
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json)
Hash identifier: IOSFtnOMLSpyOSByJqxqfPlVOLjTwAdGJpTYV/JTXso=
Subject key identifier: C0:A5:F2:80:DC:B7:1B:08:DF:AA:D0:89:9A:25:0D:05:41:C9:DD:BF
Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
Manifest number: 01D3
Signing time: Mon 27 Jul 2026 05:29:23 +0000
Manifest this update: Mon 27 Jul 2026 05:29:23 +0000
Manifest next update: Mon 03 Aug 2026 05:29:23 +0000
Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: zwwgDEamCcfvZNFvEX+c+2t+t1usl0YlLAyoUNGR7To=)
2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: dhcSaLNUlhbiUcFKAsa5AQ1b5rgid7EM2yOheX+7QNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl
rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Validity
Not Before: Jul 27 05:29:23 2026 GMT
Not After : Aug 3 05:29:23 2026 GMT
Subject: CN=6a66ecb3-e0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:71:f9:f9:14:61:34:e5:50:6d:07:fe:5b:
02:d2:48:f1:b2:21:1f:74:40:55:be:ad:ea:21:0a:
73:5d:b4:c2:1e:03:2b:9c:42:5a:d4:a1:11:01:c4:
52:16:08:4a:da:1d:ea:a2:f3:07:0d:6e:f5:0f:cd:
66:da:d7:17:61:97:5f:3a:1a:7b:2a:fb:9e:be:82:
a5:f7:87:05:21:ec:d4:48:2b:7f:4f:88:c9:75:1f:
d7:76:81:08:87:de:94:b3:d0:99:4d:5b:12:4f:74:
7e:14:6d:63:86:fa:fb:b9:b5:fe:81:55:09:27:cd:
90:22:69:b7:ba:c0:ff:6e:ed:3f:ad:c7:df:c0:54:
78:66:f5:aa:03:16:39:2b:03:37:60:f4:3c:30:72:
23:b3:f7:7b:c4:cd:60:0e:4c:f3:f1:64:d1:0b:c9:
33:c7:bc:6e:30:2a:6d:d8:6e:eb:17:80:bc:5c:c4:
39:4e:21:43:af:fe:fc:d1:0f:34:a4:ec:05:96:e1:
ba:a7:ae:a3:e7:cb:e5:d6:33:6a:9b:2a:49:f8:ff:
63:02:49:c0:ad:fe:54:0a:60:80:22:72:5a:d3:20:
dd:46:0d:42:b9:af:66:16:66:60:fc:01:83:17:b6:
f3:7f:cc:a0:89:f4:bc:70:14:75:a5:59:7e:e7:6c:
6c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A5:F2:80:DC:B7:1B:08:DF:AA:D0:89:9A:25:0D:05:41:C9:DD:BF
X509v3 Authority Key Identifier:
keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7a:3a:5e:c5:a2:4d:f3:4c:c7:ed:39:0a:3c:97:81:d2:47:
12:20:9f:2c:77:96:ed:bd:0f:55:c5:57:03:3c:b9:4c:69:1e:
bb:d6:7f:a3:3d:7f:a8:b5:bc:41:9e:bc:9a:cf:f1:91:be:d1:
7a:3d:84:a4:4d:c8:b4:e3:b8:eb:83:1d:9f:3a:b3:40:45:43:
88:d6:03:67:06:e1:aa:09:f6:11:0c:ef:2c:62:e1:e9:7b:ca:
89:68:c2:68:37:4e:39:1d:f7:41:b2:79:b2:e7:d3:e7:46:75:
84:98:3e:96:15:6e:39:53:b3:6c:ae:77:4e:83:3b:15:c4:ad:
c0:ed:73:58:14:a3:e4:28:8b:12:a7:48:58:f3:49:45:bf:41:
83:1b:c5:63:c5:31:95:b1:0c:88:b4:08:34:1a:1a:ff:78:92:
a3:54:28:a1:8c:54:f2:d6:61:1f:3c:b2:b5:6e:92:27:6b:5f:
00:8f:4d:42:67:6b:5b:91:fb:f5:2d:62:a7:4c:e1:33:3d:c0:
5d:f5:ff:4e:b8:e9:a2:7e:6c:8b:f0:1f:f6:a7:d5:3f:e2:11:
72:a4:f5:0c:3e:0c:2c:c7:75:a3:d2:5f:9b:1b:a4:32:95:f8:
c4:12:39:97:19:21:4e:ab:ee:62:51:cd:9c:a6:4e:c1:ab:a5:
4f:64:6b:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2
Nzc1NTBBQzgwHhcNMjYwNzI3MDUyOTIzWhcNMjYwODAzMDUyOTIzWjAYMRYwFAYD
VQQDEw02YTY2ZWNiMy1lMGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvahx+fkUYTTlUG0H/lsC0kjxsiEfdEBVvq3qIQpzXbTCHgMrnEJa1KERAcRS
FghK2h3qovMHDW71D81m2tcXYZdfOhp7KvuevoKl94cFIezUSCt/T4jJdR/XdoEI
h96Us9CZTVsST3R+FG1jhvr7ubX+gVUJJ82QImm3usD/bu0/rcffwFR4ZvWqAxY5
KwM3YPQ8MHIjs/d7xM1gDkzz8WTRC8kzx7xuMCpt2G7rF4C8XMQ5TiFDr/780Q80
pOwFluG6p66j58vl1jNqmypJ+P9jAknArf5UCmCAInJa0yDdRg1Cua9mFmZg/AGD
F7bzf8ygifS8cBR1pVl+52xsswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMCl8oDc
txsI36rQiZolDQVByd2/MB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx
MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0
Tlh3cVdwbS16XzluZFZDc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjXo6XsWiTfNMx+05CjyXgdJHEiCfLHeW7b0PVcVXAzy5TGkeu9Z/oz1/qLW8
QZ68ms/xkb7Rej2EpE3ItOO464MdnzqzQEVDiNYDZwbhqgn2EQzvLGLh6XvKiWjC
aDdOOR33QbJ5sufT50Z1hJg+lhVuOVOzbK53ToM7FcStwO1zWBSj5CiLEqdIWPNJ
Rb9BgxvFY8UxlbEMiLQINBoa/3iSo1QooYxU8tZhHzyytW6SJ2tfAI9NQmdrW5H7
9S1ip0zhMz3AXfX/Trjpon5si/Af9qfVP+IRcqT1DD4MLMd1o9JfmxukMpX4xBI5
lxkhTqvuYlHNnKZOwaulT2Rrpg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:32 2026 by rpki-client