
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft
File: _hniRte_DjbyHipWt8mvtJ1Z1tQ.mft (raw, json)
Hash identifier: h0r4R9kYDzY0yK+ArHY+uRe83byq06H/h1VDe7pU9Xo=
Subject key identifier: E3:68:02:99:BE:B6:40:52:EB:7D:9C:0F:BC:DD:9F:F1:E4:95:E4:62
Authority key identifier: FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4
Certificate issuer: /CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4
Certificate serial: 04D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft
Manifest number: 04CD
Signing time: Sat 04 Apr 2026 23:39:26 +0000
Manifest this update: Sat 04 Apr 2026 23:39:25 +0000
Manifest next update: Sat 11 Apr 2026 23:39:25 +0000
Files and hashes: 1: _hniRte_DjbyHipWt8mvtJ1Z1tQ.crl (hash: E7h/uVnNbmTv5SngEQ9MivarvFfVGtWRNlxaLQ0Qmd0=)
2: 5DB5AFEE635C11ECB7C65C23C4F9AE02.roa (hash: YYtRF1n214A/jogYTeW/d4vTTDsRQg650s9T/ZVBTMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl
rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1236 (0x4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F30C0, serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4
Validity
Not Before: Apr 4 23:39:25 2026 GMT
Not After : Apr 11 23:39:25 2026 GMT
Subject: CN=69d1a12e-eccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5b:95:f4:ce:3f:76:a1:c3:01:7a:0e:12:6a:
e9:86:94:c6:90:9c:d9:f7:42:7c:1b:25:03:69:28:
f8:73:fe:89:4e:e9:d3:d3:07:fe:a4:e5:27:bf:37:
44:b7:6c:b7:71:08:32:b3:a6:3e:a0:21:f4:bd:75:
db:ec:d9:dc:0f:6a:22:25:47:29:a5:fb:77:62:98:
dd:c6:d0:24:cb:c3:b1:00:12:d6:31:b0:19:f5:c3:
59:a2:d0:fe:cc:0f:96:f5:a8:13:00:20:aa:09:14:
1e:a2:ed:b5:4a:0e:38:ce:1e:37:19:c0:bd:a5:81:
72:83:03:ff:7b:67:34:c7:4a:75:00:57:ab:d0:14:
07:d0:6b:04:c3:f5:f1:20:9d:45:cc:d3:3d:80:71:
b1:3e:9b:01:4d:ac:8d:78:59:6a:ab:90:00:45:e1:
31:4e:72:41:08:db:2a:6a:a9:1c:4f:b8:47:e4:20:
80:76:8c:77:69:02:a8:2f:20:ed:d0:b8:2e:c8:bc:
55:93:8e:c6:17:43:fb:fb:fb:5a:26:64:02:99:ae:
3f:43:b6:28:6c:d1:3f:56:05:7b:9e:52:cb:ff:89:
8c:19:a1:90:41:9f:3f:5c:56:53:3b:22:fa:dd:42:
8b:b0:57:a9:82:4a:37:b3:71:5a:79:9f:99:b2:9c:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:68:02:99:BE:B6:40:52:EB:7D:9C:0F:BC:DD:9F:F1:E4:95:E4:62
X509v3 Authority Key Identifier:
keyid:FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ab:ef:60:9c:98:15:23:0e:18:c7:cc:96:4f:a9:fa:83:6f:
27:5d:69:6e:4d:e0:b9:72:79:79:60:5b:6e:c2:95:5f:ee:6c:
82:56:50:b7:86:0e:d7:43:40:26:83:94:cc:6c:c0:8e:b7:55:
e2:8e:50:46:75:68:d0:31:8e:f7:e5:42:fe:20:3e:d6:d2:31:
c4:bc:e0:69:6e:88:e3:f1:95:f3:06:98:74:41:be:4f:79:a2:
89:4f:cb:b9:0e:b9:ba:ea:84:71:f4:40:e7:85:07:63:ed:a7:
06:e6:b7:af:32:7a:26:c1:b7:00:55:10:14:4c:f1:74:70:a5:
9e:17:bd:08:d5:0d:b5:50:b3:ad:16:a5:3b:76:6f:6f:e3:51:
72:74:21:c8:a0:9e:e1:e9:15:b3:31:16:3f:d4:70:3a:04:d2:
68:ee:ed:4f:c5:94:6d:ea:5e:59:09:72:dd:77:61:0a:75:97:
1a:7e:70:14:3f:7e:8d:d2:de:d9:33:dc:08:e9:d8:ee:25:64:
60:e0:14:9b:ba:06:77:ed:2c:f9:8d:51:92:7b:cc:9b:13:49:
bc:f4:7b:b5:0c:b3:9c:47:09:6b:96:d6:a4:7d:87:05:36:91:
f6:17:44:68:ca:e5:b3:8b:3f:f1:0c:e9:43:24:e4:21:06:ab:
35:21:86:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:05 2026 by rpki-client