
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json)
Hash identifier: 8q3tcWYEGcWnDTxRHtIyZPBD6jwbR5/NmNTvlD6J01w=
Subject key identifier: A5:E2:46:41:B1:C6:73:51:9E:B0:D8:70:F3:BC:92:A5:4E:26:11:A7
Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Certificate serial: 04E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
Manifest number: 04D7
Signing time: Mon 02 Mar 2026 00:56:58 +0000
Manifest this update: Mon 02 Mar 2026 00:56:56 +0000
Manifest next update: Mon 09 Mar 2026 00:56:56 +0000
Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: Yi+0FoYkIk0wOKSKnRIvh6FTbW36/JwL1sMAjVQydJ4=)
2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: n648Yvz53rsJ1dG0NtAeKrqioIBy25td2h9ZGC5vq8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:56:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Validity
Not Before: Mar 2 00:56:56 2026 GMT
Not After : Mar 9 00:56:56 2026 GMT
Subject: CN=69a4e05a-09b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5f:99:4a:35:9f:1f:e4:bf:ab:1a:d6:22:23:
a5:ab:57:f1:0b:74:71:af:40:80:5c:4c:cf:15:0e:
0b:d2:00:aa:ca:88:35:a8:18:c1:db:0d:28:39:6a:
d7:e7:0a:71:61:d4:37:80:1f:1e:97:e0:32:d4:ea:
c6:5f:83:99:1f:22:a9:97:70:85:8c:e1:9e:32:e3:
8c:92:f6:e4:09:99:d2:e0:e2:79:0b:29:5a:bc:0f:
94:cf:cf:b2:37:73:39:53:28:a3:2e:b5:97:87:dc:
df:3e:3d:08:0e:2b:12:45:2e:67:c0:11:6a:69:76:
ee:eb:f5:af:59:0d:59:5a:18:e6:11:18:58:c5:f8:
80:a8:f3:0e:5b:fb:7c:3a:f3:f6:f1:32:09:f9:5c:
84:1f:63:cf:11:3c:f4:33:60:d0:d5:07:54:5b:a0:
b3:21:19:a6:73:ab:0a:06:45:7b:18:fd:16:4e:6e:
1f:b4:1e:a9:22:4d:95:6c:31:de:aa:4a:ed:4e:ff:
ee:e4:07:fa:5b:08:f9:aa:2a:9d:07:30:02:97:50:
b6:c0:09:76:0c:e8:db:f2:8f:2d:bd:28:ff:72:b3:
21:f5:c5:60:eb:a1:44:e9:4d:d1:67:ff:e1:f3:0e:
cb:43:fe:af:10:c0:0a:ac:a3:6c:63:7b:e5:6a:c7:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E2:46:41:B1:C6:73:51:9E:B0:D8:70:F3:BC:92:A5:4E:26:11:A7
X509v3 Authority Key Identifier:
keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6a:57:92:42:66:57:bd:e9:61:ac:eb:18:83:30:7f:31:7a:
da:2e:f7:55:9c:04:3e:b9:3b:a5:7d:da:72:d2:ad:0a:c4:61:
0b:91:fd:30:42:9a:0a:19:28:35:7e:3e:50:79:04:cd:d7:7b:
34:5f:7c:5e:f5:a5:92:04:66:f7:63:ac:15:b0:14:c6:5f:b2:
1a:80:52:f8:aa:6b:48:ac:95:04:b5:ca:03:31:e0:45:5a:41:
b7:73:2d:23:61:2e:18:41:30:97:af:d9:b8:dc:2d:14:4d:bc:
58:5f:8a:84:44:37:7e:ab:24:c4:bc:22:a4:43:89:b1:3e:37:
98:9c:21:7a:af:ce:a7:ee:9f:a7:cd:61:31:60:5d:40:23:94:
44:81:f6:48:db:2a:0a:bd:e0:9a:1f:bb:bc:a2:ab:2a:0b:c3:
77:2b:65:37:4f:de:1a:91:de:7b:e0:ec:10:b8:84:96:04:30:
3c:f8:59:93:16:73:3f:81:0f:0c:e2:89:c7:1a:af:d5:8c:27:
71:71:c1:7f:d5:64:9b:a0:1c:52:43:06:68:92:96:bf:ba:41:
eb:85:23:50:c7:2e:c6:5a:90:80:48:31:8e:b3:68:b8:1f:1f:
07:84:dd:15:07:ee:f2:c4:83:32:65:2a:ae:63:1c:ba:a6:68:
19:26:f9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:12 2026 by rpki-client