
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft
File: hy5atTm-Q4V0A9T11FpUcrsgem0.mft (raw, json)
Hash identifier: +XeIT8C80VQ+cpEK4LWgDibUJNJMdipBN1Dept9hM78=
Subject key identifier: 12:45:8B:49:91:D6:0A:73:21:F1:E4:3C:1A:C6:8B:B4:91:36:4E:7F
Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D
Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D
Certificate serial: 0473
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft
Manifest number: 045B
Signing time: Tue 22 Sep 2026 23:47:31 +0000
Manifest this update: Tue 22 Sep 2026 23:47:31 +0000
Manifest next update: Tue 29 Sep 2026 23:47:31 +0000
Files and hashes: 1: hy5atTm-Q4V0A9T11FpUcrsgem0.crl (hash: aBcxfKv6WiMAzIMXQ2YbEwI8wSNujX2g/YmqaOMM8xM=)
2: 2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa (hash: oMimkeYYl7dxiacxecAGj8I+bq56ZODIoHCIkyIFzMU=)
3: 1D171A58C76211EC95B63648C4F9AE02.roa (hash: 4RqePFXcxznoJVl6w8IMckwXSaVn5QEpwopGGGBw+nA=)
4: A445EAA0B5B911EC8AADD413C4F9AE02.roa (hash: H8iyGcp2slRPrtqT5icu1v/N051MgbZlmONF3nH7f+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl
rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1139 (0x473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193339, serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D
Validity
Not Before: Sep 22 23:47:31 2026 GMT
Not After : Sep 29 23:47:31 2026 GMT
Subject: CN=6ab31393-dbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:07:96:83:46:48:6a:46:48:97:59:34:7f:
a7:ea:22:d7:5f:d3:c7:a9:dd:af:0d:b3:1a:b8:37:
c0:7f:72:f3:2b:39:46:ad:9f:85:1b:ad:2f:8e:2b:
30:94:33:7e:7c:65:93:0e:d8:48:f1:e8:b0:a6:61:
15:cf:2e:d7:04:22:98:2d:76:4b:31:ef:61:87:1a:
5c:91:4c:32:b5:ad:2a:af:ca:f8:07:b8:c0:4c:43:
62:25:e3:0f:47:ce:b9:27:bd:0f:37:be:1d:3a:32:
d9:75:fb:fe:6b:13:7a:48:db:b6:7d:6c:93:b5:8c:
2d:50:c3:19:49:4b:28:3a:1c:c7:88:fd:14:ed:41:
1b:1a:17:1b:4f:33:23:ac:6a:c1:c2:f2:c4:05:13:
df:65:12:59:6c:ba:df:21:cf:ee:2b:03:3b:a3:a9:
27:86:4b:5e:3a:4a:6e:31:81:3f:e2:e4:22:a4:a0:
fb:39:0a:05:b3:9b:bc:49:18:f6:21:04:08:68:1f:
03:1b:97:19:4f:54:96:b5:af:a2:52:eb:d2:07:88:
14:25:ef:b7:43:42:a1:c0:88:60:e3:b1:f4:ef:34:
be:e3:6c:83:15:23:62:16:71:2c:d5:91:31:3f:e5:
2f:f5:fb:96:91:c0:da:2d:63:47:1c:8c:56:bd:43:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:45:8B:49:91:D6:0A:73:21:F1:E4:3C:1A:C6:8B:B4:91:36:4E:7F
X509v3 Authority Key Identifier:
keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7c:be:94:6c:8e:5b:d9:47:95:99:d2:5b:d1:ad:37:fd:e5:
84:4d:04:d8:d8:0d:fc:92:87:e2:c2:2c:ae:63:1f:39:e5:8f:
15:96:e2:26:f7:90:c0:61:e6:cf:d2:34:7e:40:6c:d6:9b:e3:
05:41:75:57:50:19:4a:3c:08:b6:c3:0a:56:40:81:25:76:98:
9e:ed:28:d4:d4:64:22:36:be:b4:d6:51:34:fb:f4:60:ae:3e:
39:cc:8e:e2:48:90:fc:05:ba:de:f2:eb:3b:73:f3:cb:95:44:
7d:f6:20:c4:12:50:20:51:af:54:a3:af:2b:db:59:f1:27:1d:
28:74:c9:07:c2:5d:86:30:00:26:d0:6f:35:6c:fc:99:51:47:
b4:e2:b4:cc:9d:bd:ff:f6:d1:f4:48:a6:ad:63:6a:bf:4f:e0:
63:bf:13:f1:5a:11:31:08:0e:9d:f7:ad:68:e8:8a:5b:6c:f3:
e7:30:2a:e1:23:49:1d:f1:d3:9c:82:54:2e:0e:a2:14:e4:a3:
39:c8:3c:51:fd:2f:41:4f:11:3e:ea:08:13:56:93:5d:49:7b:
11:6b:d8:87:1e:c4:45:2d:2a:94:a5:fa:24:77:77:4f:90:ee:
35:8b:fc:fd:fb:c7:10:08:44:79:5e:37:62:e0:5a:31:05:f0:
23:27:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:31:16 2026 by rpki-client