
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File: hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier: eNMhIuA86O6krM+nMYfqfb90IT1pqrFQDYIovF6SjxQ=
Subject key identifier: 82:FF:1C:1F:A9:0D:0C:C0:C8:63:FB:FB:08:8E:5A:BC:5F:64:10:75
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer: /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial: 07E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number: 07C8
Signing time: Sun 04 Oct 2026 21:30:48 +0000
Manifest this update: Sun 04 Oct 2026 21:30:48 +0000
Manifest next update: Sun 11 Oct 2026 21:30:48 +0000
Files and hashes: 1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: AOy6N3qWZeM7f40Uauu0Q8tVaVxjiam3N7EpXDhacqg=)
2: 06E6952AAB4211F08DC86D66C4F9AE02.roa (hash: U5iX1eh/A7h/afcB70kYZU805bFcTIwmLGeaQFNS1cc=)
3: E658D57AAB4111F09E35ED65C4F9AE02.roa (hash: oOJyuxXfX3imbXltRS3IeTJJR7sYKvHpEuMTz6A1stI=)
4: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: w8xPzFRUz74kcsL++i4sKCp2gMLpbIAkAjBNqyS5ZF0=)
5: 8A5AA9BAAB4111F09E531265C4F9AE02.roa (hash: 2NlCQvreffBv+sXNAkaP+vHBffUlSnZfd0yyrfrf5aI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 21:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2023 (0x7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Validity
Not Before: Oct 4 21:30:48 2026 GMT
Not After : Oct 11 21:30:48 2026 GMT
Subject: CN=6ac2c588-2e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:31:93:59:a8:d2:79:44:2c:80:e2:b5:5f:
06:b4:21:f7:20:d0:15:98:23:fd:db:d1:ba:36:19:
8d:ad:dd:75:95:a1:fa:59:c5:3b:49:6a:ad:e4:95:
ae:a5:f9:6a:8d:83:33:35:4c:43:29:d3:20:94:fb:
5d:c3:7b:5e:ce:de:fc:a6:17:c3:c2:5c:f7:bb:7a:
df:52:de:36:f2:80:70:44:38:db:e1:7a:fb:0d:a2:
3f:43:73:c2:9a:5e:5c:d5:a3:54:a1:d5:5f:d0:8b:
fb:9e:c9:94:0a:cd:69:ac:63:f4:1d:32:87:ee:b4:
76:58:95:c4:02:87:e4:10:2e:90:68:ce:4b:ea:3a:
6f:cd:9e:5e:27:60:bd:c9:50:b1:74:d9:ed:e0:81:
2f:3f:7f:d7:03:08:5b:56:33:8f:5e:dd:d8:cc:b9:
b6:cc:b7:a2:70:18:5b:a8:df:bc:2a:21:77:ad:9f:
de:d4:29:05:06:99:24:55:a9:e7:a6:c2:b1:b3:f1:
87:17:72:0e:59:b9:92:55:b2:3c:2c:f0:de:a6:63:
8f:f0:69:96:46:df:c4:a7:a0:91:95:4a:1a:26:66:
6f:e4:b8:6c:82:a2:50:95:1d:d9:c0:54:9b:be:66:
94:c1:ea:75:65:0a:63:77:66:85:a5:b6:bc:c1:d7:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FF:1C:1F:A9:0D:0C:C0:C8:63:FB:FB:08:8E:5A:BC:5F:64:10:75
X509v3 Authority Key Identifier:
keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:56:60:f6:0f:5c:5c:aa:c0:bc:fa:96:5f:ac:d6:82:fe:9b:
b8:9e:99:2c:02:5b:f3:92:c6:da:50:4a:db:7f:c2:df:92:7c:
c9:97:6c:96:a7:dd:89:6b:17:f6:f9:c3:04:93:f3:f8:20:3e:
96:f5:73:b6:89:17:e8:99:11:50:d9:1b:24:23:6a:00:fe:fb:
a5:54:cd:95:d3:00:e1:58:95:db:6f:a6:31:b3:db:30:1e:3b:
24:ed:c7:48:1a:58:66:8f:3e:c2:51:0a:a8:48:d6:29:38:2a:
83:db:74:f8:b7:3b:7b:e7:f1:c0:a8:d9:90:c6:a3:3b:eb:82:
e5:f8:21:a9:99:ee:c0:94:82:d0:71:7c:5d:b8:1e:53:04:be:
a8:73:1b:03:81:e4:6a:1d:36:84:6f:bb:82:2f:d6:61:62:53:
5a:6b:ac:c7:4d:a3:e9:5a:72:39:c1:e3:4d:c6:2f:d9:03:2d:
f5:d8:56:c1:15:2d:3b:3a:8c:dc:c6:e8:ab:53:fc:dc:b4:cb:
40:68:e2:cc:de:4b:bd:aa:95:e1:92:2e:e9:9a:00:bf:0e:71:
c6:7f:2c:a2:63:b6:bd:55:7e:22:a5:c7:91:88:f8:46:9e:2b:
60:cf:06:a8:c5:27:bd:7c:8c:9b:fd:56:f6:95:27:01:8d:f4:
b4:d3:59:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:41:40 2026 by rpki-client