
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft
File: HretI1L3xupKYveEzl-7EW3ybsI.mft (raw, json)
Hash identifier: 5i6B9nhmNLGXwDegpLOJDZrlxTG28FfzYlgQgsq9feU=
Subject key identifier: 6A:A2:BC:BF:1D:2D:BA:EB:0C:A2:F7:87:18:B6:73:A6:B2:92:96:3D
Authority key identifier: 1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2
Certificate issuer: /CN=A91EF24F/serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2
Certificate serial: 08DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft
Manifest number: 08C0
Signing time: Fri 04 Sep 2026 20:31:52 +0000
Manifest this update: Fri 04 Sep 2026 20:31:51 +0000
Manifest next update: Fri 11 Sep 2026 20:31:51 +0000
Files and hashes: 1: HretI1L3xupKYveEzl-7EW3ybsI.crl (hash: Ep25llVi1YqzPN4f6woTtQY1C1bcUunlWbH3iC44K4w=)
2: 84B96CA6904111EF8D11A381C4F9AE02.roa (hash: 08lz7b6szSEMQO1jrd2yTTyJym47lMNxqFGZhqAfyUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl
rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2270 (0x8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF24F, serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2
Validity
Not Before: Sep 4 20:31:51 2026 GMT
Not After : Sep 11 20:31:51 2026 GMT
Subject: CN=6a9b2ab7-0fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:39:d0:97:11:3d:0a:c6:e5:c3:1d:c9:7e:
f9:36:24:c2:21:7a:77:df:ca:46:69:c7:65:0f:91:
b6:84:57:c7:b7:d3:a8:49:63:e4:a8:f9:9c:6e:89:
1c:b5:de:51:2b:ee:50:bc:7f:c6:ba:e9:2f:5b:11:
68:58:5d:4d:33:89:2b:b8:6c:1d:c2:cf:ee:e4:04:
d5:15:94:ae:a0:a3:44:d4:f1:1b:d2:62:a7:87:33:
e6:19:fe:c8:32:87:5c:cf:cc:fe:52:12:67:c9:6a:
46:48:87:c6:8a:54:06:38:da:70:c9:71:7f:06:63:
74:62:0e:71:ae:63:be:18:f5:26:78:c2:55:cb:0a:
e6:41:51:5d:80:c2:e9:6a:60:c7:78:8e:f9:4f:fa:
7f:aa:98:9e:1d:3d:6c:a8:1b:aa:ba:59:dd:3d:a3:
33:40:52:81:78:e4:ed:e1:2f:85:8e:13:29:66:ca:
d6:f5:1b:b5:88:6a:1d:b6:0d:f6:d4:d9:4d:67:f3:
2a:84:5b:0b:ab:ea:b2:6f:40:c1:d2:05:0a:5c:ee:
9d:ac:1a:db:21:62:d2:4c:ee:f1:03:39:5d:68:1b:
dc:ed:6d:36:16:97:13:44:47:aa:1b:a2:31:3f:52:
d1:e5:9b:69:3c:ef:83:a8:f0:d2:5c:49:46:d7:d5:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A2:BC:BF:1D:2D:BA:EB:0C:A2:F7:87:18:B6:73:A6:B2:92:96:3D
X509v3 Authority Key Identifier:
keyid:1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:76:42:07:a6:e1:3b:ec:59:a5:e2:3b:2c:fa:5d:f9:16:76:
54:d1:62:65:0b:c4:ae:06:f9:11:2a:e7:fb:99:ee:21:7d:39:
07:d1:bf:e6:e0:05:87:a4:65:29:85:cf:4c:b9:11:37:b1:de:
97:c5:44:e8:d3:39:81:66:ac:5b:6d:ed:e3:0d:43:40:19:6d:
ae:3c:87:1e:41:7f:15:a7:2c:43:0b:f5:25:db:86:32:51:94:
d3:f5:88:51:1b:a9:c6:c6:9d:88:49:8e:f5:9e:27:9a:bd:41:
d1:fc:df:1b:91:79:c9:d5:84:2c:21:1e:ea:09:5a:89:c1:f4:
38:f4:20:49:62:f5:36:25:47:71:bb:16:82:9f:83:53:1a:40:
c1:be:cd:5f:f0:d7:78:08:f7:fb:f0:db:65:76:8d:2d:3e:66:
c1:a3:1e:a9:fe:41:d1:e9:ad:fd:f7:e7:f1:42:24:8b:c6:c3:
af:58:b7:3b:95:88:ab:6a:2c:09:57:27:fb:9b:cd:28:e6:30:
41:84:cf:e9:c0:c9:62:00:6a:91:70:67:a8:10:18:4a:91:0c:
73:0d:8a:71:60:c7:87:d8:7c:f1:49:cc:fb:be:6f:36:90:e6:
03:a8:61:ee:37:b4:90:be:03:20:e1:2d:14:ea:95:d8:f0:05:
2e:99:6a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:22:47 2026 by rpki-client