
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json)
Hash identifier: b8DSGndO8KXX16B0sIWfdxCRjv/OByqSdeZCfW6LM1s=
Subject key identifier: F5:85:96:F1:F8:ED:59:15:AE:C3:7F:97:E3:ED:27:68:B5:92:B9:97
Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
Certificate serial: 10AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
Manifest number: 10A2
Signing time: Mon 22 Jun 2026 17:19:40 +0000
Manifest this update: Mon 22 Jun 2026 17:19:39 +0000
Manifest next update: Mon 29 Jun 2026 17:19:39 +0000
Files and hashes: 1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: ut1gwS5pdIXV+eOQF3Ep1p52Clo9bk/vf/Lm1qE7/D0=)
2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: Ao3jfGsh9U1xkNSfRtTIAsdPf+38NYLkOVbSpZBnBWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl
rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 17:19:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4270 (0x10ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
Validity
Not Before: Jun 22 17:19:39 2026 GMT
Not After : Jun 29 17:19:39 2026 GMT
Subject: CN=6a396eab-139d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:3b:43:0f:d8:e4:30:71:af:ad:98:84:a7:
71:f4:8c:7b:bb:1c:64:46:d3:78:19:5f:ff:37:84:
f3:d0:9d:30:ba:6a:45:48:f9:91:2f:ea:2c:dd:57:
6d:bc:37:2e:a1:02:14:16:1a:2f:94:d6:a2:09:ef:
a7:ec:5b:48:fc:90:1b:6e:d7:a0:84:40:d4:20:ad:
6b:60:0c:8d:8a:30:41:da:5f:6c:56:47:c1:05:8c:
bf:6d:48:9c:bf:cf:31:0f:90:80:6a:a9:f9:a1:23:
24:f6:b9:08:44:ca:b8:5a:b7:80:6f:ca:2d:c9:90:
04:25:1b:a4:3c:c1:61:d3:51:ff:12:fc:3b:80:c2:
5c:f8:65:57:df:67:ff:74:87:6a:5c:d3:76:aa:2e:
3d:cb:27:41:e7:e3:43:8f:4a:73:71:15:c0:81:16:
ac:b3:0b:93:2d:e6:75:19:63:13:c9:c6:93:7e:0f:
25:4b:fc:11:2e:4b:4e:67:eb:4a:77:f8:5d:b3:b4:
aa:b1:7e:fd:bc:28:66:fa:d0:13:6b:38:0c:37:82:
01:bf:81:f8:4d:17:7e:e7:d0:82:a0:ad:a9:d7:11:
20:b5:a4:13:3a:1e:23:dd:d5:f1:7d:19:5a:c9:9d:
d4:89:bb:20:2b:43:b0:9d:b9:bd:9b:19:94:69:dd:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:85:96:F1:F8:ED:59:15:AE:C3:7F:97:E3:ED:27:68:B5:92:B9:97
X509v3 Authority Key Identifier:
keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:b6:ad:bf:7b:4b:b0:1c:8a:9a:0a:12:0d:32:5d:70:79:f1:
41:42:30:0f:db:9c:b4:44:4d:70:64:d3:cd:b2:e9:01:91:0a:
d1:93:43:cf:cd:6c:3f:23:2b:44:b6:68:38:25:b5:e7:1a:22:
6c:20:08:de:de:21:1e:76:79:b1:25:43:d8:5e:21:b4:53:4e:
18:7c:42:28:fc:e8:a0:3d:bd:66:fb:38:c7:68:43:20:93:06:
82:62:2f:cf:88:8f:43:a8:9f:fc:67:6f:70:7d:15:83:6d:13:
4b:60:5b:58:6b:ce:fe:39:dc:8a:88:3a:f4:e2:e0:04:c2:86:
01:57:e8:77:db:53:ac:07:32:c3:ba:4b:75:70:32:de:3f:3c:
14:05:eb:89:64:ee:c6:f8:58:c1:c4:9c:d4:95:93:9c:bb:5b:
e1:ac:c0:fd:3b:cf:cf:9c:40:79:54:aa:9b:df:9b:4d:d8:38:
94:a2:aa:bf:eb:58:70:be:45:98:24:ae:01:cf:9e:1e:e0:c2:
75:44:90:b4:a5:ef:9f:5b:b7:5c:5f:c0:82:2a:39:c1:71:82:
66:d9:4f:c7:ec:39:b4:83:52:1f:e8:bc:1c:fe:eb:b7:ce:d5:
15:88:59:14:f6:79:5b:9e:c7:d5:3e:af:fb:24:80:b3:a9:01:
25:87:62:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:58 2026 by rpki-client