
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File: hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier: ygH5y2PBfwhA0sKoGHVhxkjBIIbHeS0aA2tlGxxJ8ys=
Subject key identifier: C0:4D:CF:DD:59:22:E8:71:2B:C9:64:FB:8E:69:FC:FC:86:B0:C0:10
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer: /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial: 07CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number: 07B0
Signing time: Tue 18 Aug 2026 21:51:46 +0000
Manifest this update: Tue 18 Aug 2026 21:51:46 +0000
Manifest next update: Tue 25 Aug 2026 21:51:46 +0000
Files and hashes: 1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: n9Yb4p1Pl5ucsn3yCTnLE8Vp39CE/0wqZXbsXTGAo+k=)
2: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: w8xPzFRUz74kcsL++i4sKCp2gMLpbIAkAjBNqyS5ZF0=)
3: 8A5AA9BAAB4111F09E531265C4F9AE02.roa (hash: 2NlCQvreffBv+sXNAkaP+vHBffUlSnZfd0yyrfrf5aI=)
4: 06E6952AAB4211F08DC86D66C4F9AE02.roa (hash: U5iX1eh/A7h/afcB70kYZU805bFcTIwmLGeaQFNS1cc=)
5: E658D57AAB4111F09E35ED65C4F9AE02.roa (hash: oOJyuxXfX3imbXltRS3IeTJJR7sYKvHpEuMTz6A1stI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999 (0x7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Validity
Not Before: Aug 18 21:51:46 2026 GMT
Not After : Aug 25 21:51:46 2026 GMT
Subject: CN=6a84d3f2-8073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:a0:fc:6f:92:44:77:c5:96:a3:b9:4d:5b:
4a:6d:9b:e8:28:02:24:b5:79:7d:b6:cb:70:52:d3:
a4:9d:37:39:4a:05:76:8f:36:64:02:cb:3b:54:97:
9f:74:c6:90:b2:ba:44:06:88:7b:30:b4:66:96:a2:
75:6d:8b:e8:3e:54:2a:c9:b3:0d:91:ac:8f:7f:54:
57:a9:9b:c9:a1:62:af:16:93:6d:a3:28:0a:93:f1:
ef:5d:0b:b4:97:5f:c8:5b:ec:39:13:2a:e3:7c:91:
74:4c:82:b8:53:49:e7:0c:76:ec:53:96:5d:20:ae:
72:fb:41:47:9d:7b:d8:20:bc:78:da:88:00:ce:94:
05:21:df:aa:4d:62:d5:02:ca:07:3c:28:41:c2:5c:
06:3a:c3:51:2b:d4:50:40:29:e0:16:2d:30:81:16:
2f:d8:ae:b0:aa:80:c1:f3:17:27:2b:67:f7:a1:13:
78:f6:cc:c6:a6:07:1a:26:86:c8:89:a4:38:46:fd:
5f:91:c2:fd:4a:e8:eb:ac:99:5c:c5:05:2f:fc:54:
bf:56:fa:b7:05:92:fa:60:e5:87:34:a7:b0:39:b0:
f7:40:f4:dd:19:ca:a0:30:ab:3d:b1:ad:1f:8d:d6:
20:4d:2a:fa:0d:b1:d5:ed:bf:86:ce:48:a5:75:5d:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4D:CF:DD:59:22:E8:71:2B:C9:64:FB:8E:69:FC:FC:86:B0:C0:10
X509v3 Authority Key Identifier:
keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:7e:dd:47:7f:a4:54:56:dc:df:21:0b:a2:d5:a7:d4:52:1d:
c1:d8:a3:e5:55:55:78:54:fb:29:31:e0:e2:b9:46:12:21:05:
d9:5d:05:3f:b2:82:7a:9a:32:7f:f0:10:82:82:46:d5:bb:7f:
99:bc:ec:71:8d:53:12:9a:f6:0e:5e:1c:b5:48:12:fc:b3:af:
76:0a:b0:77:dc:24:ef:02:14:86:2d:36:f1:9e:11:2d:63:5e:
43:23:7f:c6:c8:97:3b:94:41:6a:74:d4:a7:c2:a5:a7:67:c7:
96:3a:bc:b2:83:d1:61:6a:d9:d1:a6:73:ae:47:35:3c:13:c0:
80:98:fa:e4:d7:69:39:fd:fc:b8:ea:c6:80:cc:8c:c8:06:83:
78:b9:87:94:6e:52:1d:59:84:4c:25:c0:84:42:a4:4c:c3:1d:
16:3b:b6:49:33:c2:fb:ec:e6:64:00:0c:3f:27:8c:88:88:16:
c3:0e:48:3b:26:4b:79:63:10:4d:d1:b6:fc:90:8f:db:5b:de:
78:fb:7d:4d:23:af:f8:8a:02:85:ed:21:b0:85:aa:cc:1b:c7:
2d:ab:b4:01:9f:e1:bd:f7:96:3a:05:22:2b:cb:86:50:b7:d8:
c6:64:b3:d5:29:11:b1:8e:a7:3d:9e:f9:c6:5f:89:74:96:52:
80:91:2c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:02:52 2026 by rpki-client