
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
File: HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft (raw, json)
Hash identifier: Iq2PEn8FpkpD0fZ0N+HiwFnvdSayQuge84UOAF1Xs5w=
Subject key identifier: F0:A1:91:7F:30:53:72:95:DE:5F:B3:06:CB:3D:47:8D:59:51:87:D5
Authority key identifier: 1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66
Certificate issuer: /CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
Certificate serial: 3559
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
Manifest number: 354B
Signing time: Tue 12 May 2026 14:56:25 +0000
Manifest this update: Tue 12 May 2026 14:56:24 +0000
Manifest next update: Tue 19 May 2026 14:56:24 +0000
Files and hashes: 1: HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl (hash: QqKp0+5WnfdICaeV2CWxgJDl3j4FEG1XQYhBDGyLe3M=)
2: 08FA1EC60C0911EDBDF8C44FC4F9AE02.roa (hash: Uji+jzs6NFG4wqDWKqkDcEMRN/9KSog3h0uKrHTnUXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl
rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13657 (0x3559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2CA8, serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
Validity
Not Before: May 12 14:56:24 2026 GMT
Not After : May 19 14:56:24 2026 GMT
Subject: CN=6a033f99-6283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:14:d6:cf:3f:c3:09:a4:40:70:4c:68:ef:
f3:85:4a:c4:01:cf:c0:47:33:8f:b9:0d:b0:9d:e2:
dc:24:d0:e1:b0:0e:3b:96:85:48:a1:fe:23:aa:f8:
d7:9e:6a:c2:47:2f:5d:4c:c9:87:32:97:4c:e6:94:
6e:ec:e3:b9:e5:c3:0c:6b:79:44:5b:98:7b:10:e4:
e9:87:50:2d:39:df:51:e1:7f:e2:5b:68:01:1a:89:
a2:54:14:eb:da:c4:a6:7e:e6:39:d6:13:a0:32:f5:
d9:2f:cd:f0:26:41:6d:ea:41:93:02:72:14:9d:b7:
e3:a6:c8:e4:60:e0:b7:5d:49:f1:1a:f3:7f:a8:27:
20:6c:27:86:b7:b9:f8:01:00:de:6e:71:ee:37:fe:
72:ee:3b:1f:4f:db:9e:35:28:b9:03:d7:0d:5b:42:
95:66:70:86:8c:db:c7:30:37:14:3d:86:fd:79:04:
41:7f:91:7e:97:a1:6a:31:38:52:d6:9f:b9:f8:a5:
d8:88:ea:60:2e:aa:3c:63:c8:d9:76:f8:4c:e0:b1:
6c:97:a6:a6:a0:c0:db:04:bf:9e:a3:d0:08:d0:5d:
00:52:0f:5a:f5:a2:e3:e8:2a:c2:74:c4:9d:1a:97:
00:27:98:72:5f:f5:ab:4c:29:6f:02:1e:6c:f0:5b:
71:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A1:91:7F:30:53:72:95:DE:5F:B3:06:CB:3D:47:8D:59:51:87:D5
X509v3 Authority Key Identifier:
keyid:1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:93:2c:21:80:d3:65:fa:9c:8e:db:f4:09:3b:83:fe:c5:be:
ec:7b:c1:0d:dd:99:c9:31:9d:43:62:af:62:18:51:e7:3d:f0:
f7:08:64:2c:38:84:b0:ec:8d:19:4b:ab:61:90:73:1a:8a:e8:
62:fa:50:38:f0:d3:2d:bb:ba:92:d7:2d:41:ce:1b:a1:f5:a4:
53:4c:d5:3e:c1:76:ff:b9:62:32:65:10:8e:68:29:27:9c:64:
b4:78:39:de:09:63:38:d7:65:60:92:38:e4:ab:65:69:31:01:
f3:f8:f9:7d:c0:02:b2:6d:fa:00:1a:25:2a:2d:bf:f7:19:73:
a2:57:3d:28:fe:0a:9b:e2:87:bf:cf:86:af:43:2d:a2:aa:b8:
6a:f8:7b:1a:3c:6b:b8:68:08:37:b3:ef:f4:5c:c8:a3:8d:0c:
be:44:48:f7:88:fe:87:5e:40:4b:f4:0a:dd:42:d0:89:ec:ef:
17:b1:2f:28:74:8c:16:46:24:25:ab:82:77:7f:48:27:a5:c2:
91:20:1f:6a:5b:99:34:e8:34:0d:9e:2e:3c:48:c5:3d:f5:af:
55:64:27:c5:33:fb:8a:a0:c3:e3:4f:0e:66:44:4d:3e:05:39:
dd:a7:f6:23:41:79:45:04:eb:fa:6a:9c:ff:b2:5d:51:a5:dc:
1c:ba:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:13 2026 by rpki-client