
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json)
Hash identifier: oHhn6CHedocDlaRyiP5x90Y66SbSEqeGNDdkWS17q4s=
Subject key identifier: 3B:15:13:39:02:66:49:DF:29:C3:C6:3E:F0:D5:F7:04:DE:46:54:B5
Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB
Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
Certificate serial: 123B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
Manifest number: 1223
Signing time: Thu 16 Apr 2026 17:04:46 +0000
Manifest this update: Thu 16 Apr 2026 17:04:46 +0000
Manifest next update: Thu 23 Apr 2026 17:04:46 +0000
Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: sCQ+e4GBZh1KwSFRrg/McSTDpFwbzHdYtGN6/n/R8aE=)
2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: 1PUveXSVNEFsI6eTf+ATt+sd0I0xyK56lA2WpD1UOWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl
rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4667 (0x123b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
Validity
Not Before: Apr 16 17:04:46 2026 GMT
Not After : Apr 23 17:04:46 2026 GMT
Subject: CN=69e116ae-9622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7b:7e:0f:08:0f:57:ef:f9:e0:c6:09:95:97:
6e:1b:87:5e:80:ba:5d:a8:c1:07:de:bb:67:2f:a3:
db:2e:4a:77:65:be:56:9e:47:27:d9:50:2b:2b:d7:
f8:24:6f:9c:88:b7:05:e6:1a:61:5b:2b:b3:fd:84:
ae:e3:f4:48:17:20:68:53:13:45:e3:08:d7:4d:fe:
7b:91:9f:35:36:9e:09:21:55:ff:5f:9b:19:65:b1:
6b:20:98:e6:2d:1a:11:51:7a:1c:b0:13:da:43:c2:
ad:be:dc:aa:14:95:16:de:25:11:ca:fd:37:dd:75:
76:ba:05:e3:d8:86:73:df:6a:3c:80:47:8a:5e:b2:
7b:1a:9c:2b:91:1d:2e:fb:4e:75:20:43:88:03:2b:
d7:4e:df:28:7b:19:c7:c9:bf:fe:3f:3e:6a:e0:f6:
fb:2e:4b:89:5c:0e:22:db:df:eb:09:92:09:a1:ed:
41:f2:cd:88:87:5f:17:7b:82:10:b6:68:14:26:53:
e2:17:e0:ed:3b:d2:87:1e:dc:b6:95:e5:1a:d6:c8:
be:76:72:64:87:a6:aa:4f:91:6d:a4:fd:48:96:82:
a7:57:54:b9:f1:a5:3c:dd:47:cf:aa:cc:65:00:ca:
7b:0b:46:24:af:31:09:75:b7:14:ff:35:e7:6d:2a:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:15:13:39:02:66:49:DF:29:C3:C6:3E:F0:D5:F7:04:DE:46:54:B5
X509v3 Authority Key Identifier:
keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:08:32:dc:17:27:79:f1:8f:03:6d:17:9f:c4:06:27:57:aa:
55:bd:c7:16:dd:5a:91:50:49:ad:7f:e3:89:e6:ca:15:61:a5:
fe:b5:79:40:48:ac:6f:26:26:8c:25:c6:e0:1a:37:c1:88:b6:
3d:4a:20:f6:2a:88:df:93:94:ae:41:4a:8c:7c:65:e3:21:20:
4b:ad:95:1e:ea:53:19:b6:4d:d0:2f:7d:de:70:b1:18:6d:f0:
b6:ee:58:d2:56:bd:68:2c:94:7c:56:03:f1:35:ad:63:20:8b:
28:a0:1b:52:48:75:ff:e7:7e:84:46:5a:7c:c0:b0:7a:46:40:
89:51:8a:1f:78:6b:59:c4:d8:91:1c:39:e5:9e:da:b6:7d:c5:
78:26:9e:e6:92:79:fa:ca:01:d1:50:36:34:22:f1:c7:7e:c1:
e8:5b:91:e3:71:6f:63:65:64:58:03:c7:05:0d:fc:e0:40:a4:
7c:d8:e2:ba:ac:4d:74:70:00:ed:21:d7:dc:01:b0:08:0c:cf:
b4:91:24:e6:8e:42:44:d4:00:c6:fd:9d:f6:38:62:ec:3c:bf:
16:a7:91:67:aa:79:a4:73:f6:11:d9:3f:ac:71:69:cb:2f:5f:
41:fe:ec:5f:f6:7d:1c:9f:de:ad:97:62:8b:59:11:fb:a0:95:
2f:e1:16:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:33 2026 by rpki-client