
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
File: HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json)
Hash identifier: eAA2oTzuzrpReMHzKk9Hpp7oOGgj3Yj0NC5bv/FcZMk=
Subject key identifier: 4E:95:8A:0A:0E:35:8A:93:3A:6C:DA:D4:5A:9C:FE:DC:96:36:B8:6B
Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6
Certificate issuer: /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
Certificate serial: 355A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
Manifest number: 355A
Signing time: Tue 12 May 2026 14:22:19 +0000
Manifest this update: Tue 12 May 2026 14:22:18 +0000
Manifest next update: Tue 19 May 2026 14:22:18 +0000
Files and hashes: 1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: oCPAEwiHs71Mnr0klpcuEn5WGU0/UN0TrtJaCEYWeyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13658 (0x355a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
Validity
Not Before: May 12 14:22:18 2026 GMT
Not After : May 19 14:22:18 2026 GMT
Subject: CN=6a03379b-5704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:14:86:36:f5:d5:00:69:9a:96:74:e2:cf:
62:6e:ba:15:f1:37:f1:b5:5b:ee:6f:26:68:0b:3e:
ce:ec:fc:cd:7b:9a:9e:2b:c5:65:d9:0e:7c:02:76:
24:ef:36:03:7d:0b:4d:e9:ce:30:31:15:df:00:76:
88:55:b6:6d:a6:ee:be:5e:31:35:de:c5:fb:d3:84:
2e:c5:98:86:4d:ad:6b:32:3f:c6:4a:34:62:94:cc:
3f:73:de:e0:0e:03:17:89:a4:a1:a7:7c:fd:86:97:
9b:cf:e2:d2:07:8c:bb:7f:13:0f:35:3b:ff:74:7e:
18:a6:6c:39:e3:8b:fa:39:4b:23:1a:23:30:58:8e:
de:32:d1:2d:32:f6:55:f5:40:fb:24:53:21:d8:27:
fd:47:a2:c5:7d:51:98:0c:4e:2f:7a:ac:42:d6:3b:
7e:97:62:de:b6:7d:11:d2:8f:cb:fb:93:3a:80:ce:
b9:5c:b3:4d:f1:d9:c0:ae:3d:69:f2:fd:0c:b3:cf:
50:ee:89:ac:27:d3:c2:f0:f0:96:fb:4e:4c:d9:92:
68:cd:f5:c4:91:dd:ca:07:d3:83:a0:ac:c1:ac:60:
54:4a:4a:99:d7:a5:e0:9f:b2:7e:da:5b:a9:3e:17:
7b:96:b2:26:18:ba:b4:1a:7b:3f:e6:a2:5e:b4:68:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:95:8A:0A:0E:35:8A:93:3A:6C:DA:D4:5A:9C:FE:DC:96:36:B8:6B
X509v3 Authority Key Identifier:
keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:bc:cb:71:cf:ff:48:23:38:3b:95:70:07:24:99:7e:a0:22:
ef:95:af:83:82:da:ba:a9:2a:a6:31:f3:8c:6f:e3:ff:2a:24:
87:b8:30:fc:77:c0:78:60:73:93:89:0a:dc:9e:4b:c0:99:e6:
a8:cc:18:79:90:87:dd:e4:14:31:21:9e:2c:6b:39:cc:17:71:
93:67:fb:3f:f0:23:77:85:6b:29:98:70:d7:ad:3c:2a:8e:32:
63:70:25:86:cb:c1:c4:6f:7c:0f:e9:17:1b:6d:61:a3:c5:42:
e0:cc:5c:e0:9a:e5:10:27:96:be:e8:56:40:8e:d0:bf:48:19:
85:23:b2:46:98:db:c2:e8:4b:c9:2d:2c:84:be:75:f0:da:74:
f5:2e:59:91:52:bf:1f:6e:af:6f:25:c5:c0:9e:b4:99:64:cb:
9c:95:2b:b8:27:03:41:4d:13:bd:1d:93:bd:1d:19:b2:8b:6d:
9b:db:8d:a8:51:d4:84:c1:09:8b:bf:08:e7:2c:ab:85:b1:15:
58:04:b4:24:c3:b9:91:a2:d7:e4:46:44:68:8a:25:92:28:2c:
e8:10:ad:1f:05:3b:7f:0f:f5:77:18:d4:9a:b1:63:10:13:6c:
19:54:18:50:87:74:00:61:37:56:e5:f5:5c:99:fb:f8:01:e2:
c7:ac:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:47 2026 by rpki-client