
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
File: USSgTiOq3aRNlKsNSrLAt7IL_HU.mft (raw, json)
Hash identifier: GAkDfYxnoSi27WHOYSU/oVDHM0/EEnlRTC1a4gglP6M=
Subject key identifier: 76:81:6F:84:2F:86:CF:E5:36:C2:F4:FA:F3:57:7A:C6:D6:58:6C:75
Authority key identifier: 51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75
Certificate issuer: /CN=A91A8151/serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
Certificate serial: 0CCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
Manifest number: 0CC0
Signing time: Thu 26 Mar 2026 18:22:00 +0000
Manifest this update: Thu 26 Mar 2026 18:22:00 +0000
Manifest next update: Thu 02 Apr 2026 18:22:00 +0000
Files and hashes: 1: USSgTiOq3aRNlKsNSrLAt7IL_HU.crl (hash: DSIHIGOMSNMFyllXCNno9MsKjiW2Cq8pDJ/+JQ/X824=)
2: 4279BBD80C5811EA93151657C4F9AE02.roa (hash: wdDYplfzKaYX22uPvzlPb5qqxZS2nS6LfIySpohKPZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl
rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3277 (0xccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8151, serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
Validity
Not Before: Mar 26 18:22:00 2026 GMT
Not After : Apr 2 18:22:00 2026 GMT
Subject: CN=69c57948-c426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:78:53:ff:76:ae:66:eb:e2:ae:89:49:6f:
65:a8:ab:85:67:c8:55:f0:ec:ab:83:d1:9f:07:52:
6e:eb:c5:73:37:88:c0:b7:30:c1:14:f4:ed:61:35:
53:23:0d:9f:5c:37:69:be:a4:00:4e:a1:a5:a5:07:
4b:21:97:eb:52:ae:fb:f9:44:76:1c:69:ef:15:58:
c7:38:51:27:01:34:cf:86:7e:37:42:d1:70:16:3a:
18:26:56:32:7d:08:4f:4e:28:57:3a:4b:14:dc:01:
2c:96:07:e2:5a:8d:4b:8d:91:51:28:07:7a:a5:eb:
ca:08:66:63:8a:b8:cb:d5:21:88:ce:e8:c2:b1:ba:
cb:2a:9a:1f:b8:b8:78:4e:83:29:e7:6c:d8:93:b9:
30:51:2f:fc:7c:fc:18:f8:be:79:91:33:74:3c:98:
33:23:ee:21:77:47:b5:98:98:33:c9:c4:99:c5:eb:
40:cf:c5:25:f7:f1:59:5b:42:28:02:d8:6e:1e:78:
0f:40:0d:ac:50:69:3e:65:4c:4a:f2:0b:dc:f5:ee:
df:dd:2a:d8:92:bf:ca:1f:05:02:31:6e:2d:29:a9:
0e:cc:4a:eb:a4:9b:90:a1:72:da:26:eb:a6:06:88:
e6:8b:58:b0:be:04:02:76:2e:fe:fe:48:6a:4a:91:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:81:6F:84:2F:86:CF:E5:36:C2:F4:FA:F3:57:7A:C6:D6:58:6C:75
X509v3 Authority Key Identifier:
keyid:51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2f:a7:0e:0e:bd:52:c1:f6:c6:42:43:1b:a9:e6:ab:20:6b:
6f:a4:be:8e:20:0c:46:7d:38:dd:66:8b:27:22:33:78:d7:46:
90:61:51:67:e8:76:f0:26:a9:13:79:36:34:a8:53:01:95:8b:
50:e5:a8:bd:f5:c3:aa:08:71:3e:a1:6f:99:37:73:51:f2:4b:
1e:3a:bb:cb:18:d1:f2:2a:5c:55:46:ea:e6:ca:0d:ba:85:0e:
4b:81:0b:23:a9:8a:87:31:6e:3b:57:ee:17:2f:8a:93:65:b5:
6f:88:8c:b7:96:33:d3:e3:96:b6:89:2a:41:b6:72:2e:cd:95:
2b:f2:07:e3:65:aa:a9:0a:27:1e:b4:df:52:7b:5b:91:75:51:
fd:b3:44:ff:77:f3:87:d3:53:db:f6:87:3f:3d:da:b7:ff:82:
cf:de:20:7c:8e:74:8d:a5:45:12:01:11:07:01:7b:90:84:0a:
fa:2b:c9:60:48:79:65:81:1f:32:ff:80:55:51:a1:39:b1:09:
f4:d9:34:7c:2e:fc:10:b8:75:f6:f3:37:66:57:34:79:46:37:
46:c1:81:fa:61:59:af:ed:40:84:2d:ea:6d:1e:6c:6f:01:ba:
e7:2a:9d:0a:f5:fd:6c:c9:79:db:79:ef:84:a0:8b:7f:ca:3c:
a2:2f:9d:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgxNTExMTAvBgNVBAUTKDUxMjRBMDRFMjNBQUREQTQ0RDk0QUIwRDRBQjJDMEI3
QjIwQkZDNzUwHhcNMjYwMzI2MTgyMjAwWhcNMjYwNDAyMTgyMjAwWjAYMRYwFAYD
VQQDEw02OWM1Nzk0OC1jNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtzh4U/92rmbr4q6JSW9lqKuFZ8hV8Oyrg9GfB1Ju68VzN4jAtzDBFPTtYTVT
Iw2fXDdpvqQATqGlpQdLIZfrUq77+UR2HGnvFVjHOFEnATTPhn43QtFwFjoYJlYy
fQhPTihXOksU3AEslgfiWo1LjZFRKAd6pevKCGZjirjL1SGIzujCsbrLKpofuLh4
ToMp52zYk7kwUS/8fPwY+L55kTN0PJgzI+4hd0e1mJgzycSZxetAz8Ul9/FZW0Io
AthuHngPQA2sUGk+ZUxK8gvc9e7f3SrYkr/KHwUCMW4tKakOzErrpJuQoXLaJuum
Bojmi1iwvgQCdi7+/khqSpGHkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHaBb4Qv
hs/lNsL0+vNXesbWWGx1MB8GA1UdIwQYMBaAFFEkoE4jqt2kTZSrDUqywLeyC/x1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODE1MS83MDExNERBQTBD
NTcxMUVBOTg1MTAyNTZDNEY5QUUwMi9VU1NnVGlPcTNhUk5sS3NOU3JMQXQ3SUxf
SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VTU2dUaU9xM2FSTmxLc05TckxBdDdJTF9IVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODE1MS83MDExNERBQTBDNTcxMUVBOTg1MTAyNTZDNEY5QUUwMi9VU1NnVGlPcTNh
Uk5sS3NOU3JMQXQ3SUxfSFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfi+nDg69UsH2xkJDG6nmqyBrb6S+jiAMRn043WaLJyIzeNdGkGFRZ+h28Cap
E3k2NKhTAZWLUOWovfXDqghxPqFvmTdzUfJLHjq7yxjR8ipcVUbq5soNuoUOS4EL
I6mKhzFuO1fuFy+Kk2W1b4iMt5Yz0+OWtokqQbZyLs2VK/IH42WqqQonHrTfUntb
kXVR/bNE/3fzh9NT2/aHPz3at/+Cz94gfI50jaVFEgERBwF7kIQK+ivJYEh5ZYEf
Mv+AVVGhObEJ9Nk0fC78ELh19vM3Zlc0eUY3RsGB+mFZr+1AhC3qbR5sbwG65yqd
CvX9bMl523nvhKCLf8o8oi+dhA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:04 2026 by rpki-client