
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.mft
File: HimymPrXg8InXAD86GVujPdJpIk.mft (raw, json)
Hash identifier: 6luHEr9vhDkqZmAfURvPoxfYQsrpmRHJ21nSZ3r1WkE=
Subject key identifier: 23:98:0C:C5:43:C9:7A:75:07:AB:A7:BC:4C:10:FA:DC:5D:98:14:ED
Authority key identifier: 1E:29:B2:98:FA:D7:83:C2:27:5C:00:FC:E8:65:6E:8C:F7:49:A4:89
Certificate issuer: /CN=A91598F6/serialNumber=1E29B298FAD783C2275C00FCE8656E8CF749A489
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HimymPrXg8InXAD86GVujPdJpIk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.mft
Manifest number: 09
Signing time: Wed 23 Sep 2026 08:58:04 +0000
Manifest this update: Wed 23 Sep 2026 08:58:04 +0000
Manifest next update: Wed 30 Sep 2026 08:58:04 +0000
Files and hashes: 1: HimymPrXg8InXAD86GVujPdJpIk.crl (hash: GU1W+aeG48G+OyqeY04kvToW0BWN5BsstvRI6owOffw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.crl
rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HimymPrXg8InXAD86GVujPdJpIk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91598F6, serialNumber=1E29B298FAD783C2275C00FCE8656E8CF749A489
Validity
Not Before: Sep 23 08:58:04 2026 GMT
Not After : Sep 30 08:58:04 2026 GMT
Subject: CN=6ab3949c-d909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:bb:c2:a3:ed:6a:33:73:30:63:fb:2b:bd:
af:3c:c4:92:eb:be:40:30:97:61:24:de:64:8d:00:
6d:06:ed:d1:74:c3:6b:d7:ae:9f:9f:48:3c:e0:94:
e4:d5:dd:a1:f7:06:d5:aa:28:61:00:b5:c5:4c:11:
54:7a:21:e4:bc:8e:72:44:67:99:b5:77:14:6a:d3:
77:d4:b7:13:78:2c:f1:d5:91:fa:e2:81:97:4a:98:
4b:00:05:b2:93:de:07:b9:11:a1:55:0e:cc:71:7e:
f6:3e:02:78:77:e5:fe:2c:8b:79:8b:36:0a:0b:dd:
4e:f0:58:60:50:40:c4:8d:6d:b8:71:40:32:b6:20:
77:3c:c8:31:74:55:05:17:99:90:42:b5:0d:4d:d6:
a0:b3:47:fc:ef:20:de:69:71:4b:1d:3c:1d:b1:81:
cb:fb:cd:05:6c:81:36:27:99:08:fe:81:b9:da:dd:
fe:15:62:b9:42:c0:79:7e:a4:7f:cc:45:b1:98:36:
33:88:ea:61:75:48:a6:70:3f:4b:c9:e7:a2:0e:e1:
6c:ac:3e:25:f9:ae:33:68:f4:8c:bc:31:e6:c7:8a:
ae:84:4f:6b:b9:bc:8e:fe:a2:f4:43:2e:d3:fe:39:
75:ba:6e:80:8b:38:e2:1e:00:e8:70:11:74:a4:3e:
d1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:98:0C:C5:43:C9:7A:75:07:AB:A7:BC:4C:10:FA:DC:5D:98:14:ED
X509v3 Authority Key Identifier:
keyid:1E:29:B2:98:FA:D7:83:C2:27:5C:00:FC:E8:65:6E:8C:F7:49:A4:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HimymPrXg8InXAD86GVujPdJpIk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b5:90:77:3a:54:45:00:0a:c8:92:a1:44:0c:ae:09:cb:0e:
