
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json)
Hash identifier: cBpd+NybtKZfAUplsoQSWtMdkP3q/yZDBQDGqRWL9pg=
Subject key identifier: 77:AF:A2:3C:4E:C5:5A:EF:55:71:4D:81:32:BB:0D:66:B1:F8:10:13
Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB
Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
Certificate serial: 1248
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
Manifest number: 1230
Signing time: Tue 12 May 2026 17:09:33 +0000
Manifest this update: Tue 12 May 2026 17:09:33 +0000
Manifest next update: Tue 19 May 2026 17:09:33 +0000
Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: Ev1ZtvqNQUC4rYuqUneAPM52kWMmiABSjOywZqxi58M=)
2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: 1PUveXSVNEFsI6eTf+ATt+sd0I0xyK56lA2WpD1UOWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl
rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4680 (0x1248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
Validity
Not Before: May 12 17:09:33 2026 GMT
Not After : May 19 17:09:33 2026 GMT
Subject: CN=6a035ecd-da70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:fa:b5:8e:67:e3:84:55:bf:ee:c3:5a:e5:
20:99:78:aa:a1:65:d3:d4:eb:1b:3b:40:b8:0e:b8:
c1:ce:4a:06:a4:79:41:e5:ea:a1:6b:8d:19:a1:f6:
bc:57:ca:f4:1b:f0:29:0b:85:9d:82:bb:56:85:6e:
3e:f6:f3:99:aa:d3:11:6f:eb:94:f5:2f:3f:cb:c9:
3f:61:ea:49:35:77:e8:58:80:60:6a:6a:bc:59:40:
b2:39:66:2b:5f:e7:e3:ef:a1:29:15:34:bf:8c:67:
76:e8:9d:3f:06:89:cc:59:d9:35:e7:c3:93:23:b8:
c5:2c:19:46:bb:f7:c3:a8:59:3d:fa:56:4c:d5:fc:
fe:44:9b:37:3a:14:33:bb:02:20:74:a8:fb:2f:b3:
fb:7f:6f:15:82:b7:8c:80:a2:85:6f:1b:6f:ca:50:
3e:ed:8b:ef:94:65:6c:e8:95:d0:a5:31:00:a3:16:
06:d1:9c:a6:77:71:a6:40:07:bb:c1:a0:1e:ad:ab:
88:ac:db:74:2c:59:b3:3c:ef:fd:15:5b:c0:17:e0:
39:a8:32:0a:a0:11:94:82:05:a4:62:95:05:9a:11:
4d:64:e8:c2:56:55:c0:44:24:6e:ea:2d:bb:ef:e8:
89:94:22:e8:97:46:68:aa:39:4a:d4:08:3f:46:95:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AF:A2:3C:4E:C5:5A:EF:55:71:4D:81:32:BB:0D:66:B1:F8:10:13
X509v3 Authority Key Identifier:
keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:b3:54:2e:09:77:83:98:ad:9d:d0:ee:e4:a4:8b:a5:56:11:
7a:80:b1:16:e4:80:77:7c:8c:b1:71:f0:23:14:97:0a:97:02:
37:a2:17:05:23:d9:f1:b8:40:08:bb:34:a3:b8:d0:08:df:aa:
6a:12:34:21:55:68:fe:04:99:b9:5c:98:93:f5:75:ea:c2:1a:
d1:c1:df:d0:98:83:97:46:83:16:c9:20:85:e6:b3:f6:99:bf:
e8:61:05:ed:0a:18:36:b8:00:71:41:e6:d2:db:f7:9c:e6:7f:
b9:cb:cb:84:45:02:1c:4b:2a:3c:5c:36:0c:23:2f:47:3f:69:
f0:b3:ca:16:48:72:9b:bf:ab:6e:3f:00:bf:fc:02:c4:8b:2f:
c8:4f:d3:fb:d4:9d:c8:15:4e:e4:46:ff:89:a4:6f:c1:48:a7:
f5:8e:6b:0f:d7:e5:ef:83:14:24:7d:5e:1b:65:8a:45:51:7c:
e0:78:14:0a:a8:10:60:eb:47:a7:c4:1d:00:6c:1a:60:24:61:
8c:af:c0:90:8d:25:c1:e1:29:93:c1:44:b5:d2:99:88:05:9c:
40:26:0f:1f:f8:c3:38:43:65:67:7d:73:e6:95:43:1f:0f:ab:
9d:30:c3:10:03:f4:7d:3f:64:29:1a:7a:bc:aa:29:3e:22:3b:
ca:0e:7b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:39 2026 by rpki-client