
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft
File: Hy55yPeszIoD-1tKOvzF9pMbN4I.mft (raw, json)
Hash identifier: i0am9FXXeK0k7NLDXKFXKvi+sbXMvwNnImSLzUuwsVk=
Subject key identifier: 61:3D:47:60:7D:52:B5:C6:DA:00:34:B1:47:C1:89:57:C3:B7:5E:1B
Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82
Certificate issuer: /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782
Certificate serial: 17D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft
Manifest number: 17C9
Signing time: Thu 26 Mar 2026 16:31:47 +0000
Manifest this update: Thu 26 Mar 2026 16:31:47 +0000
Manifest next update: Thu 02 Apr 2026 16:31:47 +0000
Files and hashes: 1: Hy55yPeszIoD-1tKOvzF9pMbN4I.crl (hash: 7tMQp4sRdbkXMY7EyBxwnhfuKebODpUjmB65GuT2088=)
2: 02181C4CE13511E7B0D71C83C4F9AE02.roa (hash: v3H/p5Ktvsz+MkxJKek+k3rhTh/FkFVJc40/XtTzh38=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl
rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6102 (0x17d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB09C, serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782
Validity
Not Before: Mar 26 16:31:47 2026 GMT
Not After : Apr 2 16:31:47 2026 GMT
Subject: CN=69c55f73-1796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:80:f8:60:f6:80:dc:b9:62:5f:ae:c2:b6:6f:
42:08:0c:0f:2f:a1:7e:07:01:cc:5c:e0:1f:79:56:
de:fe:29:35:d1:b2:82:fe:4e:56:6d:db:c8:3c:f4:
ce:b6:7a:a1:c9:3e:26:ac:0b:fd:a5:1c:74:ec:86:
1c:ea:0d:e2:0f:07:be:62:ac:b8:65:14:96:22:a3:
65:e9:78:10:04:8a:8c:48:77:18:ea:4e:21:fd:ae:
b9:e2:02:21:16:0d:61:98:45:14:23:39:78:ca:73:
87:c0:1d:61:19:75:8b:90:21:fe:ed:01:de:f7:66:
f7:d2:f1:5a:47:d6:35:63:31:32:a3:2d:0a:ca:ef:
57:ea:af:43:fd:51:3d:e9:90:3a:99:75:5d:eb:27:
10:0f:57:c3:12:3a:ac:fd:69:09:68:66:31:8c:fd:
07:1c:34:8f:d3:d0:24:0b:f6:4a:5c:18:4c:d3:e6:
9a:cd:f5:85:48:0c:c2:d8:03:51:a4:4c:f7:9f:b6:
cc:7c:59:90:c1:60:ae:ad:9d:d0:7b:a2:ed:05:e7:
42:09:a4:cd:02:80:29:57:d4:a1:23:45:92:9a:08:
64:bf:1b:2e:58:41:9c:cb:0b:cb:bd:85:10:fe:a9:
f4:57:81:66:9a:47:96:62:95:6b:c4:95:82:f7:2d:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3D:47:60:7D:52:B5:C6:DA:00:34:B1:47:C1:89:57:C3:B7:5E:1B
X509v3 Authority Key Identifier:
keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:5f:43:3f:81:84:c8:79:df:29:51:b2:f9:26:8c:23:18:60:
20:8d:b6:af:61:51:53:ac:5d:bc:82:74:59:33:92:a0:ab:71:
ae:a0:1e:8d:0c:c3:74:43:96:44:05:fe:df:90:7e:08:1a:0e:
7f:74:32:d0:77:1f:96:aa:f4:0e:68:34:0a:6a:6c:85:a2:03:
02:e7:30:b5:86:35:73:9d:92:da:11:5d:1a:f8:6a:62:47:cc:
61:14:b7:6e:90:c8:e9:3e:f8:8f:ab:eb:4e:43:21:a0:ef:84:
92:2c:61:0f:7e:8d:0c:24:de:86:48:9e:41:aa:66:52:7d:33:
77:3b:24:9f:6d:6e:70:de:fb:e7:72:75:e9:93:68:c9:30:08:
b9:5f:e2:8f:0a:8e:bb:61:96:d6:27:2c:cf:6f:b1:63:1f:af:
f9:5b:eb:3e:2b:d3:51:5c:a6:a4:de:46:88:63:79:ee:ed:78:
a2:59:4a:7b:84:00:b6:b0:5a:ac:a4:2b:37:ca:c7:5f:b8:07:
3b:fe:cb:b1:8c:66:7a:77:67:19:df:52:21:da:be:b1:44:d6:
df:85:58:39:a3:55:55:27:5e:66:5d:9e:47:a0:d5:39:b0:1f:
98:14:54:25:d5:6f:c8:28:60:6e:fc:ca:28:01:ff:8e:78:a2:
8a:b4:fb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:58:26 2026 by rpki-client