
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
File: HuygOndlK5BwteEzgJoiODDInPk.mft (raw, json)
Hash identifier: IWXdvNMAbloDaCE15rO6WmsVOGHpxTdUVnHC895aMXY=
Subject key identifier: AF:CC:9A:FF:8D:43:56:6C:5F:22:51:59:7A:ED:8C:1F:A4:F1:BF:CE
Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
Certificate issuer: /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Certificate serial: 034A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
Manifest number: 033B
Signing time: Wed 29 Jul 2026 01:54:09 +0000
Manifest this update: Wed 29 Jul 2026 01:54:08 +0000
Manifest next update: Wed 05 Aug 2026 01:54:08 +0000
Files and hashes: 1: HuygOndlK5BwteEzgJoiODDInPk.crl (hash: HqjOOH/8+26K24zGUdoNLbtQwHuLvJ9xjkwN/oulfxo=)
2: 9A59F7D670E411F0A8BFEE2AC4F9AE02.roa (hash: bAK5cuhceC5CpvKLnGgFlPhfEcQEufvQZ5+D2IKnvDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl
rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:54:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAD56, serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Validity
Not Before: Jul 29 01:54:08 2026 GMT
Not After : Aug 5 01:54:08 2026 GMT
Subject: CN=6a695d40-f532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:43:c3:e9:09:bd:4d:30:21:33:4b:ee:a9:
99:ab:ab:c6:9a:90:8b:c5:06:b7:ea:e7:a2:03:c7:
2f:f8:2d:1f:17:15:eb:ec:9b:d9:98:85:8b:6f:aa:
55:9a:d9:f1:3e:6c:28:76:24:8f:e0:ae:a2:dc:b2:
47:10:d1:e4:3a:7c:70:7e:cd:23:83:7f:b1:cd:fe:
e4:8b:47:10:8e:0d:9f:24:86:bb:20:1a:f4:6c:42:
a7:0c:3c:cd:ac:d5:d5:86:48:cc:aa:67:2f:13:96:
68:73:83:8b:fd:09:5c:b9:aa:39:de:e6:53:58:fb:
14:7b:f3:85:ee:4a:ee:35:a1:04:89:c4:dd:60:38:
61:f9:07:c1:fa:2a:86:21:30:ae:71:d5:77:11:58:
3b:64:d9:62:54:44:4b:9c:19:bc:36:39:25:78:d6:
42:58:11:b0:af:0c:8a:6f:25:2d:97:ef:33:5b:4a:
3b:cb:cc:10:8b:5d:6d:80:f1:e2:27:3d:65:4b:fa:
ad:2c:99:a5:da:4f:e1:da:de:eb:da:18:bf:32:62:
7f:70:7a:b8:24:9d:0a:98:27:47:3e:11:e1:65:96:
99:60:3d:16:11:08:2e:97:b3:47:9b:3e:33:5e:0c:
f0:f0:a1:76:6c:83:40:3e:2e:24:8a:cb:a0:3d:d2:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CC:9A:FF:8D:43:56:6C:5F:22:51:59:7A:ED:8C:1F:A4:F1:BF:CE
X509v3 Authority Key Identifier:
keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:0f:d5:98:9e:02:95:a1:8e:57:aa:d6:9a:67:18:0b:32:8b:
56:8d:5d:32:34:fe:23:3b:38:c5:cd:55:2c:77:33:3a:3c:1a:
85:fb:64:5e:29:d3:76:19:d4:3e:13:20:e5:07:0a:fa:0d:6d:
47:5b:d6:f1:8b:36:88:21:13:a2:3d:72:c3:bd:a3:26:ea:3b:
e2:d6:71:f3:a6:8b:a0:37:ab:f0:a2:fa:73:2d:79:88:79:ff:
fe:0f:73:b7:67:97:a8:12:14:07:46:3a:53:11:db:28:f3:38:
48:75:cb:b8:26:89:65:1c:1d:ef:86:4c:41:91:85:14:60:8b:
54:aa:3b:5c:fa:ca:18:cd:2c:87:93:ef:e6:b6:8c:08:ec:30:
71:22:71:cb:4d:0a:db:c8:cf:4a:c6:26:d6:a0:1d:a8:20:5d:
54:55:72:3b:ae:16:15:50:7d:13:4d:50:34:04:fa:fc:4e:40:
4a:15:88:7a:41:e1:c4:01:66:42:8e:b2:8a:3c:81:ed:5a:14:
72:76:b9:af:22:00:4d:5a:5c:f1:85:7b:c1:a5:b7:69:f0:14:
4e:d2:f8:2e:c2:b0:bf:08:46:70:ae:3d:62:a6:dd:0d:34:ea:
70:ef:85:f5:0e:56:4c:ef:23:dc:8e:e5:50:1b:21:e6:49:da:
a9:6f:76:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:55:11 2026 by rpki-client