
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json)
Hash identifier: XxRJ88Oy/hDxH24m1llMJA5BJgKz6ZxbI02q24CYfuo=
Subject key identifier: 55:79:0B:37:D3:33:5B:DE:2F:F1:6F:B5:BD:7F:84:C5:5F:90:A9:38
Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Certificate serial: 052E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
Manifest number: 0522
Signing time: Thu 23 Jul 2026 00:25:17 +0000
Manifest this update: Thu 23 Jul 2026 00:25:16 +0000
Manifest next update: Thu 30 Jul 2026 00:25:16 +0000
Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: rZwXgF1948muGV/P/v2F3bj1K1VpFacGxEuvN7QySoA=)
2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: 9xagtFPDPDh7sP5RKvooGHMvmH3Edj6QzRlAg2sHVUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1326 (0x52e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Validity
Not Before: Jul 23 00:25:16 2026 GMT
Not After : Jul 30 00:25:16 2026 GMT
Subject: CN=6a615f6d-c7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bd:d4:16:15:07:b5:7e:ba:56:02:c7:05:16:
96:2c:c1:54:f0:51:c3:7f:9b:3c:e9:12:25:27:2a:
bd:52:15:6d:ab:43:8b:eb:e5:1c:09:3e:d7:e1:9b:
05:33:51:35:45:a2:1e:ed:96:22:ab:a1:09:02:c1:
79:01:93:c2:07:2e:b6:ab:02:43:b9:bd:32:05:14:
8b:48:a3:42:27:6c:e2:bb:b2:40:46:8a:21:ac:5f:
b2:1f:5b:2c:e3:b0:c5:28:b9:0c:36:cf:9a:80:0a:
60:43:a1:36:5a:88:5a:93:9d:a7:fb:db:16:fe:57:
c8:ac:e5:7d:75:5a:9a:80:04:3a:3c:1f:1e:14:cd:
fe:b0:8e:5a:15:cb:e7:03:53:df:11:4a:27:d9:97:
04:80:b9:24:b2:ee:ef:5c:38:da:ae:24:6d:7d:ef:
9a:b6:78:0a:d0:74:2c:12:3e:ef:6f:b6:a5:e5:e7:
54:50:f3:69:89:b8:87:09:d3:74:49:cc:de:e8:e4:
c3:f1:8b:da:02:bd:08:80:57:7f:ff:08:ed:73:c1:
23:b9:e3:fc:6d:62:49:8d:b6:c0:47:ed:e2:e7:7e:
fe:82:24:df:65:71:ba:a1:38:e9:e5:04:b2:f1:1d:
45:ed:8f:4f:5c:b7:0b:c5:ba:55:8b:9f:b0:87:3d:
89:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:79:0B:37:D3:33:5B:DE:2F:F1:6F:B5:BD:7F:84:C5:5F:90:A9:38
X509v3 Authority Key Identifier:
keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:c2:33:32:c3:fb:42:fb:95:99:ce:07:c7:bb:eb:17:e6:04:
72:a8:d5:65:55:a4:f1:92:fa:74:33:61:ef:26:fd:8c:bb:ca:
a3:73:51:ba:b6:b3:86:95:32:c3:de:d8:2c:34:03:91:f2:1d:
ef:69:64:9b:fe:98:fe:d5:c0:a3:b2:08:5a:6c:4b:3e:5e:49:
13:52:c5:4c:89:81:ad:09:6e:89:92:4a:46:87:ca:1f:2e:b3:
db:b5:30:6f:97:d3:ff:3e:01:55:24:c1:b9:04:52:cc:07:16:
25:b8:3e:46:af:77:da:c4:49:f7:a6:68:93:c7:3e:a1:aa:ba:
e7:0a:db:c4:89:82:f0:5d:17:f2:9f:d9:34:cf:eb:19:a9:13:
2d:d8:a1:2c:72:46:e6:09:14:23:b7:10:e7:ea:97:24:cd:55:
52:a0:3a:c0:d7:3a:4b:93:ab:1e:a6:d9:66:38:17:26:6b:b9:
3c:22:35:43:bf:4b:58:b7:8c:32:21:a3:ac:bd:8f:11:1c:80:
09:5a:e5:2a:c3:54:c5:0d:34:db:71:bd:b0:4e:45:a1:12:34:
58:b5:18:89:bd:44:ec:51:27:d1:bb:20:f9:12:dc:b7:df:5d:
cc:22:08:aa:47:b4:24:85:a1:60:13:b1:1b:3d:0c:cd:22:d3:
4f:ad:6e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:48 2026 by rpki-client