
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json)
Hash identifier: Z3ugCkSQEc4dMlydYawDNe1J0hKVrlM14e/+rw8lxKU=
Subject key identifier: 36:50:CA:EC:8B:CC:35:D4:23:2D:4F:36:26:81:30:1A:62:18:7F:2B
Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
Manifest number: 01A1
Signing time: Fri 17 Apr 2026 04:04:21 +0000
Manifest this update: Fri 17 Apr 2026 04:04:20 +0000
Manifest next update: Fri 24 Apr 2026 04:04:20 +0000
Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: ixwhTMEJrRT1scqPwFd3HJYaigmRmz0luZA33+LDbnM=)
2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: dhcSaLNUlhbiUcFKAsa5AQ1b5rgid7EM2yOheX+7QNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl
rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Validity
Not Before: Apr 17 04:04:20 2026 GMT
Not After : Apr 24 04:04:20 2026 GMT
Subject: CN=69e1b144-9dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c7:ad:f4:bb:ff:a9:94:3b:45:f6:60:b5:f8:
c9:12:d7:9a:18:44:0c:ff:0f:ac:d8:17:0e:a3:a9:
9e:76:09:2b:4d:5b:e1:d6:2b:70:07:f2:59:c1:00:
76:50:23:9f:ba:7b:b5:77:88:f5:5d:bf:30:66:a5:
d7:01:22:b5:91:b3:59:c8:8e:73:f1:35:ca:0f:e4:
7f:ba:54:ac:43:f7:23:1c:a0:f2:7e:83:cc:0d:c5:
a8:e8:5f:f0:01:aa:5f:07:f0:a2:1d:99:3d:ea:7c:
03:b7:72:0f:92:c1:ad:2d:61:db:74:e7:d3:57:95:
d7:38:f1:bc:c7:a0:9b:67:34:66:34:af:69:b9:79:
10:5a:70:d1:e4:a5:b7:85:26:6c:54:f6:14:bf:aa:
e7:f1:3e:d6:06:2d:77:c2:ea:fb:62:69:1f:fe:03:
3f:41:be:52:c5:af:bf:af:7b:14:69:3d:0e:60:fc:
db:0c:27:fc:5f:69:62:5a:3d:53:f4:e8:21:e6:88:
fd:d4:0d:df:39:12:84:19:b4:ab:26:e9:1d:d5:11:
b1:38:42:d2:ef:3d:04:cf:b7:58:d7:b2:15:72:b2:
e0:70:d7:59:9e:3d:6e:df:67:85:c9:89:cc:11:8a:
d8:af:4f:8c:b2:8e:ec:d4:4b:36:f2:80:e0:3e:1f:
5e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:50:CA:EC:8B:CC:35:D4:23:2D:4F:36:26:81:30:1A:62:18:7F:2B
X509v3 Authority Key Identifier:
keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:31:6f:0a:e8:a9:ef:ae:9e:5c:9e:b3:1f:53:13:4c:b3:e4:
21:39:f6:b9:7c:be:b4:81:0f:ed:ce:73:a2:3e:39:d5:49:67:
5a:0c:f1:5a:05:03:c0:b8:58:19:8a:18:93:e1:dc:44:ad:7d:
0f:d5:9e:b9:a2:f8:e1:45:4b:28:fc:dd:97:f2:b5:ac:c0:e8:
2c:82:aa:15:4b:92:81:e1:d6:e0:8c:fe:3a:11:53:50:a8:aa:
15:10:7a:44:bd:8e:60:10:d8:e2:b0:89:37:13:ff:52:1c:be:
9b:75:1b:fc:17:b4:2f:a2:7b:c3:f1:a0:2e:a6:88:6a:0d:f1:
d4:de:5a:ca:ac:00:67:8e:d4:09:d4:25:8d:07:93:4f:56:dc:
0d:10:c1:64:28:82:9e:0f:84:15:dd:08:1c:f9:d9:ae:e8:ec:
90:83:2c:2a:69:c2:39:4f:b4:63:31:25:0b:65:d0:43:cc:d5:
46:0d:95:60:d4:71:f9:b5:9e:a5:76:5e:86:90:35:73:8e:3a:
2f:77:a5:02:02:2e:97:d6:25:09:a2:f6:f0:38:cd:28:39:ef:
92:37:3a:ac:08:02:1b:35:69:bb:13:ec:5e:40:f2:6f:43:29:
f9:8f:c4:bf:ae:80:7f:b9:ba:0e:b1:21:bf:aa:09:95:b8:ae:
2a:60:80:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:48 2026 by rpki-client