
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json)
Hash identifier: LAFoqhYblkchbu3TaBlrW3o0b3pK36pFtoCgmHr9PK8=
Subject key identifier: 19:58:DA:3D:2A:1A:17:ED:C6:80:5D:53:86:B4:C5:10:E3:59:79:49
Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB
Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
Certificate serial: 122F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
Manifest number: 1217
Signing time: Tue 24 Mar 2026 17:02:38 +0000
Manifest this update: Tue 24 Mar 2026 17:02:37 +0000
Manifest next update: Tue 31 Mar 2026 17:02:37 +0000
Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: hoXEsywfc2z4OYCK73JA22pm1tZpN7YzE1yMZpIre2M=)
2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: 1PUveXSVNEFsI6eTf+ATt+sd0I0xyK56lA2WpD1UOWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl
rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4655 (0x122f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
Validity
Not Before: Mar 24 17:02:37 2026 GMT
Not After : Mar 31 17:02:37 2026 GMT
Subject: CN=69c2c3ae-9263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:90:45:c5:75:8c:76:9e:72:58:ce:a7:ab:12:
12:54:4d:94:a6:26:d7:a6:68:be:94:2e:7a:85:fd:
03:a3:b2:d8:1f:3a:e0:df:b8:86:ac:b9:2b:56:67:
89:04:6c:02:87:d4:13:27:f8:a9:0c:db:11:31:04:
94:4b:0e:12:42:91:79:ba:a5:f6:4f:0a:f3:68:eb:
9f:f7:4a:79:88:dd:39:02:2b:26:7f:d5:30:46:71:
25:60:8b:b4:5a:77:dc:ec:e2:c2:27:fe:c1:a1:9c:
fd:3f:ea:45:1e:df:2d:87:1f:d8:9f:9b:b4:26:15:
6a:3a:44:d5:e2:74:d2:f4:61:44:21:35:fb:a9:16:
75:14:0d:db:a6:f7:e7:dc:06:ff:1f:26:f2:63:cb:
72:ba:2c:a2:70:02:45:ca:ce:e3:c6:8a:92:53:d2:
59:4e:a2:22:2a:8e:67:9a:b6:de:0a:ce:f6:84:c7:
cb:29:95:c1:b4:7b:c0:10:82:9a:9b:e8:36:f8:81:
37:c2:42:96:82:42:ea:cd:4d:48:24:ad:87:1a:43:
e5:a0:23:d3:09:fd:22:c8:b2:d3:7d:78:67:2a:d7:
32:4f:ae:78:fc:b0:fa:80:99:63:ba:c5:28:e7:12:
1f:45:81:49:a1:57:df:15:d1:c6:de:c2:0e:0b:1e:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:58:DA:3D:2A:1A:17:ED:C6:80:5D:53:86:B4:C5:10:E3:59:79:49
X509v3 Authority Key Identifier:
keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:d4:4a:cd:d1:aa:2d:54:0f:67:9f:77:aa:77:5c:94:c8:18:
36:1f:3b:8c:98:d9:23:63:e0:1b:5d:d2:5c:98:48:b9:f7:4f:
5e:cb:d4:81:86:10:c3:4a:a4:8b:9c:cb:ad:39:bf:38:64:38:
fc:8c:95:c7:28:6e:f5:fb:93:e3:1b:9e:ba:85:a2:d5:e5:67:
5c:7d:e0:45:9e:64:1a:cf:af:45:86:5e:e9:3c:4f:7a:1d:cc:
88:39:e8:f1:1d:63:e6:e9:d0:bc:dc:2e:73:95:93:a9:3c:76:
5f:40:1c:5a:f0:70:44:16:57:1a:13:6a:fd:3a:57:0a:fb:cf:
2c:83:1e:f0:0a:ef:26:b9:30:ca:9e:2e:ca:72:e7:06:86:f2:
39:55:ad:e2:d2:ba:c1:e5:32:02:7d:e1:b5:36:ce:15:00:b1:
66:32:9c:de:5f:42:27:4d:83:db:d7:6d:fc:36:5b:90:70:5f:
78:be:df:a0:31:5c:ef:2e:64:d5:68:35:68:b9:18:19:0f:9d:
96:50:a5:ee:5e:34:aa:0a:7e:39:c4:8e:8a:da:41:db:7f:cd:
f3:a2:a0:20:f0:ae:94:80:f7:2c:0f:cd:0d:f3:35:18:ab:8b:
86:61:4b:04:1a:38:ea:f6:50:27:ca:fb:6d:99:5c:cd:59:c3:
4c:33:07:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:51 2026 by rpki-client