
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json)
Hash identifier: TqkY1Kqo7cydk25EfjUGdep/7NFTfDEacqgeJq/5+28=
Subject key identifier: 64:5F:CF:BA:16:8A:BF:EF:EB:49:E9:39:4D:00:47:64:CC:4B:7C:54
Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Certificate serial: 041D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
Manifest number: 0411
Signing time: Mon 21 Sep 2026 00:12:56 +0000
Manifest this update: Mon 21 Sep 2026 00:12:55 +0000
Manifest next update: Mon 28 Sep 2026 00:12:55 +0000
Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: Upjm/zZW9WmdObg3Pn539RDp61I+kw82r+a2dANi8rw=)
2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: bEkAf8RbC70HpP82l6520PaTKeuoOgUw/cUr1803UXE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl
rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1053 (0x41d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Validity
Not Before: Sep 21 00:12:55 2026 GMT
Not After : Sep 28 00:12:55 2026 GMT
Subject: CN=6ab07688-2cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:fa:9b:9b:3b:3d:19:8c:5d:8e:80:f7:ac:
12:37:0b:7d:bb:4f:73:78:c7:53:b3:11:f0:b2:8f:
17:0a:2b:97:42:07:42:22:de:79:8c:4c:95:8c:d8:
90:70:a1:af:ed:67:7c:a7:df:0a:e5:14:91:87:ca:
50:31:c9:ed:a6:68:d8:bc:62:09:e3:13:81:43:91:
d9:bd:58:7c:d8:b0:a1:38:f7:b5:fc:7e:87:83:3d:
f2:c2:a0:c5:82:5c:5c:f2:11:54:3d:35:ef:b8:55:
56:97:5c:ef:ef:db:3d:66:02:41:a1:6e:ac:c9:d2:
61:2f:b2:07:06:87:41:bc:f6:47:1d:b7:fa:69:9c:
b9:de:93:60:a5:31:72:f8:53:73:45:94:30:6e:22:
61:59:da:f4:99:c4:a7:6e:53:cb:8a:00:c1:23:4b:
cb:5f:15:62:43:bc:cc:25:78:e6:7a:72:62:2a:9d:
ba:42:92:f1:80:a1:97:61:92:e7:ea:94:4e:22:c5:
f2:a3:b6:24:d6:5c:e9:44:e6:f6:44:4b:65:74:6d:
7c:81:02:e1:32:99:5f:60:9e:aa:60:c5:2a:72:11:
41:7b:60:b8:72:ee:d0:b9:ba:46:4c:eb:7d:f3:1a:
7d:c5:79:21:f8:4b:68:89:e9:96:b1:cf:18:24:de:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5F:CF:BA:16:8A:BF:EF:EB:49:E9:39:4D:00:47:64:CC:4B:7C:54
X509v3 Authority Key Identifier:
keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:6f:00:37:f9:ae:dc:88:02:f9:41:1e:0f:0e:7b:00:a2:e9:
d2:b2:25:e4:9b:35:4f:f9:f4:69:19:d7:ee:0a:b4:ea:ce:de:
76:9f:c2:36:fe:df:31:a1:15:aa:19:23:c4:0e:a6:45:01:7a:
d2:38:58:ae:2f:2e:a6:5b:fa:a7:a9:87:81:36:dc:1e:f7:da:
7b:f2:11:4b:cb:82:63:5c:ef:f4:db:78:0d:59:af:0a:cb:21:
c3:ae:e0:f0:3c:b4:fd:86:b4:82:f5:31:43:df:d2:ba:3b:c2:
8b:58:a3:0c:33:cb:ff:2e:11:a7:a1:f6:ab:9a:e1:9d:b0:62:
e2:69:22:6a:9b:17:cf:c4:e9:5a:2a:3f:a7:b1:af:a2:e8:8b:
7c:d5:f6:ff:02:91:64:9d:a4:6c:58:99:6f:10:70:f2:d9:97:
07:09:97:ac:ce:46:16:5c:aa:84:60:d5:e6:f2:34:d6:e9:ca:
cc:af:57:2b:f0:25:36:d0:8a:18:6e:55:74:2f:9e:c0:5b:bd:
59:71:a8:a3:a2:16:84:4b:b1:b8:b8:e3:8c:53:3c:3b:bf:b8:
19:8b:43:56:93:71:e6:31:ff:15:9d:89:46:20:9f:64:dd:86:
b7:b4:f2:72:62:e0:02:06:82:3e:59:0d:01:44:c3:66:50:a5:
1d:8d:8d:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3
QjdEOUYxQzEwHhcNMjYwOTIxMDAxMjU1WhcNMjYwOTI4MDAxMjU1WjAYMRYwFAYD
VQQDEw02YWIwNzY4OC0yY2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqlz6m5s7PRmMXY6A96wSNwt9u09zeMdTsxHwso8XCiuXQgdCIt55jEyVjNiQ
cKGv7Wd8p98K5RSRh8pQMcntpmjYvGIJ4xOBQ5HZvVh82LChOPe1/H6Hgz3ywqDF
glxc8hFUPTXvuFVWl1zv79s9ZgJBoW6sydJhL7IHBodBvPZHHbf6aZy53pNgpTFy
+FNzRZQwbiJhWdr0mcSnblPLigDBI0vLXxViQ7zMJXjmenJiKp26QpLxgKGXYZLn
6pROIsXyo7Yk1lzpROb2REtldG18gQLhMplfYJ6qYMUqchFBe2C4cu7QubpGTOt9
8xp9xXkh+EtoiemWsc8YJN7viwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGRfz7oW
ir/v60npOU0AR2TMS3xUMB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw
RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0
LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN28AN/mu3IgC+UEeDw57AKLp0rIl5Js1T/n0aRnX7gq06s7edp/CNv7fMaEV
qhkjxA6mRQF60jhYri8uplv6p6mHgTbcHvfae/IRS8uCY1zv9Nt4DVmvCsshw67g
8Dy0/Ya0gvUxQ9/SujvCi1ijDDPL/y4Rp6H2q5rhnbBi4mkiapsXz8TpWio/p7Gv
ouiLfNX2/wKRZJ2kbFiZbxBw8tmXBwmXrM5GFlyqhGDV5vI01unKzK9XK/AlNtCK
GG5VdC+ewFu9WXGoo6IWhEuxuLjjjFM8O7+4GYtDVpNx5jH/FZ2JRiCfZN2Gt7Ty
cmLgAgaCPlkNAUTDZlClHY2Nuw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:25:12 2026 by rpki-client