
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json)
Hash identifier: 6c1egr7aOiyWmWVcZymafNpTXDOTAKAHNfxAO6Q+8uw=
Subject key identifier: D7:84:2D:8F:D1:FD:BA:05:06:BE:2B:8E:7E:0B:55:F8:13:43:A0:DB
Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Certificate serial: 153D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
Manifest number: 1524
Signing time: Thu 16 Apr 2026 16:46:21 +0000
Manifest this update: Thu 16 Apr 2026 16:46:20 +0000
Manifest next update: Thu 23 Apr 2026 16:46:20 +0000
Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: tZrIBnNIzKe1aSV/QMFuktBICJSmk1Nv2uEBEoDBnAg=)
2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: RnKanm5hHk3mFwa7+wHjDrcythGv+bDKBJwJ7N6lnUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5437 (0x153d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Validity
Not Before: Apr 16 16:46:20 2026 GMT
Not After : Apr 23 16:46:20 2026 GMT
Subject: CN=69e1125c-7141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:68:4b:2a:31:f8:8d:3e:f4:c2:23:f6:3c:5c:
70:dd:33:ea:0e:8b:59:56:88:98:2b:94:32:49:e3:
ec:5e:8c:6e:41:da:ca:a0:b9:91:7d:f7:e6:68:b6:
7f:b5:73:d0:71:f7:2a:94:ba:10:7c:90:d9:cc:83:
6c:66:35:89:b2:77:fa:25:ef:e5:e4:35:ba:40:33:
0c:d8:0d:85:1e:9c:86:3e:70:76:07:d6:5f:d7:6c:
5f:d6:f7:6a:39:b7:d2:69:94:b1:83:73:dc:3b:da:
7c:f4:a4:c2:2e:93:b5:cb:2d:b9:d5:d3:90:95:ad:
69:f7:71:f3:6e:05:d8:00:89:e6:d5:31:23:d9:cf:
03:0d:f1:80:c7:1d:b3:09:ba:4d:eb:a4:c5:97:c6:
e3:7b:43:4a:5c:b5:8f:e3:3b:18:d1:a5:1e:75:8e:
ac:90:fe:13:59:d6:b8:96:84:3d:c7:4d:3d:6c:7a:
b8:dd:61:29:b1:dc:35:05:24:35:ea:11:b9:50:75:
90:fa:47:8e:91:11:88:3a:2e:b5:91:5e:6b:dd:60:
16:ad:4b:50:29:04:f5:64:1f:f1:bd:c9:97:a9:7f:
e7:05:3a:1c:77:e1:4c:9c:7a:4a:ef:24:66:ed:3d:
f3:49:6e:5f:91:5a:30:fc:39:79:69:13:26:bd:71:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:84:2D:8F:D1:FD:BA:05:06:BE:2B:8E:7E:0B:55:F8:13:43:A0:DB
X509v3 Authority Key Identifier:
keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:92:3a:4b:05:55:c4:b5:c3:df:47:64:cc:56:1d:c1:98:00:
d2:6a:16:40:5a:30:d6:40:1f:3a:f2:74:33:31:5a:0e:31:72:
4e:0d:e8:3a:9d:bf:f9:57:51:3a:e8:88:3b:da:a7:10:cc:8a:
b7:fe:7b:57:83:12:75:4a:d0:95:7e:db:97:9d:7b:82:51:71:
97:e7:ff:18:99:4a:5e:82:c1:91:ba:f5:31:48:df:b8:92:c0:
2e:10:be:6d:a7:48:5e:dd:cb:76:9c:fa:2b:7d:06:6d:3f:c3:
86:7f:64:b3:95:53:bf:7b:76:db:ed:38:4a:2f:a1:90:d0:80:
81:a1:9f:00:fc:e1:75:54:b3:d7:96:3f:98:52:d4:78:eb:41:
b1:f7:27:08:31:35:d2:6c:70:a5:b3:b3:10:54:98:f5:ca:b9:
b6:21:20:10:88:b8:56:eb:19:fb:2a:c7:66:37:06:7b:bc:91:
27:07:a6:a5:f5:c8:59:9a:0d:74:5d:45:d0:a9:d3:78:87:33:
f8:67:38:61:5d:b4:63:e4:b0:d7:b9:29:51:52:67:07:f4:63:
de:db:a2:70:77:9b:9d:fe:71:a5:21:7c:76:45:c4:27:f9:17:
da:bc:a0:60:67:2c:7f:cd:e4:46:d1:47:51:ae:b8:39:f5:3b:
69:35:8e:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE
QTk1ODFEMjQwHhcNMjYwNDE2MTY0NjIwWhcNMjYwNDIzMTY0NjIwWjAYMRYwFAYD
VQQDEw02OWUxMTI1Yy03MTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1GhLKjH4jT70wiP2PFxw3TPqDotZVoiYK5QySePsXoxuQdrKoLmRfffmaLZ/
tXPQcfcqlLoQfJDZzINsZjWJsnf6Je/l5DW6QDMM2A2FHpyGPnB2B9Zf12xf1vdq
ObfSaZSxg3PcO9p89KTCLpO1yy251dOQla1p93HzbgXYAInm1TEj2c8DDfGAxx2z
CbpN66TFl8bje0NKXLWP4zsY0aUedY6skP4TWda4loQ9x009bHq43WEpsdw1BSQ1
6hG5UHWQ+keOkRGIOi61kV5r3WAWrUtQKQT1ZB/xvcmXqX/nBTocd+FMnHpK7yRm
7T3zSW5fkVow/Dl5aRMmvXEIDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNeELY/R
/boFBr4rjn4LVfgTQ6DbMB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD
NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI
U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
M0Y3NS83MjA2RDZGNDZDNkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZ
ZmtKcjBmVmh3TW5hbFlIU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT5I6SwVVxLXD30dkzFYdwZgA0moWQFow1kAfOvJ0MzFaDjFyTg3oOp2/+VdR
OuiIO9qnEMyKt/57V4MSdUrQlX7bl517glFxl+f/GJlKXoLBkbr1MUjfuJLALhC+
badIXt3Ldpz6K30GbT/Dhn9ks5VTv3t22+04Si+hkNCAgaGfAPzhdVSz15Y/mFLU
eOtBsfcnCDE10mxwpbOzEFSY9cq5tiEgEIi4VusZ+yrHZjcGe7yRJwempfXIWZoN
dF1F0KnTeIcz+Gc4YV20Y+Sw17kpUVJnB/Rj3tuicHebnf5xpSF8dkXEJ/kX2ryg
YGcsf83kRtFHUa64OfU7aTWOjQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:13 2026 by rpki-client