
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
File: hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json)
Hash identifier: ADOwSn9STLAjeoYsdZHi83LBJkFL+VY6gyE3W4BtrXw=
Subject key identifier: 38:CC:38:22:BB:57:95:F4:09:35:0A:E9:9A:0C:C0:D9:DA:2B:80:01
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Certificate issuer: /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial: 022A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
Manifest number: 0225
Signing time: Sun 15 Nov 2026 02:59:43 +0000
Manifest this update: Sun 15 Nov 2026 02:59:42 +0000
Manifest next update: Sun 22 Nov 2026 02:59:42 +0000
Files and hashes: 1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: pYmGRfNThNnI/n/wJfS3jkylqjqF3MD/+Fo/Czl8E7s=)
2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: 6vqRkfNyBAwDiXHf3koAV6uBX2r6Cd6TaI9BMlOpzvA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 02:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060
Validity
Not Before: Nov 15 02:59:42 2026 GMT
Not After : Nov 22 02:59:42 2026 GMT
Subject: CN=6af9201f-acd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:4b:06:04:40:51:8a:6d:44:ea:54:43:9f:
1b:43:bd:03:7e:b5:e8:d9:4f:a2:f3:4c:dc:8f:fa:
3b:46:7b:22:00:64:4e:eb:25:42:49:f5:35:49:e6:
8e:44:c4:58:fb:ae:bc:26:d1:08:54:4d:48:31:76:
df:75:25:ad:93:49:e7:03:68:4f:9f:be:a5:9d:14:
45:fb:75:90:aa:90:36:ba:8d:01:4a:24:98:de:67:
c2:49:8d:63:eb:e3:24:5f:1b:4b:dc:18:76:f1:7d:
e7:11:cf:58:36:e1:82:7c:15:f2:23:09:c6:8e:0b:
34:49:56:01:01:1e:68:58:fa:33:9e:0a:60:74:af:
f0:24:4f:f7:87:a5:da:e7:a2:bf:50:03:ff:99:b9:
bc:39:d1:f9:62:e4:be:3f:9d:5d:a7:d8:c8:26:ea:
83:30:db:b8:4e:61:e3:33:d5:2e:c0:99:64:da:f3:
cb:fe:95:47:ec:48:1b:9c:2d:42:ee:f2:0d:75:95:
7e:16:c3:86:f5:6d:53:3b:1c:0c:27:80:4e:b5:1b:
cd:72:65:21:14:e9:35:6c:01:72:22:28:57:b3:b6:
ef:76:aa:90:a1:ae:00:2e:68:83:7f:c0:81:9e:c3:
e0:c1:52:88:f9:e6:c6:de:20:99:4e:5c:33:fa:4f:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CC:38:22:BB:57:95:F4:09:35:0A:E9:9A:0C:C0:D9:DA:2B:80:01
X509v3 Authority Key Identifier:
keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c3:76:4d:15:96:d5:be:81:9a:e3:f8:c9:21:e9:ec:b6:87:
42:b9:2b:26:66:2a:0e:1b:ed:d0:19:f5:65:d3:2c:1b:8e:fc:
6d:b7:aa:8d:4e:c1:62:8b:da:20:3f:c4:8c:34:bb:47:8a:64:
a1:e3:4e:8f:6a:46:87:0b:10:21:a1:37:17:0f:12:2d:01:e5:
97:6e:5d:27:b6:ff:4d:68:26:3b:05:82:63:02:59:9b:25:b1:
fe:f5:de:df:ce:d0:61:19:c5:bd:3c:ec:18:4b:7d:96:27:86:
dd:c3:e0:ba:f3:94:54:db:b4:f4:73:05:8d:74:05:b9:53:7a:
d0:3b:01:19:73:f6:19:7e:f3:37:fa:63:96:af:23:6a:4e:11:
f3:98:2b:e2:cd:b3:3f:42:7d:36:f2:90:a5:25:b5:0e:18:de:
1d:80:7f:e4:aa:64:ea:4c:86:b3:de:86:a0:84:26:54:0c:5f:
e1:bd:e2:8a:cb:0e:74:4e:44:83:82:f5:a8:2c:ea:9c:69:c8:
28:6f:07:3c:c2:96:c3:c8:4c:a5:e1:77:43:f0:4b:e6:ab:d2:
51:65:d9:17:2e:be:9b:dc:a2:3c:8f:dd:75:e8:39:0f:6a:b0:
59:83:3f:c0:7b:5a:52:25:f1:28:38:7d:3e:53:ab:3c:57:eb:
df:ad:5b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:44:00 2026 by rpki-client