
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
File: HuygOndlK5BwteEzgJoiODDInPk.mft (raw, json)
Hash identifier: B4JaqYwAZlFIza0Bta/FhKBgPfK0Iqf/VQIrUWgr6n4=
Subject key identifier: 68:0A:D1:E5:77:F5:A1:D2:75:C5:5F:B6:2A:65:23:1F:09:16:A3:38
Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
Certificate issuer: /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Certificate serial: 030B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
Manifest number: 02FC
Signing time: Fri 27 Mar 2026 01:03:14 +0000
Manifest this update: Fri 27 Mar 2026 01:03:13 +0000
Manifest next update: Fri 03 Apr 2026 01:03:13 +0000
Files and hashes: 1: HuygOndlK5BwteEzgJoiODDInPk.crl (hash: HGR8vVpjMVSarpNMDvxlU+kf+ihos+ybkySSG8hYGug=)
2: 9A59F7D670E411F0A8BFEE2AC4F9AE02.roa (hash: bAK5cuhceC5CpvKLnGgFlPhfEcQEufvQZ5+D2IKnvDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl
rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779 (0x30b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAD56, serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Validity
Not Before: Mar 27 01:03:13 2026 GMT
Not After : Apr 3 01:03:13 2026 GMT
Subject: CN=69c5d752-b6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:94:90:28:87:d9:73:6d:41:95:47:a5:fa:
48:ae:e2:20:de:2b:5d:84:96:47:e5:8d:ab:03:8a:
62:12:9d:bd:ee:b0:15:f8:2b:07:55:db:37:64:6d:
bc:41:30:cb:85:67:9d:6c:ff:10:00:41:78:12:e3:
ac:02:10:23:8d:b9:3a:e4:8d:75:54:c6:c7:89:1e:
7b:27:96:79:39:d0:04:81:76:2e:a6:81:21:7a:22:
28:35:30:82:71:e5:34:7e:ab:c2:f9:d3:af:be:bf:
bf:ad:07:1d:a5:ed:7a:ea:28:d2:57:ef:cc:2d:4e:
bc:f6:40:26:e4:52:22:c6:67:22:5a:e9:cf:92:c3:
a3:ef:a8:f5:e4:39:a4:9a:14:60:62:7c:d5:60:69:
b5:07:b5:5e:4c:e8:54:fd:60:5d:40:a1:65:fc:a2:
39:42:c2:05:22:05:17:15:d3:20:50:b8:ad:b8:0a:
1f:80:7d:22:bc:0a:dc:46:0f:a7:90:3b:dc:e9:ae:
7f:13:4b:b3:9e:d8:c8:ce:2f:93:12:92:5c:03:83:
12:0d:b5:34:96:ca:2a:3e:71:02:ce:8b:e0:9f:13:
b2:43:a8:6f:63:2b:95:87:03:8e:17:01:72:c4:57:
f1:45:47:c8:c4:be:9f:19:8d:23:d7:3c:78:e3:d4:
dd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0A:D1:E5:77:F5:A1:D2:75:C5:5F:B6:2A:65:23:1F:09:16:A3:38
X509v3 Authority Key Identifier:
keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:16:35:56:bd:55:55:3c:0a:c7:aa:0e:87:40:37:59:8e:5b:
8e:a5:39:6b:99:06:00:8f:6b:10:f0:8e:de:c5:2f:3e:5c:01:
9a:17:62:fe:40:67:3e:0e:f7:16:dd:c0:33:af:23:da:79:ce:
45:56:bf:bc:99:70:61:5f:93:d7:1c:0f:26:f6:ce:8f:60:b0:
8b:72:75:6d:81:38:22:75:fa:1e:9f:d9:97:7c:5f:de:17:d6:
04:04:3e:18:3d:6b:73:4a:64:f6:71:fe:e6:30:9b:c1:77:4c:
db:06:1d:6b:4c:19:69:00:9c:4c:fc:3e:d0:95:4c:ee:05:8e:
9a:4e:0a:27:aa:ab:e6:9b:c6:f0:75:95:3b:7e:d2:54:86:ca:
fc:c4:fb:1c:e0:b5:b3:0f:9c:77:30:e2:c2:92:cb:64:86:fb:
1d:af:d0:0b:84:cc:0c:f1:9e:0d:fd:13:73:e3:14:09:f3:6d:
61:12:67:4b:a7:ae:71:0b:7f:c7:64:2a:d7:d8:90:d2:44:ed:
24:49:ce:00:e1:9d:32:77:ba:90:7e:89:7c:81:77:51:3b:bb:
d0:d8:0e:e6:0b:1e:e4:99:73:3a:4d:2b:dc:f7:6d:95:1f:e8:
1b:fb:df:40:6b:25:dd:aa:25:47:fb:d1:98:06:d2:8d:7b:d1:
31:7e:13:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFENTYxMTAvBgNVBAUTKDFFRUNBMDNBNzc2NTJCOTA3MEI1RTEzMzgwOUEyMjM4
MzBDODlDRjkwHhcNMjYwMzI3MDEwMzEzWhcNMjYwNDAzMDEwMzEzWjAYMRYwFAYD
VQQDEw02OWM1ZDc1Mi1iNmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqOOUkCiH2XNtQZVHpfpIruIg3itdhJZH5Y2rA4piEp297rAV+CsHVds3ZG28
QTDLhWedbP8QAEF4EuOsAhAjjbk65I11VMbHiR57J5Z5OdAEgXYupoEheiIoNTCC
ceU0fqvC+dOvvr+/rQcdpe166ijSV+/MLU689kAm5FIixmciWunPksOj76j15Dmk
mhRgYnzVYGm1B7VeTOhU/WBdQKFl/KI5QsIFIgUXFdMgULituAofgH0ivArcRg+n
kDvc6a5/E0uzntjIzi+TEpJcA4MSDbU0lsoqPnECzovgnxOyQ6hvYyuVhwOOFwFy
xFfxRUfIxL6fGY0j1zx449TdUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGgK0eV3
9aHSdcVftiplIx8JFqM4MB8GA1UdIwQYMBaAFB7soDp3ZSuQcLXhM4CaIjgwyJz5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQ1Ni84MThCNEQwMjFB
QUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1Qnd0ZUV6Z0pvaU9ERElu
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h1eWdPbmRsSzVCd3RlRXpnSm9pT0RESW5Qay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUQ1Ni84MThCNEQwMjFBQUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1
Qnd0ZUV6Z0pvaU9EREluUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALBY1Vr1VVTwKx6oOh0A3WY5bjqU5a5kGAI9rEPCO3sUvPlwBmhdi/kBnPg73
Ft3AM68j2nnORVa/vJlwYV+T1xwPJvbOj2Cwi3J1bYE4InX6Hp/Zl3xf3hfWBAQ+
GD1rc0pk9nH+5jCbwXdM2wYda0wZaQCcTPw+0JVM7gWOmk4KJ6qr5pvG8HWVO37S
VIbK/MT7HOC1sw+cdzDiwpLLZIb7Ha/QC4TMDPGeDf0Tc+MUCfNtYRJnS6eucQt/
x2Qq19iQ0kTtJEnOAOGdMne6kH6JfIF3UTu70NgO5gse5JlzOk0r3PdtlR/oG/vf
QGsl3aolR/vRmAbSjXvRMX4Teg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:39:53 2026 by rpki-client