
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json)
Hash identifier: 5azfPXvs8IY1XKQUFNzexl1NqN3C/7uTTNT3UrI2NZE=
Subject key identifier: A9:1F:04:6E:1E:1B:0A:F1:D6:AA:89:BC:FB:CE:ED:8E:EC:DF:E1:99
Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Certificate serial: 019D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
Manifest number: 0195
Signing time: Wed 25 Mar 2026 03:46:21 +0000
Manifest this update: Wed 25 Mar 2026 03:46:20 +0000
Manifest next update: Wed 01 Apr 2026 03:46:20 +0000
Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: 82WLPcBLeynNHpnY0oa6PFVVQDWu27a6SbaN6Vm51Lg=)
2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: dhcSaLNUlhbiUcFKAsa5AQ1b5rgid7EM2yOheX+7QNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl
rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Validity
Not Before: Mar 25 03:46:20 2026 GMT
Not After : Apr 1 03:46:20 2026 GMT
Subject: CN=69c35a8d-f63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:c4:67:61:01:13:ec:7b:a0:87:02:49:bc:
02:c3:ad:30:8e:4b:26:0c:bc:24:73:80:5f:9c:05:
38:fe:89:79:78:ec:2f:ad:74:6d:79:10:38:c8:38:
5b:01:e4:e5:7b:8e:64:9f:83:4c:28:22:d1:a5:1a:
cd:b7:18:07:bd:fd:59:0b:24:70:ab:69:2f:93:0e:
32:f9:0a:ee:0b:c4:80:c9:53:6f:40:7b:23:cb:d6:
1e:56:7b:b3:33:a9:2c:7b:64:98:d6:ce:c3:bd:8b:
eb:5b:8d:a8:8a:82:85:b4:cc:c8:a0:1e:b3:a9:35:
6d:28:76:55:b7:97:37:51:72:ae:70:1f:6b:fe:ae:
1a:40:e1:27:fa:35:51:9b:ac:16:63:3c:2d:e7:a0:
f5:3f:ba:57:de:a1:1b:40:21:c9:87:b3:ec:1d:0e:
30:9d:3c:4d:9f:14:9b:ba:e0:0b:17:97:06:fb:74:
4e:a1:42:15:2d:ab:4d:2f:e1:1d:38:48:55:7f:3d:
72:c0:ba:98:4b:08:dc:da:30:54:1e:cf:89:c1:75:
31:b9:02:c0:eb:52:48:f8:ff:0d:53:a2:c1:cd:cc:
f1:44:3a:e2:8b:ec:93:cd:32:39:da:cb:0e:05:9f:
e4:36:f3:63:48:32:1e:b4:8a:71:6c:ed:07:44:3c:
d1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1F:04:6E:1E:1B:0A:F1:D6:AA:89:BC:FB:CE:ED:8E:EC:DF:E1:99
X509v3 Authority Key Identifier:
keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:e3:bb:24:9e:30:07:37:d5:3d:68:c1:6d:a2:56:b8:51:45:
52:b0:f5:78:e0:63:8d:b3:a4:ff:18:d5:95:51:d7:b9:df:b3:
f9:31:5f:ef:d2:99:d1:e0:29:75:c5:e4:f1:b6:18:ec:15:46:
af:c1:67:19:33:5b:11:8d:18:ab:15:0e:73:be:e0:d9:db:a4:
b1:c2:99:15:2e:e7:5a:fc:d3:7e:93:94:11:de:74:05:8c:fa:
fa:58:e0:de:3a:5f:66:30:a6:e9:d8:64:4e:70:b2:60:3d:3a:
51:a1:80:dd:bd:ef:e3:9b:24:bc:c8:9a:d8:40:18:23:6b:44:
51:bf:a5:be:08:50:b1:70:c8:3e:40:94:45:06:f7:e4:58:e2:
87:3f:7d:63:fb:cf:65:01:0b:be:83:51:0a:d3:f1:23:8d:2c:
88:a4:1e:aa:ea:b6:ae:10:7a:ff:44:72:20:84:3d:e5:a4:1b:
6c:a9:26:93:90:3f:97:a8:42:a2:c7:6d:84:8b:20:10:86:8e:
c7:d1:14:f4:04:5a:70:05:f2:a5:43:12:69:71:8c:50:83:d9:
57:e4:db:ee:b9:cd:3b:d9:c3:1c:a9:40:d5:50:19:75:be:0e:
b9:81:2b:8c:74:92:18:0e:be:5f:47:a3:b6:65:5a:e1:7a:48:
74:d6:94:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2
Nzc1NTBBQzgwHhcNMjYwMzI1MDM0NjIwWhcNMjYwNDAxMDM0NjIwWjAYMRYwFAYD
VQQDEw02OWMzNWE4ZC1mNjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuDLEZ2EBE+x7oIcCSbwCw60wjksmDLwkc4BfnAU4/ol5eOwvrXRteRA4yDhb
AeTle45kn4NMKCLRpRrNtxgHvf1ZCyRwq2kvkw4y+QruC8SAyVNvQHsjy9YeVnuz
M6kse2SY1s7DvYvrW42oioKFtMzIoB6zqTVtKHZVt5c3UXKucB9r/q4aQOEn+jVR
m6wWYzwt56D1P7pX3qEbQCHJh7PsHQ4wnTxNnxSbuuALF5cG+3ROoUIVLatNL+Ed
OEhVfz1ywLqYSwjc2jBUHs+JwXUxuQLA61JI+P8NU6LBzczxRDrii+yTzTI52ssO
BZ/kNvNjSDIetIpxbO0HRDzRhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKkfBG4e
Gwrx1qqJvPvO7Y7s3+GZMB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx
MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0
Tlh3cVdwbS16XzluZFZDc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAOO7JJ4wBzfVPWjBbaJWuFFFUrD1eOBjjbOk/xjVlVHXud+z+TFf79KZ0eAp
dcXk8bYY7BVGr8FnGTNbEY0YqxUOc77g2dukscKZFS7nWvzTfpOUEd50BYz6+ljg
3jpfZjCm6dhkTnCyYD06UaGA3b3v45skvMia2EAYI2tEUb+lvghQsXDIPkCURQb3
5Fjihz99Y/vPZQELvoNRCtPxI40siKQequq2rhB6/0RyIIQ95aQbbKkmk5A/l6hC
osdthIsgEIaOx9EU9ARacAXypUMSaXGMUIPZV+Tb7rnNO9nDHKlA1VAZdb4OuYEr
jHSSGA6+X0ejtmVa4XpIdNaUyg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:24 2026 by rpki-client