
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
File: HuygOndlK5BwteEzgJoiODDInPk.mft (raw, json)
Hash identifier: ew9J2gutZeGv3AZJVE9EfjtOdFvHiB5MJSztuD4/yF4=
Subject key identifier: 60:4A:40:3B:A4:8C:CC:EE:E8:E1:74:5A:FE:88:26:76:05:98:79:B9
Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
Certificate issuer: /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Certificate serial: 0316
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
Manifest number: 0307
Signing time: Fri 17 Apr 2026 01:09:58 +0000
Manifest this update: Fri 17 Apr 2026 01:09:57 +0000
Manifest next update: Fri 24 Apr 2026 01:09:57 +0000
Files and hashes: 1: HuygOndlK5BwteEzgJoiODDInPk.crl (hash: GIMmoxUtlVhJx/19bpbY75eyqz33NXsQ4qzw02mFF1o=)
2: 9A59F7D670E411F0A8BFEE2AC4F9AE02.roa (hash: bAK5cuhceC5CpvKLnGgFlPhfEcQEufvQZ5+D2IKnvDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl
rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 790 (0x316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAD56, serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Validity
Not Before: Apr 17 01:09:57 2026 GMT
Not After : Apr 24 01:09:57 2026 GMT
Subject: CN=69e18866-4596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:26:73:0c:2f:57:58:b3:02:ba:db:92:ee:
61:9c:0b:97:dd:92:c7:36:bd:c0:27:5b:fc:18:94:
29:8a:bc:13:8c:a8:88:e4:e0:62:ca:29:16:46:28:
87:cf:e8:e9:36:08:f8:99:ce:6f:d4:1c:7e:7b:27:
8e:93:b9:d5:09:24:ea:5f:2b:2a:a8:35:c2:c7:22:
dc:cd:c8:31:9a:07:32:1d:4d:3c:21:d5:bc:3a:94:
d5:bd:b7:e5:9d:37:92:f9:f8:f7:bf:c1:b0:83:ae:
51:a3:6d:e5:20:81:c3:c8:97:40:db:b8:3a:cb:6a:
f7:d8:53:dc:db:fe:4c:fe:ac:06:83:ae:3c:04:cc:
ea:c5:76:e6:91:a9:ae:74:7a:ec:d9:23:98:a2:8e:
ef:e5:ff:9e:ce:89:d2:d7:14:60:e1:6b:6b:9d:23:
e2:77:95:47:9f:13:fc:4f:70:28:be:6e:4c:b5:2f:
cd:d3:fb:e8:6b:e0:2b:3d:b6:1b:ad:80:ea:59:e0:
cd:fd:fa:89:eb:e3:31:79:b6:9b:b1:01:c0:a8:fb:
e6:e8:0c:f7:0b:2d:b5:73:26:5d:1a:ad:e8:57:df:
2d:0e:67:a6:c2:67:e3:1d:e6:85:0c:1a:98:62:62:
c1:00:a8:74:a0:ac:63:2e:1f:67:bc:77:d6:38:ad:
fa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:40:3B:A4:8C:CC:EE:E8:E1:74:5A:FE:88:26:76:05:98:79:B9
X509v3 Authority Key Identifier:
keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:dc:84:f1:fa:3d:ef:03:a6:fa:26:74:49:6c:12:13:36:6e:
b4:3c:a3:0e:dd:89:0c:4b:68:e7:19:7b:3f:41:db:1c:e5:a6:
e1:63:3d:45:7a:2c:ce:ce:bf:ba:f1:0e:a9:b7:bf:d1:ac:91:
99:a1:80:e4:47:a5:84:cd:4d:fc:7c:09:2e:3a:23:96:ed:80:
0d:c5:e0:49:9f:f7:7c:d3:75:fb:d5:a5:3b:4b:87:88:12:07:
7d:36:3b:ea:61:dc:b3:6b:8b:71:3d:a4:f2:6a:03:a5:0e:cd:
c6:57:0c:9e:de:6d:15:99:4d:35:06:91:1e:03:52:7f:98:94:
52:c1:04:38:17:b8:f6:68:53:25:e3:be:7d:dd:e5:ef:f6:97:
35:10:16:25:4c:e4:83:f7:6c:38:5f:e3:d6:46:05:91:f4:ec:
9b:9b:b5:fc:8e:a6:cb:fa:83:6b:db:a4:73:11:0e:2e:f1:7d:
e9:30:77:14:05:ce:f8:72:59:58:fd:bc:a0:6d:66:0d:34:0c:
df:49:bd:43:35:49:5f:1b:49:69:c3:5e:36:9d:4c:bb:4b:db:
43:e2:f0:66:c6:4c:19:12:a9:92:4e:19:0e:48:b0:da:7f:98:
5b:ec:4c:26:fc:4e:9d:93:ea:ec:37:9c:64:73:50:d3:9e:42:
1d:d2:8a:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFENTYxMTAvBgNVBAUTKDFFRUNBMDNBNzc2NTJCOTA3MEI1RTEzMzgwOUEyMjM4
MzBDODlDRjkwHhcNMjYwNDE3MDEwOTU3WhcNMjYwNDI0MDEwOTU3WjAYMRYwFAYD
VQQDEw02OWUxODg2Ni00NTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqaUmcwwvV1izArrbku5hnAuX3ZLHNr3AJ1v8GJQpirwTjKiI5OBiyikWRiiH
z+jpNgj4mc5v1Bx+eyeOk7nVCSTqXysqqDXCxyLczcgxmgcyHU08IdW8OpTVvbfl
nTeS+fj3v8Gwg65Ro23lIIHDyJdA27g6y2r32FPc2/5M/qwGg648BMzqxXbmkamu
dHrs2SOYoo7v5f+ezonS1xRg4WtrnSPid5VHnxP8T3Aovm5MtS/N0/voa+ArPbYb
rYDqWeDN/fqJ6+MxebabsQHAqPvm6Az3Cy21cyZdGq3oV98tDmemwmfjHeaFDBqY
YmLBAKh0oKxjLh9nvHfWOK36qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBKQDuk
jMzu6OF0Wv6IJnYFmHm5MB8GA1UdIwQYMBaAFB7soDp3ZSuQcLXhM4CaIjgwyJz5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQ1Ni84MThCNEQwMjFB
QUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1Qnd0ZUV6Z0pvaU9ERElu
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h1eWdPbmRsSzVCd3RlRXpnSm9pT0RESW5Qay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUQ1Ni84MThCNEQwMjFBQUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1
Qnd0ZUV6Z0pvaU9EREluUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmtyE8fo97wOm+iZ0SWwSEzZutDyjDt2JDEto5xl7P0HbHOWm4WM9RXoszs6/
uvEOqbe/0ayRmaGA5EelhM1N/HwJLjojlu2ADcXgSZ/3fNN1+9WlO0uHiBIHfTY7
6mHcs2uLcT2k8moDpQ7NxlcMnt5tFZlNNQaRHgNSf5iUUsEEOBe49mhTJeO+fd3l
7/aXNRAWJUzkg/dsOF/j1kYFkfTsm5u1/I6my/qDa9ukcxEOLvF96TB3FAXO+HJZ
WP28oG1mDTQM30m9QzVJXxtJacNeNp1Mu0vbQ+LwZsZMGRKpkk4ZDkiw2n+YW+xM
JvxOnZPq7DecZHNQ055CHdKKhw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:54 2026 by rpki-client