
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
File: HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft (raw, json)
Hash identifier: 7wqLxJLkTItWL6sK8zk1rqVyi9z3Pew5ym9/Sl5J2o0=
Subject key identifier: 32:AD:78:D1:05:8F:D6:B8:85:22:54:23:D5:DD:03:05:68:D6:0A:60
Authority key identifier: 1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66
Certificate issuer: /CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
Certificate serial: 35AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
Manifest number: 359C
Signing time: Wed 14 Oct 2026 15:17:02 +0000
Manifest this update: Wed 14 Oct 2026 15:17:01 +0000
Manifest next update: Wed 21 Oct 2026 15:17:01 +0000
Files and hashes: 1: HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl (hash: RvcrM2z7uOfPYbY/1pQwcSy/dA1t8HRxhTpyLSa5JoU=)
2: 08FA1EC60C0911EDBDF8C44FC4F9AE02.roa (hash: tRtrQvjE9z67S7Cpq/WO6AwSAWNcagYbGUvyOhMNams=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl
rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 15:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13739 (0x35ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2CA8, serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
Validity
Not Before: Oct 14 15:17:01 2026 GMT
Not After : Oct 21 15:17:01 2026 GMT
Subject: CN=6acf9cee-77ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:72:cf:b9:5f:1e:c6:0b:7d:87:35:55:2f:
35:26:c9:15:3f:50:40:80:c8:d0:99:dd:6a:ea:23:
55:70:39:14:2e:64:ca:84:ea:6a:00:7e:b3:16:92:
8c:58:ea:1f:ed:5c:ea:1a:84:46:9f:22:65:1b:ff:
93:ba:c7:36:0e:e3:59:43:94:63:d4:2c:3f:32:bf:
59:1d:46:ab:ea:f7:02:57:35:71:75:98:34:11:81:
e2:f5:1c:ea:b6:b1:be:19:8e:2b:1b:89:a6:10:3d:
04:ee:b5:02:88:e9:26:c4:66:67:d3:68:78:02:c0:
37:e7:58:04:5b:57:0c:5e:21:45:b3:a1:4d:be:07:
3b:6d:34:d5:80:4d:9d:5b:63:ec:2b:80:21:10:ac:
7c:bb:1d:63:a4:f9:54:20:84:e5:ca:cb:7c:ac:85:
57:3c:de:78:62:22:1e:9a:17:84:85:69:9c:d5:75:
a2:26:b0:b4:4d:db:91:9d:57:a8:59:3d:5e:9d:b9:
af:15:61:89:e3:a5:cc:d4:71:e9:18:7f:1f:65:53:
9b:63:6e:46:6c:c1:d3:14:a2:6a:ee:d2:ef:41:c4:
73:65:e3:e0:aa:ca:35:b0:c3:ce:e8:10:2e:32:ab:
e5:d4:56:90:f7:b2:01:24:61:f8:28:2a:b8:a8:ea:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AD:78:D1:05:8F:D6:B8:85:22:54:23:D5:DD:03:05:68:D6:0A:60
X509v3 Authority Key Identifier:
keyid:1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4b:4c:5e:aa:0c:d7:7d:27:93:75:a5:af:41:f9:f4:ac:8b:
75:c1:5d:8a:d0:79:25:61:80:6e:40:10:57:ae:a8:1e:82:0a:
08:e2:5c:d7:d0:1b:a3:81:df:03:e9:4a:cf:78:64:37:99:53:
d2:e1:98:5e:19:03:05:64:86:7d:db:44:df:5d:9c:61:cc:3c:
2f:17:77:96:a8:c4:4f:13:06:b1:83:09:15:61:5a:f6:75:1f:
af:64:53:65:7b:8e:2e:7b:ce:71:2e:92:3e:96:d3:46:c1:8b:
5c:23:71:e1:0d:55:20:7c:23:54:b1:f7:5f:47:9d:6f:de:50:
0c:f6:46:c9:af:fe:e1:ae:b2:9c:30:66:ba:c8:22:7b:5f:db:
84:2e:f2:ae:8c:e4:fe:d2:7b:fd:d7:cf:49:4e:ea:11:15:e3:
8e:a0:19:8f:ae:16:a6:d3:e2:ba:bd:e9:58:fa:50:36:3c:ef:
f0:95:38:13:aa:f2:23:c8:73:63:8a:2f:cd:d3:cf:a1:9e:e8:
5a:b4:94:90:3d:0b:5d:7c:91:0a:c8:02:47:6d:16:e6:9d:26:
5c:90:68:c4:f0:54:31:4f:97:0c:9a:b4:95:98:df:d7:57:8f:
38:ee:38:71:29:ff:0d:06:4c:25:20:96:06:04:68:0b:7a:a3:
06:fa:37:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjJDQTgxMTAvBgNVBAUTKDFFNzUyQzNEMTYwNDhDM0YzRjYzMjNEMkI5MTA3MEJG
MjQ3RDY4NjYwHhcNMjYxMDE0MTUxNzAxWhcNMjYxMDIxMTUxNzAxWjAYMRYwFAYD
VQQDEw02YWNmOWNlZS03N2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxkFyz7lfHsYLfYc1VS81JskVP1BAgMjQmd1q6iNVcDkULmTKhOpqAH6zFpKM
WOof7VzqGoRGnyJlG/+Tusc2DuNZQ5Rj1Cw/Mr9ZHUar6vcCVzVxdZg0EYHi9Rzq
trG+GY4rG4mmED0E7rUCiOkmxGZn02h4AsA351gEW1cMXiFFs6FNvgc7bTTVgE2d
W2PsK4AhEKx8ux1jpPlUIITlyst8rIVXPN54YiIemheEhWmc1XWiJrC0TduRnVeo
WT1enbmvFWGJ46XM1HHpGH8fZVObY25GbMHTFKJq7tLvQcRzZePgqso1sMPO6BAu
Mqvl1FaQ97IBJGH4KCq4qOqH6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKteNEF
j9a4hSJUI9XdAwVo1gpgMB8GA1UdIwQYMBaAFB51LD0WBIw/P2Mj0rkQcL8kfWhm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkNBOC84NzAzMjI1ODFE
OUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpEOF9ZeVBTdVJCd3Z5Ujlh
R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0huVXNQUllFakQ4X1l5UFN1UkJ3dnlSOWFHWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MkNBOC84NzAzMjI1ODFEOUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpE
OF9ZeVBTdVJCd3Z5UjlhR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbUtMXqoM130nk3Wlr0H59KyLdcFditB5JWGAbkAQV66oHoIKCOJc19Abo4Hf
A+lKz3hkN5lT0uGYXhkDBWSGfdtE312cYcw8Lxd3lqjETxMGsYMJFWFa9nUfr2RT
ZXuOLnvOcS6SPpbTRsGLXCNx4Q1VIHwjVLH3X0edb95QDPZGya/+4a6ynDBmusgi
e1/bhC7yrozk/tJ7/dfPSU7qERXjjqAZj64WptPiur3pWPpQNjzv8JU4E6ryI8hz
Y4ovzdPPoZ7oWrSUkD0LXXyRCsgCR20W5p0mXJBoxPBUMU+XDJq0lZjf11ePOO44
cSn/DQZMJSCWBgRoC3qjBvo3dQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 21:21:24 2026 by rpki-client