
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
File: hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json)
Hash identifier: 55RcAN9dl0ZlziZZWiv/RxLcSmhYsMYjDh/Y5obIG3Y=
Subject key identifier: B8:FC:2E:2E:61:16:55:FC:E4:B5:7D:D8:62:5F:64:C0:82:7A:A3:8C
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Certificate issuer: /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
Manifest number: 01AE
Signing time: Wed 25 Mar 2026 03:20:50 +0000
Manifest this update: Wed 25 Mar 2026 03:20:50 +0000
Manifest next update: Wed 01 Apr 2026 03:20:50 +0000
Files and hashes: 1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: Dg0juNkQxSFkWkDXCgZtNT55pwfSnM72XgynRNxQ1eo=)
2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: 6vqRkfNyBAwDiXHf3koAV6uBX2r6Cd6TaI9BMlOpzvA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060
Validity
Not Before: Mar 25 03:20:50 2026 GMT
Not After : Apr 1 03:20:50 2026 GMT
Subject: CN=69c35492-4eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:e6:9e:a9:9c:55:80:8a:12:27:55:3a:e0:
c8:72:3f:d8:97:08:0b:c8:51:a2:96:e6:9c:16:4a:
4a:c9:e7:cc:de:87:89:f6:94:a6:72:63:94:39:22:
be:88:da:4e:81:5d:5f:ed:b8:16:bd:83:b1:7d:4a:
b1:8e:c7:46:be:ad:ed:63:99:de:32:53:25:d4:31:
08:ef:83:54:1c:7e:af:c9:27:51:64:02:5b:ab:49:
3c:88:c5:22:0a:4e:e5:12:4c:eb:a8:71:11:0a:a1:
2d:34:f6:17:f2:71:25:f8:86:2c:93:43:7a:77:a7:
60:fa:93:a6:40:1f:50:3d:4f:bf:97:23:3c:8a:90:
9f:0c:04:f6:3f:5e:66:08:1a:f2:5a:b0:54:78:d6:
aa:95:25:5f:98:fb:36:4c:ae:34:af:66:e1:3c:be:
2e:ad:47:4b:4f:95:b1:d2:bd:b6:48:cb:d2:f8:f5:
e2:bd:2f:cd:5d:d1:31:f3:3b:39:87:1e:d4:4e:5a:
f8:14:91:9d:bf:6b:93:12:13:90:f0:d6:6a:8d:9a:
1d:6d:ab:49:35:22:de:e5:f4:f9:c7:0b:77:76:dd:
1f:3f:cb:6c:77:85:1a:b6:92:4e:68:bc:e8:4a:43:
fb:5e:4c:25:69:f6:c4:c4:17:51:ce:4a:1e:9b:71:
7e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FC:2E:2E:61:16:55:FC:E4:B5:7D:D8:62:5F:64:C0:82:7A:A3:8C
X509v3 Authority Key Identifier:
keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:79:63:9a:7d:e8:8d:0e:90:66:ec:4c:5c:44:a3:e1:64:59:
55:7d:01:cb:d2:7d:a5:89:36:9d:08:68:52:9b:e5:18:f0:55:
ce:19:18:ef:d3:ad:72:93:27:4c:66:01:b9:5f:77:e6:16:9a:
09:6e:85:7f:df:86:46:2e:55:dd:66:a2:fb:0d:e8:42:23:cf:
59:fe:94:31:04:a3:21:7d:1e:bb:92:3d:15:c9:f5:23:f0:1b:
7d:f1:2d:da:07:8b:fc:0c:f9:1c:3e:2b:77:06:b0:32:71:81:
df:de:a2:9a:81:88:a1:04:1a:54:10:15:df:0c:ff:ef:34:50:
1c:ae:8f:ac:47:23:bc:d6:9b:9e:9a:87:5f:5b:e6:66:83:21:
60:30:5d:ce:63:68:fb:a3:95:79:84:ef:d1:4d:f3:e9:9c:73:
76:91:26:b2:65:2f:a7:8c:1c:02:51:cd:c5:f0:c3:80:68:b2:
21:7d:96:25:cc:08:b9:ef:dc:02:eb:7c:f4:cb:f0:19:3c:5c:
ab:08:9d:f3:50:e2:5c:7b:b5:71:91:b6:72:ca:aa:13:b6:88:
a0:a4:21:d9:bf:5d:80:f0:55:df:b1:89:40:61:56:d2:ea:2d:
02:9a:ad:34:9c:db:13:04:8b:89:f4:4a:ea:b3:d5:5c:5f:fe:
ac:d7:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:44 2026 by rpki-client