
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
File: HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft (raw, json)
Hash identifier: VrI/gud5GMF4GomzccofaXPA+P1P4v6UL7KgfnwM/XI=
Subject key identifier: 6E:A5:A4:33:5E:A1:37:F0:46:47:A7:98:7F:53:70:9F:6D:42:10:F6
Authority key identifier: 1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66
Certificate issuer: /CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
Certificate serial: 3546
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
Manifest number: 3538
Signing time: Sat 04 Apr 2026 14:54:20 +0000
Manifest this update: Sat 04 Apr 2026 14:54:19 +0000
Manifest next update: Sat 11 Apr 2026 14:54:19 +0000
Files and hashes: 1: HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl (hash: DmMxsS/OzXBsh5mrZQpsJyL59I87odDoK4hHXX6nkvs=)
2: 08FA1EC60C0911EDBDF8C44FC4F9AE02.roa (hash: Uji+jzs6NFG4wqDWKqkDcEMRN/9KSog3h0uKrHTnUXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl
rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13638 (0x3546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2CA8, serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
Validity
Not Before: Apr 4 14:54:19 2026 GMT
Not After : Apr 11 14:54:19 2026 GMT
Subject: CN=69d1261c-595b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:25:4e:9b:1b:9f:6e:ad:6d:63:12:c2:17:
5d:e5:ef:80:c4:79:7e:4a:31:e9:e2:4d:de:bd:2a:
9e:6b:9c:90:dd:ef:06:51:a3:02:33:13:b1:7d:8d:
69:f3:7e:8a:15:e6:c5:cf:ac:57:c7:d1:b6:64:8d:
15:66:af:5b:a4:e1:59:6e:43:ff:da:43:8b:97:e4:
12:1c:77:17:4a:b7:56:ec:85:6e:84:15:dd:5b:cb:
8e:ea:ce:6d:f6:77:f7:a6:9b:a0:89:02:7e:8c:e2:
fd:1a:2f:17:92:56:fe:32:c9:03:10:71:80:98:47:
bc:86:80:87:de:db:6d:8b:2f:a4:6f:7c:56:64:b0:
c3:62:87:5f:3d:84:3b:b1:92:09:ad:3b:b0:45:04:
9c:5c:c1:f7:39:95:3e:5d:d5:73:f0:61:17:f5:71:
1f:67:e9:68:bf:44:c5:71:33:15:04:3a:9c:4b:df:
1b:cc:d7:fd:15:a4:a7:5d:26:42:11:25:e6:9d:08:
95:60:1e:a0:45:24:9d:48:24:77:7d:27:36:78:e2:
ac:f6:07:06:3a:fa:b5:0f:33:54:c0:0d:4e:74:23:
b6:6b:58:3d:d2:5e:63:65:7a:28:52:80:af:05:f2:
df:15:0e:3f:a9:e4:09:d9:c8:3e:bb:87:93:a3:76:
c1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A5:A4:33:5E:A1:37:F0:46:47:A7:98:7F:53:70:9F:6D:42:10:F6
X509v3 Authority Key Identifier:
keyid:1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:57:2d:68:52:11:8b:32:be:1a:09:0a:18:5b:2e:61:d4:ac:
f8:f3:26:b4:26:cf:8b:bb:3c:c2:d7:39:e4:71:ed:86:7e:ab:
0a:26:f5:26:6d:4c:59:b5:42:7a:18:97:57:89:4b:58:94:de:
15:7b:51:4d:18:14:e7:ea:35:a1:ed:99:6e:b6:fb:ba:fa:55:
6c:c2:fb:62:d6:24:80:b8:d1:b9:07:ca:0e:31:11:d9:d9:4b:
42:88:d1:68:f4:d4:99:c0:ad:d4:1c:a7:4e:ea:f6:cb:14:56:
b1:9b:85:5c:13:e1:0d:f1:f4:b7:3a:92:8c:7d:6e:01:87:86:
e3:06:25:20:0f:67:4b:b4:58:2d:bb:b6:98:37:07:f5:aa:e8:
32:68:71:93:d1:bc:ca:b5:06:cb:7a:8b:44:0b:e3:37:dd:0d:
fa:8c:59:5b:d4:c7:ca:7a:18:5f:09:de:48:52:8a:27:b8:c2:
88:1b:2d:a5:a7:a9:75:f3:5d:0c:4b:65:76:92:ad:ca:a1:1e:
bd:0e:c4:c3:d6:e1:f7:be:50:cb:09:3b:82:1b:b4:38:22:56:
45:54:0e:aa:84:99:42:f7:2b:8f:67:14:b4:2c:d9:2c:93:60:
14:63:7a:9c:1d:7a:86:be:e6:1f:64:e0:e5:37:90:35:1d:64:
f7:e1:e9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:08:33 2026 by rpki-client