
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json)
Hash identifier: EQ017nlpwss62h/vcdErx0a0PhVKSZqSmcXMkJJ65Z8=
Subject key identifier: 22:15:C9:71:A1:52:1B:68:F2:5D:1F:54:89:83:7E:B4:DA:13:B7:FD
Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Certificate serial: 154A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
Manifest number: 1531
Signing time: Tue 12 May 2026 16:50:29 +0000
Manifest this update: Tue 12 May 2026 16:50:29 +0000
Manifest next update: Tue 19 May 2026 16:50:29 +0000
Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: yWN7Rfpv+v4I0IyIWbeP31wvUS+mwDv4Tcao9HNQoyI=)
2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: RnKanm5hHk3mFwa7+wHjDrcythGv+bDKBJwJ7N6lnUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5450 (0x154a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Validity
Not Before: May 12 16:50:29 2026 GMT
Not After : May 19 16:50:29 2026 GMT
Subject: CN=6a035a55-4828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:af:39:63:e9:ab:a3:68:12:09:da:c6:28:
c7:52:4d:74:5c:74:ff:22:89:7f:98:ab:bc:a0:dc:
1c:70:62:9f:ae:ec:1b:e9:21:ff:37:67:a2:00:a8:
f8:2f:0f:02:55:64:33:3e:47:74:15:8d:ce:28:f6:
68:6d:78:87:07:65:9f:8e:ef:51:6b:bb:ed:a6:ba:
e3:64:fd:07:bc:9d:61:c7:87:c1:9f:18:73:77:9c:
67:ff:92:d5:c8:30:83:13:47:96:c8:b2:c6:01:27:
15:e9:9f:3c:cf:72:d5:f2:fd:d6:35:c2:81:fb:31:
f4:4a:38:71:3f:69:8d:a2:b3:d6:83:45:bc:c3:44:
06:f8:1a:40:61:08:21:1f:e3:ab:49:4e:c2:a8:06:
38:be:ae:1c:b2:eb:b7:58:23:d9:da:9f:5f:b8:a2:
8d:55:69:c7:1d:e9:9b:94:12:8a:93:4d:9a:73:e8:
90:8e:90:77:49:ad:8b:b0:73:7b:7d:24:a2:f6:5d:
29:0f:d5:a6:a2:7d:a9:0f:4a:77:57:fc:0f:e9:b8:
c3:e3:7f:5f:9d:26:78:d2:3b:16:dd:76:66:5d:ae:
d7:c0:c9:1c:65:a9:75:e4:0b:21:ee:f2:a1:14:55:
53:15:fb:8b:2c:34:a6:65:ff:3d:bc:83:e7:1c:63:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:15:C9:71:A1:52:1B:68:F2:5D:1F:54:89:83:7E:B4:DA:13:B7:FD
X509v3 Authority Key Identifier:
keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e6:a6:c8:9d:7c:ca:46:48:b2:f7:ac:ff:16:1e:14:4d:04:
05:b3:00:36:c1:ba:a1:c5:07:33:61:99:7c:11:cb:06:12:26:
16:03:0a:6b:a2:ac:a3:cd:d4:e2:b4:28:53:00:62:03:57:ab:
00:c0:6b:cc:6e:fb:eb:02:99:3c:de:f8:6e:f5:ac:60:2e:4d:
91:66:7c:43:3b:3e:e5:1d:4a:c6:e9:9c:52:f6:8b:36:c7:5f:
9e:d2:c4:e1:72:00:17:f6:49:d6:59:49:ad:54:fb:f1:7d:6d:
0d:4f:f3:7e:5b:1f:13:c5:48:26:09:2a:5a:39:7e:2e:81:4e:
8a:90:9a:19:fc:64:14:22:2a:03:ea:41:a8:8b:ec:d8:5c:66:
38:f4:7d:4c:00:4e:00:7f:8e:73:82:f2:5c:24:1d:e4:23:27:
83:72:23:f4:6a:69:9f:49:0d:a5:ac:84:b9:9d:ad:06:c9:31:
6d:51:89:c9:b0:d0:da:59:69:fb:bd:30:e6:eb:42:2a:77:28:
90:51:df:bc:ba:fa:2f:a0:62:08:b3:74:39:ff:b4:60:2f:7d:
f9:8e:a9:3e:25:d2:83:1e:b8:71:53:de:01:9d:ad:e9:16:a0:
17:bb:b3:c5:99:32:92:4a:0e:f0:98:3e:2c:a2:e3:33:60:47:
e1:b7:8a:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE
QTk1ODFEMjQwHhcNMjYwNTEyMTY1MDI5WhcNMjYwNTE5MTY1MDI5WjAYMRYwFAYD
VQQDEw02YTAzNWE1NS00ODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzkuvOWPpq6NoEgnaxijHUk10XHT/Iol/mKu8oNwccGKfruwb6SH/N2eiAKj4
Lw8CVWQzPkd0FY3OKPZobXiHB2Wfju9Ra7vtprrjZP0HvJ1hx4fBnxhzd5xn/5LV
yDCDE0eWyLLGAScV6Z88z3LV8v3WNcKB+zH0SjhxP2mNorPWg0W8w0QG+BpAYQgh
H+OrSU7CqAY4vq4csuu3WCPZ2p9fuKKNVWnHHemblBKKk02ac+iQjpB3Sa2LsHN7
fSSi9l0pD9Wmon2pD0p3V/wP6bjD439fnSZ40jsW3XZmXa7XwMkcZal15Ash7vKh
FFVTFfuLLDSmZf89vIPnHGPnEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCIVyXGh
Uhto8l0fVImDfrTaE7f9MB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD
NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI
U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
M0Y3NS83MjA2RDZGNDZDNkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZ
ZmtKcjBmVmh3TW5hbFlIU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALuamyJ18ykZIsves/xYeFE0EBbMANsG6ocUHM2GZfBHLBhImFgMKa6Kso83U
4rQoUwBiA1erAMBrzG776wKZPN74bvWsYC5NkWZ8Qzs+5R1KxumcUvaLNsdfntLE
4XIAF/ZJ1llJrVT78X1tDU/zflsfE8VIJgkqWjl+LoFOipCaGfxkFCIqA+pBqIvs
2FxmOPR9TABOAH+Oc4LyXCQd5CMng3Ij9Gppn0kNpayEuZ2tBskxbVGJybDQ2llp
+70w5utCKncokFHfvLr6L6BiCLN0Of+0YC99+Y6pPiXSgx64cVPeAZ2t6RagF7uz
xZkykkoO8Jg+LKLjM2BH4beKWg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:01:05 2026 by rpki-client