
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
File: hYu8kCwHf24DE67cSds25v7yNLI.mft (raw, json)
Hash identifier: iQPOSPVvbsqv43zNUYbGdGsKat6OApkZM1FB9eAas5M=
Subject key identifier: C3:36:D4:63:CD:86:EC:57:A8:CD:0C:59:65:D3:3B:07:C2:6A:08:A8
Authority key identifier: 85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
Certificate issuer: /CN=A91DE334/serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
Manifest number: 30
Signing time: Wed 25 Mar 2026 07:52:23 +0000
Manifest this update: Wed 25 Mar 2026 07:52:22 +0000
Manifest next update: Wed 01 Apr 2026 07:52:22 +0000
Files and hashes: 1: hYu8kCwHf24DE67cSds25v7yNLI.crl (hash: McvRqUQU3HIHDvTe2l/yLuI7m4JJbvKeDymCoFh7jDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE334, serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Validity
Not Before: Mar 25 07:52:22 2026 GMT
Not After : Apr 1 07:52:22 2026 GMT
Subject: CN=69c39437-3e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:3d:43:dd:98:3a:25:07:67:3c:09:de:2f:
41:4c:0d:b1:08:3b:93:d5:a9:7e:30:31:46:53:94:
07:62:38:99:46:f0:2f:d2:fe:b8:da:5d:ac:eb:74:
c1:d6:ae:ef:bf:e9:10:28:de:f4:2f:32:cc:8c:74:
5c:36:25:83:81:97:3a:48:64:bc:1d:5e:95:0b:5d:
bb:ba:8e:cf:51:ad:2c:d6:10:ac:3c:72:14:0c:bc:
6f:02:fa:cb:3a:1f:96:3d:b6:93:de:0b:a9:48:b5:
65:c6:75:70:a7:16:7c:97:35:c2:71:8d:3d:37:6d:
0d:df:de:78:02:b5:0a:01:22:5d:bf:68:32:0e:be:
38:f4:53:40:da:b6:14:02:05:0b:46:46:51:66:78:
85:99:7b:5f:fe:04:4a:83:63:19:39:52:3e:87:7b:
74:95:eb:57:76:85:58:52:a0:b4:7f:9d:bc:8b:81:
31:24:b8:8b:c5:32:ff:4c:59:44:8b:83:d1:60:d9:
c8:d2:0e:cb:8b:7e:c6:69:8e:c1:96:e9:6b:bc:68:
73:5b:be:58:f4:5d:79:6e:94:a8:4e:64:01:6a:45:
14:4d:c1:00:0e:7b:bd:e4:2b:f4:a3:1a:20:3c:02:
53:86:bc:10:de:9b:28:dc:e8:0d:9b:cd:f5:50:ea:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:36:D4:63:CD:86:EC:57:A8:CD:0C:59:65:D3:3B:07:C2:6A:08:A8
X509v3 Authority Key Identifier:
keyid:85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:af:df:6b:98:6b:f9:3e:03:a5:41:28:32:60:63:c0:ff:fe:
5b:60:2d:9e:2d:12:fe:d7:b5:c7:f9:b8:63:36:ea:71:41:69:
0c:44:cf:04:47:60:ec:66:7f:83:ee:6b:c3:d8:fc:47:31:90:
45:e0:9e:e0:19:8e:9f:36:93:29:49:10:a5:45:80:2f:a3:44:
38:48:20:c1:af:69:99:44:c8:b1:13:15:9b:56:05:cb:b1:53:
4a:d6:f5:90:a0:57:13:b1:7c:8a:82:c5:30:02:1d:95:d8:76:
e6:f9:b9:34:85:97:8c:61:f3:40:d2:6e:5e:bd:95:2e:e2:72:
f4:bc:af:3f:e1:f9:81:47:2e:92:d2:a1:1e:7e:42:c8:af:44:
e0:2f:0f:b9:1c:81:1d:06:39:2a:14:dd:bc:a4:05:13:26:1d:
98:12:da:3e:4b:cf:c9:fe:15:f7:b0:49:b1:6d:08:6d:d0:22:
4f:0b:92:7a:b3:d9:c0:c2:e4:95:58:cd:ca:f7:fc:75:88:03:
c5:7e:cb:b0:1d:0e:92:9d:df:59:3d:0b:45:b1:ca:b0:83:f6:
d9:4f:ad:5e:91:73:67:d9:c9:db:3e:57:a1:c6:83:89:f5:56:
1b:c0:9a:b2:a1:60:28:a7:b3:86:d4:6d:91:b2:ba:89:f6:07:
b9:e1:e4:22
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RTMzNDExMC8GA1UEBRMoODU4QkJDOTAyQzA3N0Y2RTAzMTNBRURDNDlEQjM2RTZG
RUYyMzRCMjAeFw0yNjAzMjUwNzUyMjJaFw0yNjA0MDEwNzUyMjJaMBgxFjAUBgNV
BAMTDTY5YzM5NDM3LTNlNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCseD1D3Zg6JQdnPAneL0FMDbEIO5PVqX4wMUZTlAdiOJlG8C/S/rjaXazrdMHW
ru+/6RAo3vQvMsyMdFw2JYOBlzpIZLwdXpULXbu6js9RrSzWEKw8chQMvG8C+ss6
H5Y9tpPeC6lItWXGdXCnFnyXNcJxjT03bQ3f3ngCtQoBIl2/aDIOvjj0U0DathQC
BQtGRlFmeIWZe1/+BEqDYxk5Uj6He3SV61d2hVhSoLR/nbyLgTEkuIvFMv9MWUSL
g9Fg2cjSDsuLfsZpjsGW6Wu8aHNbvlj0XXlulKhOZAFqRRRNwQAOe73kK/SjGiA8
AlOGvBDemyjc6A2bzfVQ6paJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwzbUY82G
7FeozQxZZdM7B8JqCKgwHwYDVR0jBBgwFoAUhYu8kCwHf24DE67cSds25v7yNLIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMzM0L0M1MTI2Q0NFRTU3
OTExRjA4MzZFRUFBMTQxNkY1NkJDL2hZdThrQ3dIZjI0REU2N2NTZHMyNXY3eU5M
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaFl1OGtDd0hmMjRERTY3Y1NkczI1djd5TkxJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF
MzM0L0M1MTI2Q0NFRTU3OTExRjA4MzZFRUFBMTQxNkY1NkJDL2hZdThrQ3dIZjI0
REU2N2NTZHMyNXY3eU5MSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBjr99rmGv5PgOlQSgyYGPA//5bYC2eLRL+17XH+bhjNupxQWkMRM8ER2DsZn+D
7mvD2PxHMZBF4J7gGY6fNpMpSRClRYAvo0Q4SCDBr2mZRMixExWbVgXLsVNK1vWQ
oFcTsXyKgsUwAh2V2Hbm+bk0hZeMYfNA0m5evZUu4nL0vK8/4fmBRy6S0qEefkLI
r0TgLw+5HIEdBjkqFN28pAUTJh2YEto+S8/J/hX3sEmxbQht0CJPC5J6s9nAwuSV
WM3K9/x1iAPFfsuwHQ6Snd9ZPQtFscqwg/bZT61ekXNn2cnbPlehxoOJ9VYbwJqy
oWAop7OG1G2RsrqJ9ge54eQi
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:54 2026 by rpki-client