
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
File: kHuyYrVxYj40suIMYKcYwXOcw70.mft (raw, json)
Hash identifier: lF2qQ1HFHg1kRzima0Hr98Wfnio6GPJt875efgxi8AA=
Subject key identifier: 26:F6:B8:A7:F0:E4:65:7D:6D:E4:EA:37:3B:71:EE:64:CE:56:2E:4B
Authority key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD
Certificate issuer: /CN=A91A3A64/serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD
Certificate serial: 04AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
Manifest number: 04A3
Signing time: Tue 13 Oct 2026 00:06:06 +0000
Manifest this update: Tue 13 Oct 2026 00:06:06 +0000
Manifest next update: Tue 20 Oct 2026 00:06:06 +0000
Files and hashes: 1: kHuyYrVxYj40suIMYKcYwXOcw70.crl (hash: rSL4rytzz3ZRs10Rq9V3OekjH6U1Z1B41qYk839Ib5s=)
2: 5B92665E9ADD11ECA5401423C4F9AE02.roa (hash: Nb29Wu1CDYoesjc8FMHKjysC8EpiLHTgbPxZYxl0RNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl
rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 00:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1196 (0x4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3A64, serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD
Validity
Not Before: Oct 13 00:06:06 2026 GMT
Not After : Oct 20 00:06:06 2026 GMT
Subject: CN=6acd75ee-37ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:26:cc:9b:7e:37:f2:c1:b8:3e:3e:90:f1:
d6:fa:3e:1c:9a:ec:1e:61:01:cc:30:55:f4:2b:3a:
51:e8:3c:6a:49:f8:09:62:3f:9f:85:74:cc:76:a2:
b8:d5:8b:7d:d4:24:b8:44:91:56:7f:f4:13:14:e9:
33:2c:b7:ca:03:db:f1:44:99:a9:38:07:b2:eb:a8:
d2:ed:3a:65:ba:fe:21:e7:76:dc:df:90:ec:3a:e8:
7a:e5:23:3a:b7:74:93:68:2c:43:1e:1e:f9:1e:64:
fc:92:14:d9:82:4a:d8:71:62:88:bd:69:f6:ea:4c:
45:bd:36:f8:96:c6:f2:fb:9a:9e:20:ff:c3:58:74:
1a:46:98:4e:89:11:cc:b9:7b:54:c9:eb:d8:07:9d:
b9:f0:c6:c6:80:a9:7b:f4:f2:3f:d6:f8:3f:e5:9b:
aa:11:e9:40:ba:9a:98:04:a4:4e:e1:45:70:ae:5c:
53:34:77:04:eb:da:ab:23:bb:b3:76:1a:08:09:cd:
13:64:26:d7:a1:0c:ee:e5:57:f6:77:93:a5:7b:99:
14:00:e0:fe:3d:33:64:14:8b:97:1c:54:e0:38:1d:
e5:e5:b7:4c:54:bd:ff:30:30:4e:f2:57:54:76:09:
c5:14:dd:e2:d9:bb:16:d5:88:03:14:ff:46:05:19:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F6:B8:A7:F0:E4:65:7D:6D:E4:EA:37:3B:71:EE:64:CE:56:2E:4B
X509v3 Authority Key Identifier:
keyid:90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:e6:9d:0b:04:12:a6:85:8c:3f:bb:5b:28:18:34:73:be:b3:
c7:a0:d7:92:dc:a3:15:db:60:2d:63:e9:fa:7b:cf:04:1c:32:
00:c1:1f:17:10:1c:c2:9c:d4:ef:02:3b:9d:ef:91:5d:18:bc:
b6:57:4c:53:12:12:39:0a:01:b8:e8:15:d1:59:14:6e:92:45:
cd:e6:76:cf:0f:41:88:40:3b:01:81:f8:68:f9:4f:9a:dd:03:
3c:08:f6:85:85:4d:30:16:dd:60:fa:4f:1d:61:6a:64:32:8b:
5d:79:79:ed:e3:6e:5a:11:e7:5c:56:07:60:5e:3f:51:e8:6c:
8e:81:f6:2c:27:f3:42:c8:b4:da:d5:a9:e3:4f:5f:8b:6d:33:
73:9f:39:cd:65:dc:f7:a4:e5:5d:10:d4:68:99:38:87:ce:42:
38:fa:d1:2b:4b:38:f3:2f:b1:42:d5:ef:a5:ce:d1:4d:04:f7:
c5:0a:28:b9:ad:15:1f:ec:c0:89:3e:6d:49:64:b4:f6:64:c8:
e7:f4:d3:98:2d:0b:72:b5:c5:8a:bd:52:b6:56:3d:74:5b:8d:
a4:ca:15:fb:2b:76:f3:df:9a:a6:25:5b:89:88:2c:ff:bc:e0:
a3:90:68:db:37:be:14:ad:83:4a:5d:30:13:60:f3:91:13:1a:
bc:a7:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:08:18 2026 by rpki-client