
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
File: hYu8kCwHf24DE67cSds25v7yNLI.mft (raw, json)
Hash identifier: 7iwlGJ8xEPxhz4+PQpiVAd+/ApiLjZus+oMOHOEGXBA=
Subject key identifier: 25:83:C7:14:F8:34:F2:0D:46:3D:33:64:25:4E:EC:A9:21:31:EF:7B
Authority key identifier: 85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
Certificate issuer: /CN=A91DE334/serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Certificate serial: 48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
Manifest number: 48
Signing time: Mon 11 May 2026 08:33:13 +0000
Manifest this update: Mon 11 May 2026 08:33:12 +0000
Manifest next update: Mon 18 May 2026 08:33:12 +0000
Files and hashes: 1: hYu8kCwHf24DE67cSds25v7yNLI.crl (hash: HjOUEexTrzPkdBo/tqIy/RNpPX1yNkTJ7dS7h0addHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE334, serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Validity
Not Before: May 11 08:33:12 2026 GMT
Not After : May 18 08:33:12 2026 GMT
Subject: CN=6a019449-d8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:d4:4e:ea:57:22:2c:2b:4d:37:e1:4d:d7:
a3:aa:ce:45:28:3e:c4:2c:62:59:91:45:65:eb:91:
84:b9:90:23:d7:ba:fe:9f:62:57:2b:92:ff:01:f1:
e1:4c:33:de:d6:87:0d:95:39:76:88:5d:2f:8b:28:
5a:f0:9c:ba:d4:c4:c3:19:6b:3a:5c:16:06:99:c1:
29:0a:fd:0b:37:e7:f2:16:76:aa:0c:05:87:30:d7:
b2:47:97:30:d0:46:8a:50:de:35:08:44:3f:da:cd:
e1:a8:3f:dc:61:f4:8b:a7:42:7f:05:97:a0:79:ca:
ce:4c:fa:a1:5e:00:8e:4c:64:ab:23:80:f7:ef:f2:
42:ed:e3:ee:d4:bd:dc:d6:d3:6c:b9:e7:9a:b3:de:
e4:bb:12:61:f3:7e:36:75:d9:08:3c:6f:08:11:09:
4f:39:9a:2f:f5:3c:36:5c:1d:b2:c9:f3:ad:ed:db:
a4:95:ef:97:fa:e2:c2:49:ad:b8:1f:cb:fb:68:c9:
bf:f4:e9:a7:30:4a:db:54:b9:71:2b:75:90:43:07:
06:bc:10:17:cc:ed:35:f0:81:ac:29:6a:b7:df:15:
f0:2a:5b:67:25:51:2e:11:19:28:83:31:94:e8:e8:
28:2e:15:a2:f6:f7:86:6e:4f:41:6b:5a:ac:1e:5e:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:83:C7:14:F8:34:F2:0D:46:3D:33:64:25:4E:EC:A9:21:31:EF:7B
X509v3 Authority Key Identifier:
keyid:85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:fc:d8:af:a2:7d:f9:2a:c6:38:1d:2a:9a:a3:ba:d9:23:08:
a3:18:cf:fc:34:08:08:af:44:d8:91:35:2d:94:f3:f6:7c:83:
42:79:2b:37:cc:97:c9:8d:9d:8c:71:e2:01:72:55:a7:a5:27:
b5:9a:66:6f:9e:88:d8:35:ce:79:f2:47:7d:09:95:d9:d9:ed:
1b:3f:ff:d9:eb:02:3e:9b:65:e4:8d:20:e9:db:c6:3d:1d:2f:
79:49:fb:f9:b3:bf:59:1e:79:6f:aa:ba:77:2d:aa:09:99:7d:
0c:44:14:71:e1:25:52:51:c6:f3:19:7d:1a:a4:55:08:19:f2:
8b:a0:aa:0a:ff:c1:5f:d8:86:4d:8c:e8:ea:6c:81:a5:f2:ec:
b0:4f:00:51:5c:17:67:5c:6c:b9:eb:d3:b5:d2:ba:02:38:36:
0d:06:15:eb:1f:28:88:79:a6:75:99:34:fd:2d:dc:bc:01:ed:
11:44:7c:82:f9:43:d1:a0:92:f8:73:99:05:e6:4f:da:ac:a3:
b7:4f:11:81:11:8c:12:cd:19:e4:0d:4f:51:89:5b:04:74:ce:
f9:1b:db:df:36:f1:85:63:ed:e0:05:27:36:77:f9:d9:bd:20:
8c:90:4b:78:fe:d1:db:bb:0e:76:93:19:b4:d2:5a:a0:1d:17:
60:89:52:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:14:38 2026 by rpki-client