ca:2f:00:09:2d:f0:48:65:4e:08:38:c2:1c:fc:27:67:8f:b0:
a9:8a:f7:e8:98:c9:5a:91:32:35:6c:00:f6:9b:3c:ec:28:79:
23:23:01:2e:84:66:86:a0:f9:da:9e:76:90:21:ad:67:71:33:
b8:b3:ba:ce:ef:a5:3c:07:58:f4:71:cf:64:44:09:72:cc:ce:
9f:6c:63:ee:c2:c0:5e:48:a1:e8:61:b1:1b:a2:3a:fb:61:89:
80:ad:ad:2c:a4:44:dd:c5:a0:ee:c3:6b:fc:ff:db:fe:fa:0a:
3e:c6:f2:ed:14:c1:3c:75:99:ab:b9:0d:34:cb:f4:25:a7:99:
de:67:d8:c7:60:c3:a8:45:dd:4c:dd:b5:cc:75:83:a9:0e:59:
ff:81:55:07:76:68:8c:71:30:93:d8:b9:33:6c:22:e8:0e:79:
2e:93:03:08:f1:07:d3:74:f2:ae:77:7b:b1:f6:ff:c0:a1:34:
c0:ce:ac:1f:40:07:d6:b0:ab:8f:4d:09:01:0c:d1:20:b9:d0:
3a:8a:7c:dc:4d:e3:5f:e7:82:1d:13:5d:ee:6f:aa:57:0b:29:
ee:1e:65:39:07:64:32:ef:ca:be:2d:0c:90:ff:f8:18:74:e9:
55:91:0f:d5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
OThGNjExMC8GA1UEBRMoMUUyOUIyOThGQUQ3ODNDMjI3NUMwMEZDRTg2NTZFOENG
NzQ5QTQ4OTAeFw0yNjA5MjMwODU4MDRaFw0yNjA5MzAwODU4MDRaMBgxFjAUBgNV
BAMTDTZhYjM5NDljLWQ5MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8Q7vCo+1qM3MwY/srva88xJLrvkAwl2Ek3mSNAG0G7dF0w2vXrp+fSDzglOTV
3aH3BtWqKGEAtcVMEVR6IeS8jnJEZ5m1dxRq03fUtxN4LPHVkfrigZdKmEsABbKT
3ge5EaFVDsxxfvY+Anh35f4si3mLNgoL3U7wWGBQQMSNbbhxQDK2IHc8yDF0VQUX
mZBCtQ1N1qCzR/zvIN5pcUsdPB2xgcv7zQVsgTYnmQj+gbna3f4VYrlCwHl+pH/M
RbGYNjOI6mF1SKZwP0vJ56IO4WysPiX5rjNo9Iy8MebHiq6ET2u5vI7+ovRDLtP+
OXW6boCLOOIeAOhwEXSkPtGHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUI5gMxUPJ
enUHq6e8TBD63F2YFO0wHwYDVR0jBBgwFoAUHimymPrXg8InXAD86GVujPdJpIkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5OEY2L0NFODYwNEFFQUQw
MjExRjE5OTBEOTE5NzM5MTFGOTcwL0hpbXltUHJYZzhJblhBRDg2R1Z1alBkSnBJ
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSGlteW1QclhnOEluWEFEODZHVnVqUGRKcElrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5
OEY2L0NFODYwNEFFQUQwMjExRjE5OTBEOTE5NzM5MTFGOTcwL0hpbXltUHJYZzhJ
blhBRDg2R1Z1alBkSnBJay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAMtZB3OlRFAArIkqFEDK4Jyw7KLwAJLfBIZU4IOMIc/Cdnj7CpivfomMlakTI1
bAD2mzzsKHkjIwEuhGaGoPnannaQIa1ncTO4s7rO76U8B1j0cc9kRAlyzM6fbGPu
wsBeSKHoYbEbojr7YYmAra0spETdxaDuw2v8/9v++go+xvLtFME8dZmruQ00y/Ql
p5neZ9jHYMOoRd1M3bXMdYOpDln/gVUHdmiMcTCT2LkzbCLoDnkukwMI8QfTdPKu
d3ux9v/AoTTAzqwfQAfWsKuPTQkBDNEgudA6inzcTeNf54IdE13ub6pXCynuHmU5
B2Qy78q+LQyQ//gYdOlVkQ/V
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:57:37 2026 by rpki-client