
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
File: hYu8kCwHf24DE67cSds25v7yNLI.mft (raw, json)
Hash identifier: Twn823VFk65+pzQ82MpYsAb4ekfDbWf8/Ln9OLrY8io=
Subject key identifier: F1:0B:48:A8:1E:94:7A:E2:5C:D2:C8:73:60:08:4C:3A:46:F1:3C:B8
Authority key identifier: 85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
Certificate issuer: /CN=A91DE334/serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
Manifest number: 6C
Signing time: Thu 23 Jul 2026 09:53:59 +0000
Manifest this update: Thu 23 Jul 2026 09:53:59 +0000
Manifest next update: Thu 30 Jul 2026 09:53:59 +0000
Files and hashes: 1: hYu8kCwHf24DE67cSds25v7yNLI.crl (hash: zRHX9ckaoQ55cQiweAWEhlO/aUMsXCPe9vnOm5xcjq4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:53:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE334, serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Validity
Not Before: Jul 23 09:53:59 2026 GMT
Not After : Jul 30 09:53:59 2026 GMT
Subject: CN=6a61e4b7-3773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:0a:c2:e2:39:7c:c5:cc:2d:a6:fe:c0:08:
df:5c:22:47:48:dd:21:4e:73:e0:96:b4:1c:ed:bf:
72:2f:21:7d:12:83:6a:fc:80:ac:c4:b4:26:e8:82:
67:68:3b:a5:74:2b:a9:8a:bb:00:4c:23:74:f9:7c:
a9:cf:c3:16:99:37:1a:67:88:f7:00:38:33:97:83:
d0:cb:c1:ce:b2:6c:65:7b:79:48:96:06:7e:db:68:
04:e4:9c:f6:74:fe:a0:c4:2f:ac:74:05:74:fd:3a:
a3:db:98:43:86:8f:1a:80:65:86:1c:19:d7:3f:a2:
e7:ad:1b:d7:4b:a8:24:7b:37:bd:35:85:13:f1:f7:
b7:c6:38:09:36:8c:b8:bb:d9:8b:58:b2:eb:c5:c5:
f5:2b:7e:b3:96:ef:6f:bb:4b:4e:99:e3:c7:c7:b6:
56:58:b2:51:e7:ca:80:5b:aa:cb:0d:38:bf:a4:df:
af:13:ca:55:a1:ac:f8:bf:34:bd:c8:6d:91:48:d4:
5d:86:b6:26:ad:ea:2c:bf:22:73:6b:b7:75:37:70:
fb:51:05:b1:7c:fd:3f:fa:a7:5a:0e:09:61:4f:54:
db:24:78:8e:7b:8b:ac:1b:db:50:fc:ed:8e:9e:f5:
aa:e1:dd:0d:55:94:2d:a2:57:ba:e4:39:7a:92:db:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0B:48:A8:1E:94:7A:E2:5C:D2:C8:73:60:08:4C:3A:46:F1:3C:B8
X509v3 Authority Key Identifier:
keyid:85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:b4:31:3f:0d:69:dc:7b:88:27:52:c8:2b:89:5a:c1:1f:a0:
82:e8:2f:74:42:47:4b:a1:6a:e9:12:c4:d5:b2:b5:ab:62:e0:
6f:c7:23:10:09:74:98:80:1c:3f:31:06:cc:61:b6:03:70:6d:
f1:e4:f7:23:d0:b5:28:78:29:49:10:0b:e1:03:72:58:ec:92:
e7:30:02:c5:54:24:25:ad:fd:27:59:5f:22:e5:7d:3a:1f:bb:
48:03:cc:67:8c:1d:69:96:e7:b6:5b:2b:52:35:4b:20:05:08:
fa:18:c9:be:37:20:38:c4:33:90:57:10:d2:02:70:fe:09:92:
a3:6b:2a:c3:53:ac:b2:b2:2f:4a:40:1b:e3:00:f6:c3:c6:57:
30:ae:b4:ed:d6:b0:e3:64:52:3f:2d:31:6f:8e:f9:91:04:15:
75:65:5a:e7:17:fc:d6:4e:e6:8b:af:c0:10:25:22:0d:a8:23:
28:c3:f5:d0:fe:0a:bb:3d:c1:af:57:5c:55:b5:44:b4:3c:fc:
45:d4:4f:99:f9:e8:fc:e0:d9:c8:03:8c:c0:96:48:17:72:c2:
bc:32:ba:4e:c2:00:d7:5e:e9:42:59:55:21:32:cf:92:9d:9c:
fb:cc:99:38:6c:f9:09:e3:06:06:e9:29:bb:9c:53:79:ce:fd:
8f:19:70:a9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RTMzNDExMC8GA1UEBRMoODU4QkJDOTAyQzA3N0Y2RTAzMTNBRURDNDlEQjM2RTZG
RUYyMzRCMjAeFw0yNjA3MjMwOTUzNTlaFw0yNjA3MzAwOTUzNTlaMBgxFjAUBgNV
BAMTDTZhNjFlNGI3LTM3NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1kgrC4jl8xcwtpv7ACN9cIkdI3SFOc+CWtBztv3IvIX0Sg2r8gKzEtCbogmdo
O6V0K6mKuwBMI3T5fKnPwxaZNxpniPcAODOXg9DLwc6ybGV7eUiWBn7baATknPZ0
/qDEL6x0BXT9OqPbmEOGjxqAZYYcGdc/ouetG9dLqCR7N701hRPx97fGOAk2jLi7
2YtYsuvFxfUrfrOW72+7S06Z48fHtlZYslHnyoBbqssNOL+k368TylWhrPi/NL3I
bZFI1F2Gtiat6iy/InNrt3U3cPtRBbF8/T/6p1oOCWFPVNskeI57i6wb21D87Y6e
9arh3Q1VlC2iV7rkOXqS21QxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8QtIqB6U
euJc0shzYAhMOkbxPLgwHwYDVR0jBBgwFoAUhYu8kCwHf24DE67cSds25v7yNLIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMzM0L0M1MTI2Q0NFRTU3
OTExRjA4MzZFRUFBMTQxNkY1NkJDL2hZdThrQ3dIZjI0REU2N2NTZHMyNXY3eU5M
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaFl1OGtDd0hmMjRERTY3Y1NkczI1djd5TkxJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF
MzM0L0M1MTI2Q0NFRTU3OTExRjA4MzZFRUFBMTQxNkY1NkJDL2hZdThrQ3dIZjI0
REU2N2NTZHMyNXY3eU5MSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBDtDE/DWnce4gnUsgriVrBH6CC6C90QkdLoWrpEsTVsrWrYuBvxyMQCXSYgBw/
MQbMYbYDcG3x5Pcj0LUoeClJEAvhA3JY7JLnMALFVCQlrf0nWV8i5X06H7tIA8xn
jB1plue2WytSNUsgBQj6GMm+NyA4xDOQVxDSAnD+CZKjayrDU6yysi9KQBvjAPbD
xlcwrrTt1rDjZFI/LTFvjvmRBBV1ZVrnF/zWTuaLr8AQJSINqCMow/XQ/gq7PcGv
V1xVtUS0PPxF1E+Z+ej84NnIA4zAlkgXcsK8MrpOwgDXXulCWVUhMs+SnZz7zJk4
bPkJ4wYG6Sm7nFN5zv2PGXCp
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:02 2026 by rpki-client