
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
File: HtdycKSBilV07-7Kyvt0g812iCE.mft (raw, json)
Hash identifier: jekabLpKP5X5uF6tm3j4DIAWbzwgWy9IPu4B+3NfTcc=
Subject key identifier: 72:57:62:6B:DC:5E:C1:3B:EA:E0:4C:C7:11:12:0A:B2:ED:3D:A3:E9
Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21
Certificate issuer: /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821
Certificate serial: 0AE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
Manifest number: 0AE1
Signing time: Sun 01 Mar 2026 23:59:15 +0000
Manifest this update: Sun 01 Mar 2026 23:59:13 +0000
Manifest next update: Sun 08 Mar 2026 23:59:13 +0000
Files and hashes: 1: HtdycKSBilV07-7Kyvt0g812iCE.crl (hash: 4Ew9tzJmMGd+m724VQqxjUWCUG9Bnn2NgJZOmEs+IuY=)
2: 7C29A45A669A11EA9A11434FC4F9AE02.roa (hash: p2oVcwIUpeODiv+NUpufJsBItMDrUVn0bYaGqwkEXRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl
rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2793 (0xae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821
Validity
Not Before: Mar 1 23:59:13 2026 GMT
Not After : Mar 8 23:59:13 2026 GMT
Subject: CN=69a4d2d2-2da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:e3:99:5e:bb:37:64:fe:8e:5d:7a:28:a9:
86:54:be:78:2a:13:7c:bd:4a:e9:c7:45:76:f7:d1:
e0:c5:eb:aa:a5:67:99:b5:44:4e:61:fc:ea:a9:b7:
d2:77:04:8d:c2:7c:a7:9f:4a:64:e1:fe:4f:2d:9e:
d2:df:3f:4b:6b:9d:80:52:c7:cf:66:ff:b6:8d:0f:
5d:2c:07:81:a0:9e:07:51:3d:ff:5a:c9:b7:ef:99:
9f:7c:00:7d:9c:45:01:74:2c:82:1e:ba:ac:c3:f3:
4f:da:64:9f:5d:f7:a2:df:ea:2f:eb:83:3e:03:5a:
c5:07:73:88:e6:06:95:18:ba:db:78:fd:5b:23:e7:
02:3a:5c:16:6c:76:9c:eb:f4:9d:10:1c:bb:30:de:
e8:c5:f5:8e:15:58:0a:e2:8f:99:4b:b9:41:c3:d2:
70:96:c3:0a:ab:d6:f4:2d:ff:48:6d:38:f5:5a:eb:
ce:42:1a:08:cb:79:29:ed:24:b4:73:5f:4c:df:72:
ee:16:05:a8:7b:ec:29:cd:a5:40:a6:61:63:b7:68:
1f:3c:b6:16:56:b3:db:bc:ac:fa:17:da:b7:c0:a9:
45:9b:f6:88:30:cf:fc:31:57:26:a0:b0:c7:56:59:
b6:1b:93:8d:6b:dd:67:ce:13:e5:4a:b7:89:e7:ae:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:57:62:6B:DC:5E:C1:3B:EA:E0:4C:C7:11:12:0A:B2:ED:3D:A3:E9
X509v3 Authority Key Identifier:
keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3a:96:a8:aa:04:fc:cb:c3:e2:de:7c:97:26:fd:01:77:8b:
a7:7f:a7:ce:81:9a:da:96:70:e9:62:4b:3f:04:00:c0:1d:16:
7f:43:71:aa:a3:7c:df:88:c8:23:0f:e2:e4:0e:a3:db:97:3a:
f8:dd:ad:79:ed:4a:74:a0:b1:ab:98:7e:69:9c:16:69:df:20:
a7:90:49:6b:a1:73:84:0f:fc:44:39:31:75:6e:f2:5b:4a:03:
69:c9:f0:13:a6:21:00:34:a8:40:c7:1f:d3:02:29:40:aa:90:
68:11:e4:df:b4:97:c6:88:98:55:2d:4f:ad:a8:fc:7b:97:7c:
20:b3:45:4b:0e:14:91:81:c5:29:2c:70:32:6c:53:d0:df:a5:
fe:21:fd:c3:9e:dd:dc:dc:02:22:51:7f:f5:c2:37:e9:7f:db:
88:c2:7d:d3:f3:ed:04:76:7e:52:b4:1a:9f:ff:91:5e:43:79:
8e:54:93:e2:fc:dc:1b:ff:66:bd:c1:f6:48:18:6c:d0:59:96:
16:17:36:20:bc:bb:99:9e:de:7f:ea:16:b8:73:c2:cc:1f:92:
85:2a:0f:a7:3e:99:97:6c:ac:5f:ff:69:53:f2:de:3a:33:a4:
56:36:67:47:d5:eb:81:b9:5e:1b:8e:d8:8c:e4:58:db:4f:37:
31:cc:05:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:29 2026 by rpki-client