
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json)
Hash identifier: EGvZXwbpdPzntwnVKd9b3q9ibMCQ26y/qJNyNomQs+4=
Subject key identifier: 4C:AB:D1:1E:4C:54:89:DF:AD:95:A5:BD:4C:8D:17:F1:E5:76:49:E9
Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB
Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
Certificate serial: 1223
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
Manifest number: 120B
Signing time: Mon 02 Mar 2026 02:46:54 +0000
Manifest this update: Mon 02 Mar 2026 02:46:52 +0000
Manifest next update: Mon 09 Mar 2026 02:46:52 +0000
Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: J2NbCEHQz4jna4wU+MR9QIAjOF/zIKKEBbSbffHirJc=)
2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: 1PUveXSVNEFsI6eTf+ATt+sd0I0xyK56lA2WpD1UOWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl
rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4643 (0x1223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
Validity
Not Before: Mar 2 02:46:52 2026 GMT
Not After : Mar 9 02:46:52 2026 GMT
Subject: CN=69a4fa1d-c3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:21:cb:38:ff:6c:48:44:a5:09:38:e5:65:
8f:4c:0c:dc:cb:9f:d1:46:f0:b3:9e:15:84:19:b3:
18:f2:d9:0b:f2:0f:df:6f:72:6f:76:14:e9:2a:28:
b1:39:6c:1b:f9:c1:a3:72:ec:aa:e2:0c:cc:ad:3c:
32:b2:59:73:68:81:48:08:3e:8b:0d:69:43:a1:1b:
5a:c5:f4:00:2b:b5:80:85:88:68:e5:84:01:2e:9d:
e9:1f:b1:f0:f2:a7:cd:4e:87:c6:02:de:35:58:dd:
7c:08:fd:53:22:9c:ec:c5:9a:39:ea:bf:e8:e3:09:
d8:de:64:19:af:27:05:3b:ee:54:21:67:0e:7d:1d:
9c:b2:69:11:c8:4d:4e:6f:a6:60:55:ce:9f:7e:74:
09:9d:73:10:55:c3:2e:4b:18:c1:2d:99:24:7f:72:
67:5b:68:f2:0a:14:c7:b6:91:68:d0:24:c3:23:bb:
6f:5d:21:ba:df:5e:53:17:17:cb:98:5f:08:47:0d:
3e:ee:84:0e:40:72:20:5f:12:b4:af:f5:68:d0:a8:
ac:70:a8:ef:6d:3f:b4:5b:5f:ea:59:f8:02:06:0f:
24:ca:8d:2e:c8:5f:05:f8:3b:a1:a1:7a:de:fe:26:
53:98:aa:90:99:e7:23:98:dc:62:7c:a8:90:0a:db:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AB:D1:1E:4C:54:89:DF:AD:95:A5:BD:4C:8D:17:F1:E5:76:49:E9
X509v3 Authority Key Identifier:
keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:b2:15:d7:00:95:e3:c3:bf:56:bc:4b:1b:6c:c8:15:0f:34:
cc:e4:83:d3:54:e8:e1:08:f2:36:7d:b8:43:8c:f0:c4:5b:60:
48:90:cb:a0:c1:09:56:7d:25:c0:0b:97:a5:9e:66:63:fb:fc:
da:ed:d4:1e:7c:84:b9:f6:5a:a9:70:ca:45:e0:2e:21:45:3f:
92:41:ab:3a:91:29:7f:99:8d:70:76:8d:11:a3:20:1c:98:e7:
f4:d4:f4:df:71:5f:c4:45:d7:e1:b5:4a:42:1c:37:7b:7e:eb:
09:e3:0b:12:e7:3b:d5:fd:90:43:3a:90:56:80:8c:e0:1f:18:
04:e7:cb:d4:f7:b5:05:a3:b1:03:5b:9b:8f:e3:a0:9e:ab:0e:
bc:80:3b:df:dc:22:11:77:a4:48:0b:2f:37:f1:46:e6:2c:06:
c6:f5:cb:1f:5e:32:86:35:51:fa:dc:88:bd:b0:99:1c:58:9c:
b4:16:4b:5b:b0:ab:da:62:51:22:17:47:5e:11:ad:5f:c9:ea:
a3:fc:cc:0c:fc:39:95:60:54:02:7a:53:6a:f3:65:99:d9:24:
e6:62:44:0c:67:e1:3f:80:d9:17:74:da:27:9f:47:e3:b7:fc:
df:91:e8:3b:72:c4:21:0f:ad:ca:d7:3f:b6:50:78:03:b4:5b:
b5:4a:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:03 2026 by rpki-client