
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json)
Hash identifier: qwjIjg3TtULy6hcQgyhVRBYvRu6o7HRaCuUiTBhMcjk=
Subject key identifier: DE:B8:C8:98:88:3C:CC:04:FF:C0:B7:C1:8F:82:CE:D8:C6:EB:95:70
Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Certificate serial: 03B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
Manifest number: 03A7
Signing time: Sun 01 Mar 2026 22:36:20 +0000
Manifest this update: Sun 01 Mar 2026 22:36:19 +0000
Manifest next update: Sun 08 Mar 2026 22:36:19 +0000
Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: M2gu3dJR9uWQQE76hSWvwzLNEh3NaBQ+zfXjd87a67Y=)
2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: DSIfNa17RdU77qIRp8z8Kzsgm5ZeTJKHenlHD4Tp8Bk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl
rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:36:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 946 (0x3b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Validity
Not Before: Mar 1 22:36:19 2026 GMT
Not After : Mar 8 22:36:19 2026 GMT
Subject: CN=69a4bf64-171f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:b9:81:e9:f2:a6:ac:cb:60:5c:9c:e5:c4:
79:2c:a5:58:11:d0:5a:fa:52:17:a1:7a:2f:7f:bd:
00:51:19:96:e4:28:40:59:71:6d:07:d6:49:e6:d6:
20:e1:cd:00:50:58:1b:55:37:18:50:49:5f:c6:a2:
f6:27:50:f1:e5:c8:c2:a5:97:96:f3:f1:74:d3:04:
ec:c7:eb:44:d1:62:90:c4:59:85:b4:93:7b:c8:9a:
49:ad:93:75:7f:1b:a0:7f:f3:ca:ca:80:bb:3c:0d:
90:86:2c:a2:50:5c:70:24:bf:2a:74:4f:d1:87:61:
44:87:78:80:3e:29:e1:b4:66:71:18:e7:1c:10:46:
55:a5:97:ff:0d:43:2a:76:18:48:62:a4:88:2e:77:
f0:ae:1d:ef:16:38:4d:e4:d6:26:b2:b7:97:64:86:
07:dd:13:69:3b:0f:48:40:12:db:cd:39:f4:d6:b8:
b4:3f:d7:9b:0a:fd:56:22:80:73:06:d7:a7:9c:f4:
0b:b1:bf:d5:19:f3:28:22:85:f9:6a:a4:b3:78:9c:
48:0b:ac:5e:1e:a9:7a:3f:5a:4c:e1:8e:ea:54:f9:
6d:f0:d3:13:c4:a1:63:39:df:08:f8:3d:52:ee:ad:
b8:20:b3:4a:3c:c6:f7:b8:a5:54:a9:15:43:05:36:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B8:C8:98:88:3C:CC:04:FF:C0:B7:C1:8F:82:CE:D8:C6:EB:95:70
X509v3 Authority Key Identifier:
keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a1:9f:56:0a:35:de:ad:89:66:55:fd:15:8d:35:b1:33:03:
55:18:63:4f:a5:6f:85:ca:3b:09:16:ef:7d:a8:84:09:de:d6:
32:38:23:f3:40:6b:a5:cd:09:4d:26:de:96:1a:3a:d1:68:89:
3c:c2:f6:71:a1:94:00:45:a5:c2:93:b5:c3:04:82:b9:6d:8e:
9d:e5:ff:38:35:58:78:1e:25:ba:af:e2:e7:5c:86:54:f6:b4:
1e:e7:1e:a5:f6:6f:b1:b4:e9:b2:fc:6e:d3:ba:34:8f:a0:ee:
b7:d7:b7:3c:38:46:6f:4b:f9:7d:6a:00:56:49:9a:92:61:61:
3d:f7:c5:54:06:02:a2:e1:13:c8:48:6d:a2:79:d0:e4:6a:f5:
8e:c2:7d:c1:e1:b1:31:9e:8a:f6:d6:2d:ea:0f:1a:4b:38:89:
51:07:86:7f:d4:5f:54:c7:23:09:c7:34:d4:0b:fc:f0:50:68:
94:1d:7d:00:67:b6:41:9c:f9:2a:28:9b:ca:1e:54:da:0a:7b:
ae:6c:91:ab:16:a4:1e:4c:6a:48:1d:04:c6:8e:c9:92:6f:92:
57:00:5a:1b:99:9c:bb:0d:0c:65:b0:dc:80:5e:da:3e:c1:6c:
8c:fe:cb:fa:1b:15:74:d4:b5:90:f3:37:91:17:9d:1b:25:d7:
ce:1a:7f:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3
QjdEOUYxQzEwHhcNMjYwMzAxMjIzNjE5WhcNMjYwMzA4MjIzNjE5WjAYMRYwFAYD
VQQDEw02OWE0YmY2NC0xNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqBi5genypqzLYFyc5cR5LKVYEdBa+lIXoXovf70AURmW5ChAWXFtB9ZJ5tYg
4c0AUFgbVTcYUElfxqL2J1Dx5cjCpZeW8/F00wTsx+tE0WKQxFmFtJN7yJpJrZN1
fxugf/PKyoC7PA2QhiyiUFxwJL8qdE/Rh2FEh3iAPinhtGZxGOccEEZVpZf/DUMq
dhhIYqSILnfwrh3vFjhN5NYmsreXZIYH3RNpOw9IQBLbzTn01ri0P9ebCv1WIoBz
BtennPQLsb/VGfMoIoX5aqSzeJxIC6xeHql6P1pM4Y7qVPlt8NMTxKFjOd8I+D1S
7q24ILNKPMb3uKVUqRVDBTYHZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN64yJiI
PMwE/8C3wY+CztjG65VwMB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw
RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0
LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjKGfVgo13q2JZlX9FY01sTMDVRhjT6Vvhco7CRbvfaiECd7WMjgj80Brpc0J
TSbelho60WiJPML2caGUAEWlwpO1wwSCuW2OneX/ODVYeB4luq/i51yGVPa0Huce
pfZvsbTpsvxu07o0j6Dut9e3PDhGb0v5fWoAVkmakmFhPffFVAYCouETyEhtonnQ
5Gr1jsJ9weGxMZ6K9tYt6g8aSziJUQeGf9RfVMcjCcc01Av88FBolB19AGe2QZz5
Kiibyh5U2gp7rmyRqxakHkxqSB0Exo7Jkm+SVwBaG5mcuw0MZbDcgF7aPsFsjP7L
+hsVdNS1kPM3kRedGyXXzhp/SQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:17 2026 by rpki-client