
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json)
Hash identifier: nNk9+mVbzGow4MATpMZ6JDzveh41pJj0NSfDn1xigF4=
Subject key identifier: 2A:FB:0F:01:7E:EF:40:3E:A6:36:9B:D9:66:29:DB:24:28:AB:28:E1
Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Certificate serial: 0530
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
Manifest number: 0524
Signing time: Mon 27 Jul 2026 00:34:47 +0000
Manifest this update: Mon 27 Jul 2026 00:34:47 +0000
Manifest next update: Mon 03 Aug 2026 00:34:47 +0000
Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: Po5ehFEUm41Mbh0Xsdm4osNRir96eeN4Zq39OM8cem0=)
2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: 9xagtFPDPDh7sP5RKvooGHMvmH3Edj6QzRlAg2sHVUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:34:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1328 (0x530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Validity
Not Before: Jul 27 00:34:47 2026 GMT
Not After : Aug 3 00:34:47 2026 GMT
Subject: CN=6a66a7a7-74a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:ea:b3:0c:40:14:b3:59:ce:b7:71:b2:fe:
5a:ff:44:a3:cc:87:90:ce:f8:d9:f7:db:0a:e3:71:
a5:85:b8:80:5e:2e:8b:26:f9:5f:5f:19:2d:e2:48:
6d:93:0d:b2:d0:e7:ce:f6:95:82:b3:11:fa:9f:de:
c6:5e:3b:d4:3f:66:8f:52:da:63:eb:01:0c:c4:86:
78:3a:d9:7f:96:5e:76:7d:4f:9b:cc:08:3e:5d:da:
d8:45:2f:95:89:2f:62:6c:fa:ff:aa:e7:d5:fd:f9:
90:d8:35:29:3f:a6:08:fc:a3:ef:e7:7f:6d:13:db:
0d:b7:65:5e:27:b9:2a:29:dd:e4:1a:67:10:f9:da:
95:49:ec:d1:34:bf:5a:38:da:bd:72:93:39:e8:46:
f7:e3:c3:f4:81:9b:a4:86:2f:90:26:fa:7c:ff:40:
da:ff:c9:dd:36:a1:1d:a8:97:2d:a5:c0:ac:30:24:
5e:55:f2:a4:f9:2f:94:9f:bf:e7:63:bb:29:95:2d:
89:6a:69:a3:90:0d:04:cf:7f:ae:e7:c5:06:a8:31:
4b:c4:14:9f:52:e3:62:8e:1c:8c:1b:eb:51:89:c6:
c3:b8:4a:cd:65:45:a0:18:05:72:3a:50:50:fb:05:
7e:7e:d7:b2:5a:c6:97:80:38:95:75:cf:c4:21:b8:
b0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FB:0F:01:7E:EF:40:3E:A6:36:9B:D9:66:29:DB:24:28:AB:28:E1
X509v3 Authority Key Identifier:
keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9e:53:7a:e7:a3:8b:3d:5c:82:cb:92:2a:ba:ea:74:47:4c:
1c:5b:96:31:b8:8c:60:73:5e:90:21:ba:86:52:05:68:db:4b:
cb:03:9e:b7:e9:63:4c:ef:53:b7:5e:9a:86:5e:89:87:9d:a3:
a4:91:34:05:94:28:5b:1e:71:68:7c:90:7a:56:67:16:6f:69:
2a:37:0d:31:f9:67:c3:34:27:9b:1d:69:f0:f8:61:8c:bf:35:
29:3e:fb:e2:64:1f:bf:30:3d:e5:24:ab:ca:67:91:b7:0a:52:
71:4a:0d:45:46:48:62:89:d4:1f:a7:e7:c3:fd:46:61:3e:a0:
df:ba:a8:5f:4c:1e:02:63:ca:23:28:67:65:b6:8b:9b:22:94:
b2:ff:5c:d7:e7:46:77:9c:ba:61:af:24:9b:0d:ec:b3:f1:64:
e1:aa:35:e1:43:94:c4:14:bd:b7:dc:83:71:14:51:a2:9a:05:
94:f2:3c:e6:c7:2d:6d:31:53:96:e4:58:41:d7:05:e2:4c:7e:
be:c2:b4:f9:55:c9:33:f7:39:0b:3a:1b:f8:09:39:5a:f6:e3:
92:d6:a1:3d:81:04:76:d7:ae:11:3b:a8:53:37:74:19:7f:bb:
76:9d:29:8a:83:c1:e0:5e:93:4a:bf:a8:a6:96:29:d7:9c:0d:
af:ee:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:03 2026 by rpki-client