
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json)
Hash identifier: yD7s0azmfsxB/oYU/Gq2NAIYyONGMk1WU6oosL6Q5F8=
Subject key identifier: C2:24:67:15:8C:DE:5E:67:27:A9:F3:8F:11:21:85:14:6E:6A:66:F5
Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31
Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
Manifest number: 0181
Signing time: Tue 23 Jun 2026 04:41:24 +0000
Manifest this update: Tue 23 Jun 2026 04:41:24 +0000
Manifest next update: Tue 30 Jun 2026 04:41:24 +0000
Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: TYqzTB6bbnFmH/VvwoZHcXZwSkaezmPxZMAzoc+PBwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl
rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 04:41:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931
Validity
Not Before: Jun 23 04:41:24 2026 GMT
Not After : Jun 30 04:41:24 2026 GMT
Subject: CN=6a3a0e74-5fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:00:e8:7b:99:08:d2:11:50:c7:72:e3:94:
3e:3c:4d:9c:d8:ba:5f:2f:c2:9b:2d:f3:bd:1b:bb:
d4:db:a3:c4:f3:2a:75:c7:df:27:db:10:99:75:7a:
c0:6f:7d:fc:6f:10:45:b6:a8:6b:d7:02:9d:0f:f1:
0b:a8:85:22:6d:ed:9a:74:9a:ac:c8:0b:6a:95:e5:
39:77:02:d1:89:01:74:d7:91:f7:92:cc:4a:5f:67:
02:3d:ca:be:93:70:b7:53:00:39:cd:f1:3a:51:9b:
66:53:4b:d7:05:7c:24:32:cb:8c:09:a6:08:1c:e3:
12:6a:94:69:fc:85:93:e5:6a:d4:01:75:b1:06:3b:
5a:6b:aa:45:d3:7f:81:e0:16:38:7a:cc:04:7b:17:
67:d5:0d:2e:df:fe:04:7a:a6:8c:de:61:f2:94:ec:
df:59:ae:70:32:c3:1f:8a:33:54:d4:01:06:2c:90:
b5:ba:bc:7e:fa:ff:0a:6d:8a:ba:69:36:58:70:38:
cf:59:b8:cc:10:42:cc:d9:3f:77:1b:3f:b6:e3:32:
7f:69:55:1e:fc:cd:71:5b:40:86:d5:63:96:95:0d:
08:80:8e:8a:e8:86:ea:0a:e5:41:74:b7:6d:e6:57:
0d:9c:ea:c1:e4:14:f4:03:75:d3:5e:e4:e4:c9:1c:
80:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:24:67:15:8C:DE:5E:67:27:A9:F3:8F:11:21:85:14:6E:6A:66:F5
X509v3 Authority Key Identifier:
keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6f:fa:25:bf:bb:a8:a7:81:eb:b1:b8:ac:ea:f5:4b:be:d4:
ab:d1:9a:6a:e8:42:f8:87:9a:08:5e:7c:23:11:52:6f:a6:a4:
26:c3:04:2e:39:2e:03:8a:50:44:9d:6d:c6:71:cf:fb:b8:7c:
61:ec:95:97:bf:a8:48:d8:cd:e6:c4:a1:51:33:b0:25:60:a6:
32:b1:1c:9c:92:6d:78:fa:a2:1a:c0:01:96:45:ea:e2:cd:b6:
01:60:6f:77:40:98:aa:d7:ba:36:92:c5:b1:d4:da:f1:15:8b:
34:f8:ad:fc:16:c8:26:ce:41:1e:a8:a1:f1:e8:3a:98:d7:37:
76:25:f0:48:01:80:35:e8:92:7e:e6:69:35:25:38:ba:fa:d5:
b5:3c:39:65:0c:e1:f6:08:49:e9:9a:27:b6:4e:e5:c4:fb:61:
8a:c2:2b:fd:61:65:d8:6b:ee:f0:79:3b:db:ff:03:b5:a6:16:
75:da:0c:4d:f2:ec:ed:5a:57:ab:f5:fe:09:09:e0:d9:d6:05:
f2:52:58:f7:e1:8d:96:4e:bd:48:22:0e:ed:8e:4b:12:11:27:
e4:73:80:03:e5:62:85:b5:b1:66:ac:dc:61:af:f3:f9:a5:9a:
1a:9d:8d:68:2e:6a:de:d6:81:e6:98:25:39:29:1f:29:4c:68:
3e:d5:cd:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQwOTExMTAvBgNVBAUTKDg0NTlGQjcyOTBENzRBOUJDRTI2MEUzRkFCNjA1RDdG
RDgzMjQ5MzEwHhcNMjYwNjIzMDQ0MTI0WhcNMjYwNjMwMDQ0MTI0WjAYMRYwFAYD
VQQDEw02YTNhMGU3NC01ZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyeUA6HuZCNIRUMdy45Q+PE2c2LpfL8KbLfO9G7vU26PE8yp1x98n2xCZdXrA
b338bxBFtqhr1wKdD/ELqIUibe2adJqsyAtqleU5dwLRiQF015H3ksxKX2cCPcq+
k3C3UwA5zfE6UZtmU0vXBXwkMsuMCaYIHOMSapRp/IWT5WrUAXWxBjtaa6pF03+B
4BY4eswEexdn1Q0u3/4EeqaM3mHylOzfWa5wMsMfijNU1AEGLJC1urx++v8KbYq6
aTZYcDjPWbjMEELM2T93Gz+24zJ/aVUe/M1xW0CG1WOWlQ0IgI6K6IbqCuVBdLdt
5lcNnOrB5BT0A3XTXuTkyRyAJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMIkZxWM
3l5nJ6nzjxEhhRRuamb1MB8GA1UdIwQYMBaAFIRZ+3KQ10qbziYOP6tgXX/YMkkx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS82NTIxQTBGMDFE
OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNwdk9KZzRfcTJCZGY5Z3lT
VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNURS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDA5MS82NTIxQTBGMDFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNw
dk9KZzRfcTJCZGY5Z3lTVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsm/6Jb+7qKeB67G4rOr1S77Uq9GaauhC+IeaCF58IxFSb6akJsMELjkuA4pQ
RJ1txnHP+7h8YeyVl7+oSNjN5sShUTOwJWCmMrEcnJJtePqiGsABlkXq4s22AWBv
d0CYqte6NpLFsdTa8RWLNPit/BbIJs5BHqih8eg6mNc3diXwSAGANeiSfuZpNSU4
uvrVtTw5ZQzh9ghJ6Zontk7lxPthisIr/WFl2Gvu8Hk72/8DtaYWddoMTfLs7VpX
q/X+CQng2dYF8lJY9+GNlk69SCIO7Y5LEhEn5HOAA+VihbWxZqzcYa/z+aWaGp2N
aC5q3taB5pglOSkfKUxoPtXNBg==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:46 2026 by rpki-client