
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
File: hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json)
Hash identifier: 1JHK7NcoC9ZzZpKvQ5OZftKOEQASDjBiU7T991yu3jg=
Subject key identifier: 89:BC:CD:57:3D:99:02:2C:E1:C4:58:93:D4:83:21:28:F7:11:45:D6
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Certificate issuer: /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
Manifest number: 01C6
Signing time: Mon 11 May 2026 03:49:03 +0000
Manifest this update: Mon 11 May 2026 03:49:02 +0000
Manifest next update: Mon 18 May 2026 03:49:02 +0000
Files and hashes: 1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: nQvX7x4Q+5pqMNL9ZKBGt/vophEWN/0RPxKK4iRz6sg=)
2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: 6vqRkfNyBAwDiXHf3koAV6uBX2r6Cd6TaI9BMlOpzvA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060
Validity
Not Before: May 11 03:49:02 2026 GMT
Not After : May 18 03:49:02 2026 GMT
Subject: CN=6a0151ae-aff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:f6:c2:37:6d:27:28:0c:9c:8c:0c:97:f4:
bc:90:2b:40:37:15:95:4e:01:8e:57:08:69:a0:1c:
1a:6f:be:67:81:13:74:2f:21:6b:f3:e3:d5:a2:43:
cc:63:40:b0:0b:1f:5f:63:44:9b:08:64:7e:a3:82:
b1:23:30:23:3a:dc:99:cb:e0:b8:3b:da:9a:96:50:
57:91:23:aa:37:87:df:9f:09:55:42:3f:0e:b5:a1:
64:ba:86:3a:8e:22:85:e0:0e:c4:cc:f9:ae:5e:74:
e6:d7:28:af:ca:71:54:0d:14:e5:26:c3:95:64:f5:
b2:bc:02:06:66:ab:5a:0c:b5:06:8a:76:ba:19:92:
c9:4a:71:ce:ef:8b:01:29:9d:2d:29:95:41:e0:01:
c3:5e:ad:85:7a:8a:ac:30:52:bd:8e:e2:da:49:87:
bf:7f:61:e1:1c:96:ef:2b:05:7a:83:06:86:d3:06:
0d:f1:57:f7:88:74:bc:80:9f:bf:3c:2c:44:0e:d2:
9f:c9:4e:9f:4b:bd:f5:1e:e1:4a:97:46:e2:7a:7c:
23:4c:c1:ab:78:00:30:24:db:a8:73:8b:79:4c:46:
27:71:42:32:b8:6e:29:2d:ff:c5:9e:a1:1f:c1:91:
3e:af:35:ac:7a:62:03:27:46:42:26:c5:7d:d6:89:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BC:CD:57:3D:99:02:2C:E1:C4:58:93:D4:83:21:28:F7:11:45:D6
X509v3 Authority Key Identifier:
keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:d0:d5:73:84:c4:ac:ab:8e:76:13:bc:51:d3:1b:7b:e0:4d:
4a:1e:58:e3:3d:78:1f:11:4e:3a:73:ce:95:31:24:d9:80:f0:
b2:08:0d:79:1b:c0:fc:6d:0d:19:37:5e:94:8b:a4:7c:f7:52:
13:ed:dc:04:da:b4:2c:08:3d:1a:85:35:26:57:a1:bb:7f:ab:
62:d9:b7:9c:b2:49:20:de:47:98:9c:a8:79:7c:76:7d:81:83:
ee:f5:0f:54:7c:7b:24:23:fb:43:9e:87:10:a4:4c:29:b4:56:
5f:ff:21:95:00:eb:91:cd:be:4f:5d:b9:6b:b4:17:9c:a0:45:
aa:aa:a7:05:1b:e5:77:ee:f9:9e:7f:e4:60:b8:ec:75:09:d0:
e2:ee:4c:22:8b:66:42:e0:49:6d:45:3b:32:e1:9c:1d:69:fb:
88:ee:7b:82:15:b9:c4:35:f3:32:74:59:c1:1a:8e:c6:7b:cb:
65:ca:87:1f:15:c1:53:1d:42:26:55:71:02:96:f6:7c:25:59:
a8:5b:37:70:1e:69:38:90:88:e6:78:3d:21:11:b6:28:32:52:
09:57:c7:76:48:5e:6b:73:d9:2f:ab:54:8e:44:52:1a:d2:57:
b8:08:87:6b:ce:b7:4d:0c:ec:ff:a9:90:4c:27:ff:12:3c:8b:
47:f1:9c:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUFDOUExMTAvBgNVBAUTKDg3MjhCODI4RjMxODYwM0U0NDcxMTA3MEMyNEVDQzA4
OEExOTAwNjAwHhcNMjYwNTExMDM0OTAyWhcNMjYwNTE4MDM0OTAyWjAYMRYwFAYD
VQQDEw02YTAxNTFhZS1hZmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsoL2wjdtJygMnIwMl/S8kCtANxWVTgGOVwhpoBwab75ngRN0LyFr8+PVokPM
Y0CwCx9fY0SbCGR+o4KxIzAjOtyZy+C4O9qallBXkSOqN4ffnwlVQj8OtaFkuoY6
jiKF4A7EzPmuXnTm1yivynFUDRTlJsOVZPWyvAIGZqtaDLUGina6GZLJSnHO74sB
KZ0tKZVB4AHDXq2FeoqsMFK9juLaSYe/f2HhHJbvKwV6gwaG0wYN8Vf3iHS8gJ+/
PCxEDtKfyU6fS731HuFKl0bienwjTMGreAAwJNuoc4t5TEYncUIyuG4pLf/FnqEf
wZE+rzWsemIDJ0ZCJsV91olVGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIm8zVc9
mQIs4cRYk9SDISj3EUXWMB8GA1UdIwQYMBaAFIcouCjzGGA+RHEQcMJOzAiKGQBg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUM5QS9FMTlBMjU3ODk3
RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlENUVjUkJ3d2s3TUNJb1pB
R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h5aTRLUE1ZWUQ1RWNSQnd3azdNQ0lvWkFHQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QUM5QS9FMTlBMjU3ODk3RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlE
NUVjUkJ3d2s3TUNJb1pBR0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAtDVc4TErKuOdhO8UdMbe+BNSh5Y4z14HxFOOnPOlTEk2YDwsggNeRvA/G0N
GTdelIukfPdSE+3cBNq0LAg9GoU1Jlehu3+rYtm3nLJJIN5HmJyoeXx2fYGD7vUP
VHx7JCP7Q56HEKRMKbRWX/8hlQDrkc2+T125a7QXnKBFqqqnBRvld+75nn/kYLjs
dQnQ4u5MIotmQuBJbUU7MuGcHWn7iO57ghW5xDXzMnRZwRqOxnvLZcqHHxXBUx1C
JlVxApb2fCVZqFs3cB5pOJCI5ng9IRG2KDJSCVfHdkhea3PZL6tUjkRSGtJXuAiH
a863TQzs/6mQTCf/EjyLR/Gcyw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:10:58 2026 by rpki-client