
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
File: USSgTiOq3aRNlKsNSrLAt7IL_HU.mft (raw, json)
Hash identifier: vbzO6p1Gw0f1DI3R4E23cYegZUwLarohxUqVjPPz8AU=
Subject key identifier: 75:97:42:63:F2:90:6E:04:E0:5C:89:70:88:AD:10:E3:25:BB:BD:CE
Authority key identifier: 51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75
Certificate issuer: /CN=A91A8151/serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
Certificate serial: 0D2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
Manifest number: 0D1E
Signing time: Tue 22 Sep 2026 18:12:49 +0000
Manifest this update: Tue 22 Sep 2026 18:12:49 +0000
Manifest next update: Tue 29 Sep 2026 18:12:49 +0000
Files and hashes: 1: USSgTiOq3aRNlKsNSrLAt7IL_HU.crl (hash: 0lt4Lu3tpwG753hufv+kuHNQ8tRUhACfpDdwPa+E2zQ=)
2: 4279BBD80C5811EA93151657C4F9AE02.roa (hash: PrV4ug4ETTz8/DXoyTLeeGqeqc63WS+hKxc+croiqpE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl
rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3372 (0xd2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8151, serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
Validity
Not Before: Sep 22 18:12:49 2026 GMT
Not After : Sep 29 18:12:49 2026 GMT
Subject: CN=6ab2c521-1c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:57:07:76:96:43:2b:aa:bd:65:d2:fe:4d:
af:12:ef:35:d9:c8:07:89:50:a4:bd:28:04:7e:9c:
4f:0d:33:6b:dc:17:8b:43:12:d0:9e:c6:85:f1:1b:
1e:f8:c5:ce:f2:6c:43:ee:b1:ee:44:a7:a5:74:d7:
43:cf:87:98:de:b8:32:98:f8:04:8f:26:31:a3:6d:
1f:d6:23:87:9d:b0:2f:52:4a:c9:bb:25:5d:a4:22:
4c:c9:2e:8d:ae:82:5c:a7:25:b4:13:1a:49:ff:88:
0e:89:44:f7:52:a2:98:d2:ce:6d:5e:99:13:df:08:
b8:ee:50:56:ba:5f:80:3f:16:d7:49:df:e5:63:06:
98:c4:17:31:a7:79:d4:a1:01:27:cf:23:cc:3e:c4:
67:29:43:13:e4:4f:47:9b:31:cc:c7:d8:63:ef:a9:
91:c5:4e:f6:db:f1:76:73:b6:f0:61:a4:e4:ce:bf:
29:fa:3e:89:8a:67:23:d9:d9:88:a4:1c:f0:87:ff:
3b:a5:9c:5b:06:41:5d:ca:8e:20:b0:b6:2f:c2:41:
72:09:71:ea:8f:6f:b2:ec:81:c9:58:6a:ac:ea:6c:
b0:e6:25:a3:0c:83:38:1f:0f:b4:c6:bd:46:13:1d:
cc:b6:39:89:69:00:a7:e0:e6:8f:42:7a:d2:fd:d8:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:97:42:63:F2:90:6E:04:E0:5C:89:70:88:AD:10:E3:25:BB:BD:CE
X509v3 Authority Key Identifier:
keyid:51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:cb:0e:a1:9a:7a:d4:cc:4f:2f:1b:14:c4:a8:d3:b2:ee:fc:
c8:5d:1f:c7:58:eb:e7:30:8a:64:be:6e:88:32:00:83:d2:04:
95:5e:cd:69:74:1d:d0:eb:a3:21:90:fb:55:7f:8f:1e:d7:6d:
86:7b:22:47:47:1c:22:49:ea:ad:6e:3e:86:34:a8:e0:47:ad:
f2:00:0c:bb:9e:d5:d1:7d:58:90:a1:8a:61:b9:a6:58:cd:8f:
b9:cd:19:bc:e1:0e:b3:b5:a9:25:fc:90:0d:67:e3:a7:4c:2a:
10:c3:be:e1:3d:0b:40:6a:23:ee:1a:08:e9:e9:31:46:6c:84:
59:85:34:97:50:66:8b:0e:ea:ad:a9:46:25:03:b9:f7:ec:d8:
00:b9:f8:ff:0f:2f:f0:ef:39:f9:74:40:9e:0d:a8:6a:fd:fa:
17:b5:31:d2:b7:20:75:f4:74:c3:ce:96:24:1a:c9:b3:e1:3d:
98:c1:ed:30:46:2f:9a:4b:21:07:8b:23:38:26:bf:45:99:46:
9c:90:23:93:71:89:49:51:40:af:c0:0a:52:4b:a8:74:ae:12:
25:34:59:32:05:14:4d:69:ce:da:e3:95:9c:02:a5:74:6e:ad:
19:f2:0f:ad:6a:0c:be:35:b8:e9:16:ad:4f:89:9c:4d:91:b9:
18:aa:e4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:30:43 2026 by rpki-client