
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json)
Hash identifier: MD8OKhVJCH2DgY98MZA3CMrmXgJ1oHyOhM4qQKSB/lQ=
Subject key identifier: E6:DB:B2:C0:5A:AE:BD:E5:4C:6C:95:A1:BA:32:FF:96:FE:25:66:4F
Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Certificate serial: 03D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
Manifest number: 03CC
Signing time: Wed 13 May 2026 00:45:21 +0000
Manifest this update: Wed 13 May 2026 00:45:20 +0000
Manifest next update: Wed 20 May 2026 00:45:20 +0000
Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: knjmgCPEnDtwjYW7kz/dGGpzem130nMjlycr8fobFQI=)
2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: DSIfNa17RdU77qIRp8z8Kzsgm5ZeTJKHenlHD4Tp8Bk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl
rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 983 (0x3d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Validity
Not Before: May 13 00:45:20 2026 GMT
Not After : May 20 00:45:20 2026 GMT
Subject: CN=6a03c9a1-93e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:90:8a:68:07:86:0b:0c:f1:82:bd:1d:7e:
36:b5:71:15:be:84:ba:e0:29:b8:89:6f:8d:da:3c:
99:53:0b:66:8a:51:81:0b:4e:d9:7f:75:f5:97:e7:
14:60:b4:bb:85:53:2a:7c:70:44:a9:a3:17:1e:1f:
f5:2a:a7:69:2c:96:b3:5d:4c:96:52:71:1e:2e:44:
3b:22:93:2e:68:b1:ad:31:0f:dd:20:2f:b0:c1:8f:
37:7c:29:a2:3c:ca:8c:6c:64:e1:5c:2d:0e:db:71:
c5:8b:45:01:57:ce:26:87:ff:12:ec:48:5f:2c:88:
ee:7d:a5:3f:7f:52:a7:45:01:86:70:a8:83:67:7e:
d2:28:f9:56:8e:c8:02:1a:32:ca:f8:89:24:16:c3:
58:7e:2f:15:75:e0:5c:92:71:b3:e4:13:36:e5:25:
33:db:d5:04:72:5e:3a:1a:14:f0:d8:3c:a5:5a:0e:
c6:8e:cc:c9:14:1d:df:af:e3:38:08:1d:b7:78:8e:
d0:92:16:10:73:23:51:83:7a:c0:da:44:e0:e7:37:
e8:fe:2e:e4:5b:8d:c8:9f:b4:29:6d:e2:af:a4:b4:
90:bc:12:e3:25:7b:90:20:7e:40:3b:78:d1:6d:5d:
51:a5:2f:df:73:6e:71:a7:2a:53:8c:75:5c:f8:4f:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DB:B2:C0:5A:AE:BD:E5:4C:6C:95:A1:BA:32:FF:96:FE:25:66:4F
X509v3 Authority Key Identifier:
keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:7e:a5:66:2b:90:43:93:2f:1c:8c:94:c2:23:e4:e9:42:e3:
43:18:f3:ff:70:a7:da:ec:98:6f:78:5c:b8:01:fa:be:a0:8c:
88:aa:5b:81:a6:57:ab:bc:a7:2b:ce:67:7b:e3:75:57:3c:89:
d1:0a:ab:bd:6e:9e:42:c7:6f:4b:30:43:79:43:78:4d:b1:21:
42:59:3e:a7:4b:cf:3e:8f:3c:97:bf:e4:0d:10:ae:2b:12:b7:
ac:d5:bb:b9:96:7e:4b:f6:7a:85:85:21:9e:a6:42:5b:24:2d:
56:9d:58:3c:09:99:1f:91:2e:df:6e:e6:de:64:44:c7:e5:5a:
3f:ec:f6:56:e9:e2:c4:b1:46:98:a3:83:d8:c2:38:73:40:01:
86:75:b9:11:12:20:33:2f:53:15:d9:b1:06:8e:60:fc:89:83:
10:64:5f:dc:f8:d5:77:39:b2:dd:55:0a:82:c6:86:68:c7:da:
a5:0b:a6:a6:b4:2f:49:33:d6:a5:8e:6b:aa:4c:1a:7f:98:21:
eb:f2:50:61:55:3b:49:f8:64:95:b0:74:d5:f8:b3:9b:21:d8:
b3:59:39:8e:ad:a2:a5:ac:49:45:5e:d5:ff:2e:65:c5:e1:a1:
89:b4:5c:2f:c2:aa:c3:1e:e1:ee:6f:14:02:db:45:f2:cd:cd:
67:e5:f1:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3
QjdEOUYxQzEwHhcNMjYwNTEzMDA0NTIwWhcNMjYwNTIwMDA0NTIwWjAYMRYwFAYD
VQQDEw02YTAzYzlhMS05M2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnoKQimgHhgsM8YK9HX42tXEVvoS64Cm4iW+N2jyZUwtmilGBC07Zf3X1l+cU
YLS7hVMqfHBEqaMXHh/1KqdpLJazXUyWUnEeLkQ7IpMuaLGtMQ/dIC+wwY83fCmi
PMqMbGThXC0O23HFi0UBV84mh/8S7EhfLIjufaU/f1KnRQGGcKiDZ37SKPlWjsgC
GjLK+IkkFsNYfi8VdeBcknGz5BM25SUz29UEcl46GhTw2DylWg7GjszJFB3fr+M4
CB23eI7QkhYQcyNRg3rA2kTg5zfo/i7kW43In7QpbeKvpLSQvBLjJXuQIH5AO3jR
bV1RpS/fc25xpypTjHVc+E9AwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFObbssBa
rr3lTGyVoboy/5b+JWZPMB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw
RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0
LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxn6lZiuQQ5MvHIyUwiPk6ULjQxjz/3Cn2uyYb3hcuAH6vqCMiKpbgaZXq7yn
K85ne+N1VzyJ0QqrvW6eQsdvSzBDeUN4TbEhQlk+p0vPPo88l7/kDRCuKxK3rNW7
uZZ+S/Z6hYUhnqZCWyQtVp1YPAmZH5Eu327m3mREx+VaP+z2VunixLFGmKOD2MI4
c0ABhnW5ERIgMy9TFdmxBo5g/ImDEGRf3PjVdzmy3VUKgsaGaMfapQumprQvSTPW
pY5rqkwaf5gh6/JQYVU7SfhklbB01fizmyHYs1k5jq2ipaxJRV7V/y5lxeGhibRc
L8Kqwx7h7m8UAttF8s3NZ+XxZg==
-----END CERTIFICATE-----
Generated at Wed May 13 06:52:56 2026 by rpki-client