6:4c:f7:25:db:d3:6b:a9:
ed:fe:e6:2a:31:6f:45:20:30:53:d2:6d:42:6d:c7:
15:52:1d:20:ca:47:b5:e2:86:50:9a:a2:08:71:9f:
42:fa:2a:b6:0b:4e:63:82:c6:d5:ba:60:7d:26:5b:
4d:8f:38:e7:10:49:93:02:17:72:7a:74:3b:f9:df:
46:14:97:79:e5:a5:22:23:aa:72:7a:97:85:01:40:
e7:ae:92:43:71:58:fa:0b:26:cf:36:a8:d9:12:72:
fe:33:9e:6f:a8:db:df:8c:8a:ae:1e:97:fd:9c:95:
75:46:be:b7:e0:68:58:32:f6:f9:29:1a:4e:42:45:
bf:41:9b:72:f3:1c:e0:ba:6f:07:de:9d:51:4d:9a:
1f:a3:2d:ea:ca:63:bf:fa:df:c0:dd:74:5b:b1:f1:
f5:fb:9d:6c:c9:84:3f:07:5e:48:45:8c:de:de:70:
8c:70:2e:e8:6d:dd:0e:17:ad:40:27:b0:ec:36:eb:
0f:98:ca:cb:f5:30:ef:14:74:68:b8:b6:f1:02:34:
80:9c:75:f4:8a:d4:4b:57:89:57:4a:e6:33:3f:56:
6d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:01:31:9C:BE:23:EB:AD:7D:B4:1C:63:4D:F7:F3:D5:83:AE:82:36
X509v3 Authority Key Identifier:
keyid:1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:58:38:91:d6:ed:cd:49:1c:09:91:1e:5a:66:5d:9e:1f:50:
3a:8d:e2:ee:49:14:45:69:89:3b:7a:44:42:a3:4b:8b:be:60:
61:b0:84:fb:83:08:66:e4:e6:7c:03:d3:0a:d9:e6:f5:fa:b6:
8d:e3:8f:3c:69:3f:77:c3:fe:cd:af:20:f5:fb:d3:68:61:cc:
0e:8b:a7:d7:35:fe:5b:08:5c:26:7e:11:90:d1:a1:99:95:c4:
1d:8c:b3:a7:6b:3e:61:f8:87:8a:e1:91:f0:32:f2:e9:ac:6c:
4d:c9:cc:d2:6e:0b:47:45:8f:4b:61:2c:c3:ed:1a:31:5a:e2:
b5:ef:55:0e:8c:32:74:81:92:68:a5:b4:61:a7:c9:da:ca:80:
c2:4b:e6:ec:e1:be:be:f4:47:be:3d:ce:5b:38:34:08:81:ca:
68:8f:be:97:73:a6:c8:df:b8:d4:1c:82:0c:86:68:a6:3f:1f:
84:70:b6:e7:6a:69:b9:cb:9b:82:c8:80:8e:8f:1b:f2:93:c5:
87:a9:a6:40:59:70:17:40:84:b1:91:35:6d:95:c8:4f:a2:d3:
19:b1:c6:90:28:e1:10:ca:40:33:12:bd:b7:14:58:00:f3:42:
7d:05:b1:6b:6e:a0:17:c0:97:68:8b:f1:44:4f:65:d3:1d:bc:
83:84:57:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:29:22 2026 by rpki-client