
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft
File: Hy55yPeszIoD-1tKOvzF9pMbN4I.mft (raw, json)
Hash identifier: 06qe5xP6137aVpdaj3NSDE0u6WH7oVsS9OWtnd7KQ3g=
Subject key identifier: 8D:9F:16:FF:6C:78:62:63:F1:0F:0D:84:38:A5:F3:B4:9C:65:C2:AE
Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82
Certificate issuer: /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782
Certificate serial: 17E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft
Manifest number: 17D4
Signing time: Thu 16 Apr 2026 16:30:02 +0000
Manifest this update: Thu 16 Apr 2026 16:30:02 +0000
Manifest next update: Thu 23 Apr 2026 16:30:02 +0000
Files and hashes: 1: Hy55yPeszIoD-1tKOvzF9pMbN4I.crl (hash: I3qVUbT11Yi3EXB94XELpbKmRp5v44sIKy/K7WW6dPE=)
2: 02181C4CE13511E7B0D71C83C4F9AE02.roa (hash: v3H/p5Ktvsz+MkxJKek+k3rhTh/FkFVJc40/XtTzh38=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl
rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6113 (0x17e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB09C, serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782
Validity
Not Before: Apr 16 16:30:02 2026 GMT
Not After : Apr 23 16:30:02 2026 GMT
Subject: CN=69e10e8a-e11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:86:af:bd:8f:a6:3d:bc:bc:42:39:3f:44:
95:f0:65:f7:11:1e:c0:6d:35:17:a5:52:61:9c:40:
88:91:cf:f5:08:51:0f:ab:16:e2:51:93:8a:cf:94:
ff:5e:51:58:87:33:9c:c8:85:20:00:31:d0:ba:95:
44:1d:2e:e0:0d:f2:61:11:fe:d4:9c:90:da:aa:7e:
58:00:a7:79:44:f6:40:e7:e0:8d:c5:1c:14:7e:55:
61:01:a4:b5:25:ba:73:d6:c9:70:c9:d9:95:7e:d4:
61:c2:81:9e:b5:ad:57:e8:eb:68:8a:5f:9d:e8:c8:
e3:18:9c:47:c3:cc:f2:d4:61:cf:e8:d6:ac:a4:d1:
6e:4a:6c:13:55:70:aa:1c:cf:bb:30:bb:97:be:72:
56:54:f9:79:19:b4:ee:ad:b9:4f:62:fb:85:c0:99:
19:af:1d:1f:2c:b6:86:20:f7:53:ae:b3:7c:d7:a7:
3a:56:f1:b9:11:07:3f:4a:9f:18:3f:e1:7d:cf:c9:
36:ac:10:d6:78:35:d3:da:eb:0c:20:7f:f4:3f:a3:
bf:a3:58:66:da:9b:59:30:3e:ed:60:9c:bd:4a:2b:
15:40:dc:d2:a9:a3:fe:0e:a2:4a:2a:0b:3a:98:db:
d0:5b:2b:78:bc:47:bb:b4:bb:de:8a:b7:49:01:4b:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9F:16:FF:6C:78:62:63:F1:0F:0D:84:38:A5:F3:B4:9C:65:C2:AE
X509v3 Authority Key Identifier:
keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0b:e3:e7:72:8e:d1:22:5e:0f:65:81:d0:ff:fe:9d:18:67:
f3:1c:8f:8c:86:39:3d:a0:31:09:b5:75:2a:be:5e:7d:5e:a1:
77:84:83:12:8e:17:64:7f:50:9c:4f:fb:34:63:d4:ef:78:b5:
6b:03:96:f4:0a:ca:a9:6b:a0:b6:de:94:ea:eb:2e:59:87:2f:
89:88:1c:67:20:49:79:78:35:f4:d3:62:71:86:86:bf:67:4a:
f9:f9:7a:cc:59:4e:1f:de:8f:8a:cf:49:bf:74:6c:5d:b9:6b:
e3:15:6c:95:38:fd:f4:9e:70:92:1e:97:33:d4:e4:7e:5b:02:
79:23:8c:56:22:d0:8a:2a:50:78:7e:87:c2:1e:40:c8:f8:25:
9b:5b:52:76:55:fa:19:cd:d5:21:9f:86:44:7d:e9:ac:64:e2:
01:9a:04:f0:c4:b9:63:7a:00:48:8d:79:a2:95:14:cc:7f:38:
78:15:d6:99:5c:5a:a7:98:96:ec:ea:98:26:8e:75:24:7e:f4:
79:09:0a:b6:cc:ad:fb:47:69:0e:92:cf:a7:95:35:ad:6b:86:
7e:b6:69:21:ae:a9:84:10:b9:48:d0:e1:95:88:44:09:96:95:
cd:a4:28:8b:4d:1e:80:3d:aa:d5:ea:85:35:32:0f:1a:fb:fb:
59:27:d9:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkIwOUMxMTAvBgNVBAUTKDFGMkU3OUM4RjdBQ0NDOEEwM0ZCNUI0QTNBRkNDNUY2
OTMxQjM3ODIwHhcNMjYwNDE2MTYzMDAyWhcNMjYwNDIzMTYzMDAyWjAYMRYwFAYD
VQQDEw02OWUxMGU4YS1lMTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArpOGr72Ppj28vEI5P0SV8GX3ER7AbTUXpVJhnECIkc/1CFEPqxbiUZOKz5T/
XlFYhzOcyIUgADHQupVEHS7gDfJhEf7UnJDaqn5YAKd5RPZA5+CNxRwUflVhAaS1
Jbpz1slwydmVftRhwoGeta1X6Otoil+d6MjjGJxHw8zy1GHP6NaspNFuSmwTVXCq
HM+7MLuXvnJWVPl5GbTurblPYvuFwJkZrx0fLLaGIPdTrrN816c6VvG5EQc/Sp8Y
P+F9z8k2rBDWeDXT2usMIH/0P6O/o1hm2ptZMD7tYJy9SisVQNzSqaP+DqJKKgs6
mNvQWyt4vEe7tLveirdJAUtVYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2fFv9s
eGJj8Q8NhDil87ScZcKuMB8GA1UdIwQYMBaAFB8uecj3rMyKA/tbSjr8xfaTGzeC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjA5Qy8xRkNEMTVFMEUx
MzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJb0QtMXRLT3Z6RjlwTWJO
NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h5NTV5UGVzeklvRC0xdEtPdnpGOXBNYk40SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjA5Qy8xRkNEMTVFMEUxMzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJ
b0QtMXRLT3Z6RjlwTWJONEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAewvj53KO0SJeD2WB0P/+nRhn8xyPjIY5PaAxCbV1Kr5efV6hd4SDEo4XZH9Q
nE/7NGPU73i1awOW9ArKqWugtt6U6usuWYcviYgcZyBJeXg19NNicYaGv2dK+fl6
zFlOH96Pis9Jv3RsXblr4xVslTj99J5wkh6XM9TkflsCeSOMViLQiipQeH6Hwh5A
yPglm1tSdlX6Gc3VIZ+GRH3prGTiAZoE8MS5Y3oASI15opUUzH84eBXWmVxap5iW
7OqYJo51JH70eQkKtsyt+0dpDpLPp5U1rWuGfrZpIa6phBC5SNDhlYhECZaVzaQo
i00egD2q1eqFNTIPGvv7WSfZ5Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:51:36 2026 by rpki-client