
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
File: HpsNFjzgqhHpHVVg9aPMZp4yke8.mft (raw, json)
Hash identifier: Mtgk8/tRJpjoi4xqLfqe1TNkQvW41s/IvXHgFva8MyA=
Subject key identifier: D7:4B:F2:68:D2:57:3D:06:92:D5:8B:1D:8E:83:B4:86:B5:36:51:16
Authority key identifier: 1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF
Certificate issuer: /CN=A91F0578/serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
Manifest number: 0146
Signing time: Sun 27 Sep 2026 05:53:34 +0000
Manifest this update: Sun 27 Sep 2026 05:53:34 +0000
Manifest next update: Sun 04 Oct 2026 05:53:34 +0000
Files and hashes: 1: HpsNFjzgqhHpHVVg9aPMZp4yke8.crl (hash: KNV+3rf7zUzIilB8bOgmkhtcitU3PQXPhhXxaA/PZ7I=)
2: T1sCJNac9MZ8hYnogflo_49meCM.asa (hash: 8YCyfGEChZt1LMFooT/d1It47P/Pz1tYx3vhrbLIbWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl
rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0578, serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF
Validity
Not Before: Sep 27 05:53:34 2026 GMT
Not After : Oct 4 05:53:34 2026 GMT
Subject: CN=6ab8af5e-fa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:fe:ff:fd:97:e5:cc:bc:79:bb:82:e9:ec:
9b:16:a4:54:ce:d7:8b:61:d3:9c:09:4f:81:2e:36:
ff:2f:49:bd:3f:5f:3e:41:c0:ed:e8:55:98:d2:f0:
c8:d7:56:3f:90:da:ea:1a:95:65:31:00:40:4c:ed:
41:8e:bd:48:4c:7b:fa:3e:0f:b7:de:80:70:b1:a2:
26:e2:cc:39:a7:9f:49:0c:e3:2e:d1:40:28:61:9f:
b8:55:ce:4e:9b:24:b0:48:6c:f3:a7:93:32:eb:52:
f5:9b:22:87:00:43:59:5d:f5:ed:5a:44:76:32:b1:
5f:9c:01:ff:34:07:c4:89:cc:73:a2:7a:fe:63:5a:
52:b6:7e:9c:c4:2b:1a:6c:c1:70:6f:ed:57:e2:4e:
41:e4:46:0b:fa:28:3e:53:a8:c6:bc:68:66:e5:f6:
c2:dc:d6:d5:7e:fa:b9:88:c7:c8:d0:b6:07:70:d2:
d4:94:38:cd:ad:44:98:be:a0:a1:62:7c:25:e8:9e:
96:60:41:58:86:fa:e4:23:a3:46:7a:c5:23:65:9d:
fe:c1:20:f0:77:6f:e2:c8:5a:6a:ca:ce:89:91:fc:
ff:0d:97:60:fe:23:10:59:f4:27:bc:f9:82:5d:1b:
fa:73:e7:91:88:b2:1c:75:dc:f6:e5:fd:59:c4:b1:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4B:F2:68:D2:57:3D:06:92:D5:8B:1D:8E:83:B4:86:B5:36:51:16
X509v3 Authority Key Identifier:
keyid:1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:3f:8a:85:d8:32:19:6a:2d:a0:a3:d9:cd:09:29:68:0f:0d:
db:ad:0f:f8:80:3e:84:81:2b:3b:0b:e7:8c:e4:cc:ef:49:1b:
99:44:c4:a1:90:d9:2f:df:60:b6:8f:2d:1c:68:35:2d:36:1e:
10:e9:fb:1b:a0:69:24:32:5b:36:fb:af:66:8e:d0:00:1f:a3:
f7:25:d2:92:1c:23:53:51:98:a5:7e:05:dc:da:41:74:05:39:
f8:c8:85:e4:89:08:ec:71:95:2e:9e:5e:2f:28:be:28:7c:84:
8d:7a:d2:72:c9:e3:02:15:69:b2:47:a6:9a:fa:a0:4d:c0:73:
35:2a:37:d3:e5:c8:ff:3f:f0:dc:6e:34:85:0f:4f:ae:21:fe:
d5:34:6d:f0:04:c8:2c:1d:84:3c:e6:62:97:51:83:85:ae:0e:
65:5e:90:c9:78:d8:e3:fd:a6:4c:69:d1:7f:b3:d7:21:76:7c:
8c:52:af:22:1c:f5:6c:3f:83:3b:a3:07:7a:25:5f:d5:b9:0c:
73:15:81:35:60:f8:c8:65:b2:6b:45:33:29:da:6a:fd:d0:ed:
55:7f:1a:8a:16:da:55:8e:58:67:47:34:17:34:29:5d:bc:b2:
f1:e2:0c:40:5c:5b:3e:4a:46:09:0c:26:7d:74:98:a5:5f:38:
7d:e8:61:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA1NzgxMTAvBgNVBAUTKDFFOUIwRDE2M0NFMEFBMTFFOTFENTU2MEY1QTNDQzY2
OUUzMjkxRUYwHhcNMjYwOTI3MDU1MzM0WhcNMjYxMDA0MDU1MzM0WjAYMRYwFAYD
VQQDEw02YWI4YWY1ZS1mYTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxTH+//2X5cy8ebuC6eybFqRUzteLYdOcCU+BLjb/L0m9P18+QcDt6FWY0vDI
11Y/kNrqGpVlMQBATO1Bjr1ITHv6Pg+33oBwsaIm4sw5p59JDOMu0UAoYZ+4Vc5O
mySwSGzzp5My61L1myKHAENZXfXtWkR2MrFfnAH/NAfEicxzonr+Y1pStn6cxCsa
bMFwb+1X4k5B5EYL+ig+U6jGvGhm5fbC3NbVfvq5iMfI0LYHcNLUlDjNrUSYvqCh
Ynwl6J6WYEFYhvrkI6NGesUjZZ3+wSDwd2/iyFpqys6Jkfz/DZdg/iMQWfQnvPmC
XRv6c+eRiLIcddz25f1ZxLGDGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdL8mjS
Vz0GktWLHY6DtIa1NlEWMB8GA1UdIwQYMBaAFB6bDRY84KoR6R1VYPWjzGaeMpHv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDU3OC8wOTUzMEE4Q0NG
M0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IcHNORmp6Z3FoSHBIVlZnOWFQTVpwNHlr
ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hwc05GanpncWhIcEhWVmc5YVBNWnA0eWtlOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDU3OC8wOTUzMEE4Q0NGM0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IcHNORmp6Z3Fo
SHBIVlZnOWFQTVpwNHlrZTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAND+KhdgyGWotoKPZzQkpaA8N260P+IA+hIErOwvnjOTM70kbmUTEoZDZL99g
to8tHGg1LTYeEOn7G6BpJDJbNvuvZo7QAB+j9yXSkhwjU1GYpX4F3NpBdAU5+MiF
5IkI7HGVLp5eLyi+KHyEjXrScsnjAhVpskemmvqgTcBzNSo30+XI/z/w3G40hQ9P
riH+1TRt8ATILB2EPOZil1GDha4OZV6QyXjY4/2mTGnRf7PXIXZ8jFKvIhz1bD+D
O6MHeiVf1bkMcxWBNWD4yGWya0UzKdpq/dDtVX8aihbaVY5YZ0c0FzQpXbyy8eIM
QFxbPkpGCQwmfXSYpV84fehhIg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 16:22:04 2026 by rpki-client