
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json)
Hash identifier: dnnQZLCX1srg92VQ71FQ8gKYGhMnWYjhoYF+S/5Jngo=
Subject key identifier: 22:69:D8:34:8C:6B:DB:2F:20:D5:DA:3E:E4:DB:37:ED:96:10:28:4A
Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Certificate serial: 1531
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
Manifest number: 1518
Signing time: Tue 24 Mar 2026 16:44:36 +0000
Manifest this update: Tue 24 Mar 2026 16:44:35 +0000
Manifest next update: Tue 31 Mar 2026 16:44:35 +0000
Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: sUce8LSktySDe/gE8P6fLQWj7yvy5+BXuhpvKpL/z0E=)
2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: RnKanm5hHk3mFwa7+wHjDrcythGv+bDKBJwJ7N6lnUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:44:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5425 (0x1531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Validity
Not Before: Mar 24 16:44:35 2026 GMT
Not After : Mar 31 16:44:35 2026 GMT
Subject: CN=69c2bf73-cd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:ef:66:93:ac:84:8f:1e:c4:03:a8:ef:76:
22:f3:3d:34:e5:40:66:20:97:d8:57:16:1e:df:e9:
ad:c3:2b:8f:58:6f:07:67:ef:38:6f:bf:5a:85:45:
7c:62:59:2d:91:33:80:f7:6f:87:be:06:f5:46:20:
0a:67:80:cf:b9:17:56:8b:93:3d:98:e0:64:22:70:
95:b1:d3:cf:cf:4a:71:e9:b5:81:bb:a0:37:82:31:
da:9b:eb:fc:46:88:94:c1:2e:78:49:b0:57:bb:f4:
fd:6e:ab:a6:07:12:b2:3c:97:4d:b2:57:2e:8e:96:
7a:c5:78:1e:5d:a2:00:8b:1d:9c:7b:b8:f6:66:90:
72:e1:ee:04:ee:55:1c:64:c0:ea:48:de:f5:95:77:
c5:c3:ce:97:a3:20:a5:68:c2:d7:ee:33:4a:50:52:
27:46:da:56:f6:e9:76:01:13:b9:7d:9e:59:48:cc:
01:0c:19:94:c8:6b:18:26:11:41:f5:ab:e8:a8:61:
6b:ae:73:e7:74:d1:b2:3b:57:42:6f:32:ab:57:fd:
6c:92:12:84:03:db:4a:89:09:8d:b3:65:f0:3c:1c:
ac:ad:b5:d4:b7:de:25:c8:ee:4d:07:ff:2f:e8:ed:
b8:3c:47:90:2d:b6:cf:42:42:89:8c:a1:8d:18:39:
a7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:69:D8:34:8C:6B:DB:2F:20:D5:DA:3E:E4:DB:37:ED:96:10:28:4A
X509v3 Authority Key Identifier:
keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c2:87:2a:a1:f7:ae:ad:a7:95:5c:f5:5d:96:9b:f6:3a:8a:
a3:1d:60:fb:8e:89:bc:1a:5b:0a:a5:5a:17:df:52:f8:7f:03:
4d:49:1c:c3:1c:13:bc:83:6e:95:d6:dd:04:16:7e:f8:08:80:
4c:5e:a4:b2:80:b7:53:51:e8:e9:24:86:05:27:24:d6:16:79:
cc:98:0f:d8:c9:d5:21:70:17:f5:55:c4:51:1d:1d:1b:ff:d2:
1a:cc:54:a3:cc:a1:4f:92:0c:fa:e7:a6:ce:15:5b:51:1c:c8:
2f:3f:a1:77:86:1d:af:fe:b0:6f:82:a3:67:27:ad:9f:b0:f9:
68:03:58:d5:a7:8c:0c:98:95:dd:2e:e9:47:41:7a:ff:e1:43:
27:2d:42:06:d2:dd:50:8c:a8:4b:22:a8:ed:de:7d:3d:69:9a:
ab:be:d0:92:e8:2a:7f:24:ee:d8:1b:df:54:23:25:a4:c7:d4:
68:ff:db:32:32:43:a0:a8:7f:2a:ab:2b:9d:cd:aa:45:60:f9:
b4:b3:bb:ea:dd:9f:32:f8:a3:eb:cb:28:31:28:4e:91:d1:5d:
7a:b6:f1:25:34:83:6a:da:16:5d:4a:00:04:33:c8:95:c5:da:
fc:1a:dc:1e:fe:f2:cb:ac:d8:ab:e4:97:a2:00:37:e3:55:0c:
6d:90:98:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:28 2026 by rpki-client