
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
File: HuygOndlK5BwteEzgJoiODDInPk.mft (raw, json)
Hash identifier: 2McufcA8fNdM5PFaU7503C8075qjkP56GxRA1G3AMtk=
Subject key identifier: CB:37:C7:74:B8:DB:60:03:8F:0C:32:EB:F7:F9:9D:46:94:DF:A3:25
Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
Certificate issuer: /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Certificate serial: 036A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
Manifest number: 035B
Signing time: Tue 29 Sep 2026 01:04:39 +0000
Manifest this update: Tue 29 Sep 2026 01:04:38 +0000
Manifest next update: Tue 06 Oct 2026 01:04:38 +0000
Files and hashes: 1: HuygOndlK5BwteEzgJoiODDInPk.crl (hash: tZJS/Q8TjL1k2HlchGRqW23nhDEg9P6xasH5+6CIP04=)
2: 9A59F7D670E411F0A8BFEE2AC4F9AE02.roa (hash: bAK5cuhceC5CpvKLnGgFlPhfEcQEufvQZ5+D2IKnvDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl
rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 01:04:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874 (0x36a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAD56, serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Validity
Not Before: Sep 29 01:04:38 2026 GMT
Not After : Oct 6 01:04:38 2026 GMT
Subject: CN=6abb0ea7-9217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:85:91:f7:7b:cc:63:43:8f:4c:95:cd:de:
61:65:cf:aa:b1:a0:7b:ae:62:38:1a:06:8e:ec:ac:
36:d0:5a:50:7e:a0:82:b1:58:4a:34:55:11:01:1c:
48:5e:45:e3:f1:33:33:fe:7a:1e:47:c0:98:60:f3:
2d:78:58:b2:46:34:8a:af:88:bd:7a:5b:c3:67:14:
e3:0d:08:63:aa:1e:82:8a:4f:70:ac:4c:f6:d8:ed:
79:28:20:d6:57:74:8e:fe:0a:ed:fc:2e:3b:0b:c7:
a4:93:b3:d8:f3:b9:f7:fa:98:97:3d:f0:b1:02:03:
53:93:bc:9b:29:1b:9b:18:a1:24:b5:45:20:17:e5:
e9:70:5a:fc:c3:e3:31:8f:cc:c0:af:8e:77:6a:8c:
8e:ff:7d:c6:60:25:b3:bc:df:91:71:b7:b3:4f:af:
27:3e:a3:ca:b5:9f:e7:3f:3d:9c:f7:23:f1:9a:64:
0c:c5:b8:22:42:12:9a:69:46:8b:28:b2:8d:64:35:
66:66:49:e0:ed:50:21:5f:0b:a3:89:37:ef:e7:c9:
d0:1e:a6:56:1b:f2:bf:15:28:f1:13:a7:4c:a4:f6:
64:7c:73:d9:dc:38:d0:f2:2a:4e:74:85:ec:f1:99:
b5:73:11:3d:f7:a8:90:6a:80:7c:b2:f0:6b:29:1a:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:37:C7:74:B8:DB:60:03:8F:0C:32:EB:F7:F9:9D:46:94:DF:A3:25
X509v3 Authority Key Identifier:
keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:18:7b:c0:96:ed:20:aa:39:3c:27:52:08:3b:43:76:29:f2:
db:96:7b:0f:6f:dc:cf:2b:c1:9f:5e:15:44:c2:2e:9e:d4:1e:
d1:66:d8:3f:c6:d3:47:65:51:ca:30:e6:fe:bb:dc:35:89:fd:
ab:34:ca:7d:22:6d:68:99:be:5a:a8:50:40:44:11:02:1c:8e:
82:96:b9:30:40:05:c1:f9:22:c6:bf:c6:4b:a9:a6:a7:35:dc:
bf:b3:33:0d:e3:ad:39:6d:b8:20:1a:74:87:1b:cc:e4:1c:4d:
f2:31:b1:e0:f5:29:fc:eb:93:74:fc:f8:91:2b:8a:fc:df:8c:
26:df:db:58:f5:34:5b:7c:65:d4:19:8d:cf:d7:08:c5:d9:1b:
0b:c7:12:e8:b7:0c:79:49:9d:19:f3:e3:fe:d0:4b:94:0d:00:
dc:2e:a3:54:5f:8c:24:20:be:08:c9:d2:b3:a4:3d:53:05:c8:
0d:9b:52:e8:7f:81:97:f7:f8:21:0d:32:35:cd:5f:73:ee:38:
57:a1:05:f4:bc:c7:f8:f3:d9:25:56:4c:27:b7:6d:e0:d4:98:
a2:e8:04:ec:cf:7f:bb:d7:79:6d:17:f7:90:63:e3:41:23:14:
29:cc:00:0e:d1:4d:d0:3a:23:1c:ab:67:38:9e:93:86:06:62:
1b:a0:8f:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFENTYxMTAvBgNVBAUTKDFFRUNBMDNBNzc2NTJCOTA3MEI1RTEzMzgwOUEyMjM4
MzBDODlDRjkwHhcNMjYwOTI5MDEwNDM4WhcNMjYxMDA2MDEwNDM4WjAYMRYwFAYD
VQQDEw02YWJiMGVhNy05MjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwl+Fkfd7zGNDj0yVzd5hZc+qsaB7rmI4GgaO7Kw20FpQfqCCsVhKNFURARxI
XkXj8TMz/noeR8CYYPMteFiyRjSKr4i9elvDZxTjDQhjqh6Cik9wrEz22O15KCDW
V3SO/grt/C47C8ekk7PY87n3+piXPfCxAgNTk7ybKRubGKEktUUgF+XpcFr8w+Mx
j8zAr453aoyO/33GYCWzvN+RcbezT68nPqPKtZ/nPz2c9yPxmmQMxbgiQhKaaUaL
KLKNZDVmZkng7VAhXwujiTfv58nQHqZWG/K/FSjxE6dMpPZkfHPZ3DjQ8ipOdIXs
8Zm1cxE996iQaoB8svBrKRrsAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMs3x3S4
22ADjwwy6/f5nUaU36MlMB8GA1UdIwQYMBaAFB7soDp3ZSuQcLXhM4CaIjgwyJz5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQ1Ni84MThCNEQwMjFB
QUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1Qnd0ZUV6Z0pvaU9ERElu
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h1eWdPbmRsSzVCd3RlRXpnSm9pT0RESW5Qay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUQ1Ni84MThCNEQwMjFBQUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1
Qnd0ZUV6Z0pvaU9EREluUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXBh7wJbtIKo5PCdSCDtDdiny25Z7D2/czyvBn14VRMIuntQe0WbYP8bTR2VR
yjDm/rvcNYn9qzTKfSJtaJm+WqhQQEQRAhyOgpa5MEAFwfkixr/GS6mmpzXcv7Mz
DeOtOW24IBp0hxvM5BxN8jGx4PUp/OuTdPz4kSuK/N+MJt/bWPU0W3xl1BmNz9cI
xdkbC8cS6LcMeUmdGfPj/tBLlA0A3C6jVF+MJCC+CMnSs6Q9UwXIDZtS6H+Bl/f4
IQ0yNc1fc+44V6EF9LzH+PPZJVZMJ7dt4NSYougE7M9/u9d5bRf3kGPjQSMUKcwA
DtFN0DojHKtnOJ6ThgZiG6CPKQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:21:59 2026 by rpki-client