
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json)
Hash identifier: WA9+DBdcTP9vjICcRtQZ3uvS7p+T/eTSyrhrWfk/2fU=
Subject key identifier: 44:7C:55:1D:48:0A:80:50:97:36:4D:A1:AF:6F:97:CA:99:CD:34:7B
Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
Manifest number: 0187
Signing time: Mon 02 Mar 2026 02:00:20 +0000
Manifest this update: Mon 02 Mar 2026 02:00:18 +0000
Manifest next update: Mon 09 Mar 2026 02:00:18 +0000
Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: GclPEuJrtPSrr3SdmJlW3PCg3wXpsuCiToJ8PMXABzo=)
2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: pe8TaT6TRoY+NwLH+0tFi8b3zVP1G5yZ0XDW/NBZF5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl
rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Validity
Not Before: Mar 2 02:00:18 2026 GMT
Not After : Mar 9 02:00:18 2026 GMT
Subject: CN=69a4ef33-9e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:92:b3:3c:bf:5d:28:02:05:ee:38:62:4d:
9f:a4:9e:bb:6d:c2:da:ed:aa:0c:b5:4f:b2:5a:fe:
41:2f:fc:7e:15:14:f4:69:ac:09:ee:47:2a:d0:6d:
aa:e7:67:6d:49:0b:a6:cc:fe:c7:d5:8f:c2:63:5b:
d2:7b:59:43:dd:ca:a6:c8:03:63:3e:63:47:91:c9:
5a:18:e7:7b:ee:5e:3e:db:80:1a:58:12:a7:03:ca:
5a:71:6f:03:15:cb:3b:bf:2a:30:45:f2:68:2f:67:
66:44:39:8a:16:f7:9b:fa:a2:06:4e:2d:8c:e5:2b:
2a:8f:f9:41:18:9d:39:36:95:5b:cf:11:70:02:e3:
d2:91:f9:a8:f0:79:6c:44:0e:31:d6:a7:2c:68:46:
31:cc:c6:49:83:8e:59:c0:8b:f6:62:90:41:69:b4:
a0:af:1b:83:5c:4c:9d:71:63:5c:b4:5d:85:4d:a0:
da:af:1f:40:7f:b3:96:0f:a0:99:89:84:fb:f3:8a:
cf:79:bb:df:21:6c:0b:41:84:d7:c3:36:70:ab:96:
98:31:da:22:2b:e1:57:f6:8f:d0:b9:fd:64:b9:40:
5d:d5:f6:d4:83:b5:55:ef:23:d6:37:80:1d:99:e9:
0a:db:f4:3e:e3:bd:6d:fc:87:fd:b7:40:7e:d7:56:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7C:55:1D:48:0A:80:50:97:36:4D:A1:AF:6F:97:CA:99:CD:34:7B
X509v3 Authority Key Identifier:
keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:78:58:f3:5e:48:f1:a5:bb:cf:bd:a5:dd:c5:11:02:dc:24:
17:39:8f:17:fb:cc:63:da:94:e7:76:50:0d:72:fc:ed:8a:5a:
45:46:6c:6c:cd:f8:49:22:08:be:28:f1:9f:fe:d2:cc:08:db:
9d:66:31:15:84:ee:4b:f2:35:32:83:b9:6a:6c:8b:ed:5d:da:
7a:93:d8:8a:51:ba:7f:49:b1:52:16:21:38:56:ad:6e:8e:71:
01:26:3b:f9:b1:12:12:ef:7d:bf:37:35:09:7c:ad:80:c1:e7:
b6:6a:e6:7a:0c:2e:81:07:a5:ec:b7:97:a0:b5:4a:1c:13:65:
fd:ce:d3:81:e4:fb:0d:6f:56:21:30:d8:2d:cf:0d:9d:02:a1:
af:05:a9:e9:bb:8c:b4:15:18:39:4f:2f:08:81:17:75:fe:e6:
82:b7:3e:aa:da:9f:4c:30:a4:f4:8c:b4:d3:61:f1:de:be:47:
08:05:3e:a7:64:28:3c:7b:06:17:bc:65:65:76:5d:a9:fb:77:
21:a7:d4:ef:56:3a:2d:a4:6b:63:a4:a6:49:a0:8c:4f:44:b3:
15:d2:38:14:66:43:1f:0c:ed:d6:0f:10:7f:83:39:b0:87:c8:
97:2a:1a:f8:f9:18:b7:9f:ac:95:a1:88:18:a3:05:db:25:a3:
4a:33:56:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:57 2026 by rpki-client