
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
File: HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json)
Hash identifier: 5vY2dAPfFhDQB31uNFOl+KEz9a4W60UItfV++zh/GXk=
Subject key identifier: F4:D4:5C:74:47:A1:62:85:D4:0A:4C:AF:99:13:BC:43:1B:D3:9C:6A
Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6
Certificate issuer: /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
Certificate serial: 35A4
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
Manifest number: 35A4
Signing time: Sat 26 Sep 2026 14:22:23 +0000
Manifest this update: Sat 26 Sep 2026 14:22:23 +0000
Manifest next update: Sat 03 Oct 2026 14:22:23 +0000
Files and hashes: 1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: EMMx1GUGj9BO5/pTJHHxE1KBV6eF51wSjh7OK3SNXCw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 14:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13732 (0x35a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
Validity
Not Before: Sep 26 14:22:23 2026 GMT
Not After : Oct 3 14:22:23 2026 GMT
Subject: CN=6ab7d51f-ac06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:9e:ad:13:a4:58:63:db:67:de:d1:9b:9f:
81:fd:c7:2a:33:a3:f6:f7:30:be:f1:f1:e9:02:e0:
d8:f6:f4:9c:0e:89:bd:e9:1e:4a:66:15:cf:7a:a7:
8c:ac:99:58:5f:af:0f:64:ff:2d:e2:07:58:e9:ed:
5c:7a:a5:19:bc:5a:80:76:73:33:6e:a5:20:82:fb:
60:a3:08:46:13:80:e7:bd:34:7d:0c:29:a1:38:1e:
7c:12:bc:a2:4d:85:fb:06:f9:dc:27:52:63:81:e4:
b3:4f:16:8e:9b:1f:85:85:94:74:60:57:71:56:7b:
87:dd:1c:40:d0:57:97:4b:ec:8a:66:3e:bf:ab:ac:
ff:fd:ec:53:cc:f0:20:fb:21:a9:7f:ab:f7:68:25:
60:24:9c:e3:43:0c:95:b0:29:a0:93:b9:1e:1b:ce:
e4:ca:a6:e7:8d:bb:ab:1b:ee:0d:26:ff:8e:f4:67:
20:78:74:a6:a9:0b:c5:d3:27:89:e9:30:35:85:a0:
ee:fb:ad:bb:c3:d5:db:bc:57:1c:dc:9a:39:a8:ed:
17:ad:63:8b:65:87:2d:74:ac:70:f5:85:9c:b0:d3:
46:46:c5:36:09:d8:ca:19:d9:49:95:3f:5d:ce:89:
fb:ae:f9:b4:25:9d:a0:19:34:48:24:e0:88:83:8f:
85:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D4:5C:74:47:A1:62:85:D4:0A:4C:AF:99:13:BC:43:1B:D3:9C:6A
X509v3 Authority Key Identifier:
keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c5:3d:ee:84:8b:8b:11:3d:98:6b:44:92:5f:ad:2b:75:ea:
95:9d:ce:91:df:8c:0d:b3:06:a5:b3:95:5f:56:ba:0e:be:bd:
9a:14:01:db:a9:62:28:fa:52:92:f6:2f:89:12:c5:c2:9b:18:
b2:34:57:1c:e5:a9:cb:12:6c:48:6c:cf:f4:de:4f:f9:ff:03:
60:61:c8:ed:f2:86:40:7a:34:d6:fb:c2:12:04:5d:1b:a9:14:
2c:41:30:cb:4b:a0:4f:37:68:b8:13:87:b3:32:b7:7e:4d:32:
2a:9c:12:37:10:5c:6b:f9:6c:ff:e6:88:7b:de:3f:ba:fd:63:
b0:7e:f4:65:60:61:73:d8:d5:e6:75:8e:7c:fd:5a:38:5b:47:
dc:75:0b:54:ae:cd:5c:5e:16:c4:fd:8d:94:ea:8a:38:5c:a6:
82:9e:19:10:c6:78:42:39:e9:e6:e1:94:73:fa:74:cd:6c:2a:
47:44:54:2b:1f:14:91:7c:4b:48:bc:0d:91:8a:2d:ae:59:e8:
c5:39:a8:b2:9e:0f:a2:1b:79:4d:ee:98:98:fc:75:21:3a:28:
4e:09:85:34:35:9b:0c:6d:94:36:cc:d1:b1:52:3e:c9:5e:8b:
3e:35:35:57:51:66:40:3d:b0:91:9f:6b:1f:b1:40:bb:56:ed:
97:75:d8:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKDFFQ0M5NzhBNTNFRjJCRTg4RTVGMjZBRDlCOEFCODgz
NzNEMTk3QTYwHhcNMjYwOTI2MTQyMjIzWhcNMjYxMDAzMTQyMjIzWjAYMRYwFAYD
VQQDEw02YWI3ZDUxZi1hYzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArOyerROkWGPbZ97Rm5+B/ccqM6P29zC+8fHpAuDY9vScDom96R5KZhXPeqeM
rJlYX68PZP8t4gdY6e1ceqUZvFqAdnMzbqUggvtgowhGE4DnvTR9DCmhOB58Eryi
TYX7BvncJ1JjgeSzTxaOmx+FhZR0YFdxVnuH3RxA0FeXS+yKZj6/q6z//exTzPAg
+yGpf6v3aCVgJJzjQwyVsCmgk7keG87kyqbnjburG+4NJv+O9GcgeHSmqQvF0yeJ
6TA1haDu+627w9XbvFcc3Jo5qO0XrWOLZYctdKxw9YWcsNNGRsU2CdjKGdlJlT9d
zon7rvm0JZ2gGTRIJOCIg4+FVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPTUXHRH
oWKF1ApMr5kTvEMb05xqMB8GA1UdIwQYMBaAFB7Ml4pT7yvojl8mrZuKuINz0Zem
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9CRkVCMDAwODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9Ic3lYaWxQdkstaU9YeWF0bTRxNGczUFJs
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0hzeVhpbFB2Sy1pT1h5YXRtNHE0ZzNQUmw2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUYzRS9CRkVCMDAwODFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9Ic3lYaWxQdkst
aU9YeWF0bTRxNGczUFJsNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtMU97oSLixE9mGtEkl+tK3XqlZ3Okd+MDbMGpbOVX1a6Dr69mhQB26liKPpS
kvYviRLFwpsYsjRXHOWpyxJsSGzP9N5P+f8DYGHI7fKGQHo01vvCEgRdG6kULEEw
y0ugTzdouBOHszK3fk0yKpwSNxBca/ls/+aIe94/uv1jsH70ZWBhc9jV5nWOfP1a
OFtH3HULVK7NXF4WxP2NlOqKOFymgp4ZEMZ4Qjnp5uGUc/p0zWwqR0RUKx8UkXxL
SLwNkYotrlnoxTmosp4Poht5Te6YmPx1ITooTgmFNDWbDG2UNszRsVI+yV6LPjU1
V1FmQD2wkZ9rH7FAu1btl3XYUg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:28:06 2026 by rpki-client