
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft
File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json)
Hash identifier: CDRkr95X/1CC39i/lCJq0v0t3fFdNIvaYfIuuWJieOo=
Subject key identifier: 95:DD:6D:E0:BB:B8:79:72:8A:67:92:33:37:41:45:03:D2:15:C8:DE
Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97
Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297
Certificate serial: 0C5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft
Manifest number: 0C4F
Signing time: Sat 28 Feb 2026 18:52:55 +0000
Manifest this update: Sat 28 Feb 2026 18:52:54 +0000
Manifest next update: Sat 07 Mar 2026 18:52:54 +0000
Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: Y9mqwTqNJ2HZnnHA1170m7iTlBEt2IbEm7CoKl2c63E=)
2: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: yqFSXrSreAwWsxKHKKypXy96bJWuk7Ta+8Svfir1RMk=)
3: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: 8S+9u5NejOEqjzyGww6nqkHBEMgMZJI4JwQwHM3xtzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl
rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:52:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3163 (0xc5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFA15, serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297
Validity
Not Before: Feb 28 18:52:54 2026 GMT
Not After : Mar 7 18:52:54 2026 GMT
Subject: CN=69a33986-d89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:23:4f:4c:0e:6f:a2:cd:28:0a:b8:1f:f7:
7f:b0:24:61:60:cf:a1:66:d7:7d:71:94:43:ac:33:
70:64:56:5f:81:b4:04:49:c1:1a:bd:42:51:ae:e6:
15:14:1d:ac:af:ca:9e:95:f6:50:7d:38:e8:e9:57:
89:d5:a0:d2:d3:8f:8d:f6:21:e1:7d:b5:e0:01:82:
1d:4b:6c:83:59:53:90:9b:f3:c1:15:25:de:84:b9:
82:89:57:c6:54:d4:a6:ee:36:51:54:bf:55:8a:b6:
a8:9b:89:b0:92:51:28:f2:79:dd:32:35:94:60:81:
9e:1b:77:2c:d3:c8:54:27:7d:8b:4b:b4:92:a2:7c:
32:e9:28:62:af:3a:9f:c8:df:02:47:3a:65:69:22:
ba:90:ef:34:47:c3:37:a2:e0:e2:58:be:79:4b:e3:
ff:57:81:93:23:d6:5d:b5:94:d5:05:e8:a8:c7:39:
d5:eb:12:68:f6:2a:8c:c1:0f:61:f8:4a:e4:fa:77:
7e:05:49:7f:f9:31:fc:9d:0d:21:37:88:64:a8:bd:
79:95:d0:2a:26:64:7a:1f:a0:af:19:dd:d1:79:44:
d5:a9:8d:65:c7:40:51:57:1e:0e:1a:b7:16:d7:c0:
e9:3b:ca:1c:59:43:92:91:bd:a9:12:25:cb:5b:27:
60:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DD:6D:E0:BB:B8:79:72:8A:67:92:33:37:41:45:03:D2:15:C8:DE
X509v3 Authority Key Identifier:
keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:90:66:e3:b8:8e:a7:94:98:9f:29:88:b1:ff:7f:0c:7e:82:
ae:70:1b:8f:cd:34:92:b3:5b:35:c1:e1:7b:c2:56:3f:ee:62:
8e:42:e1:5b:4c:d5:ab:57:91:f8:be:b5:70:39:14:30:87:8d:
1d:2f:41:a9:ad:28:e9:85:ac:e3:4d:b3:79:78:1b:e1:3a:bb:
13:bb:3b:2f:a5:30:b4:4a:d8:85:e7:40:93:ee:b6:2c:b2:08:
3d:d8:d0:10:28:e4:c4:e4:0c:4c:53:4b:34:11:22:da:ba:5f:
65:f6:9d:73:80:3c:07:f0:4e:34:44:80:08:5d:25:45:f5:e6:
f9:b9:a8:c4:b9:27:3e:f1:2b:40:c8:38:ed:c3:8b:b4:64:1e:
c1:20:03:dd:cb:78:93:88:da:b1:77:f8:62:cc:f0:4d:a2:b2:
1a:42:cc:e4:9b:ad:38:75:cf:9d:64:da:ac:0c:75:da:d3:d4:
fd:df:f4:78:9a:c2:a6:9d:ea:d1:cc:a7:2a:b3:5f:c3:ce:bb:
f4:0e:cd:98:ac:5b:46:78:fe:8c:9f:b9:b5:cd:38:94:0c:30:
b0:d5:0f:6c:c9:fa:f0:66:1d:72:a8:a6:2f:d1:ba:40:21:98:
43:68:52:93:5a:58:31:87:09:5b:94:f7:77:b4:84:e4:42:f6:
00:65:c4:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE
MEJCOTQyOTcwHhcNMjYwMjI4MTg1MjU0WhcNMjYwMzA3MTg1MjU0WjAYMRYwFAYD
VQQDDA02OWEzMzk4Ni1kODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvnkjT0wOb6LNKAq4H/d/sCRhYM+hZtd9cZRDrDNwZFZfgbQEScEavUJRruYV
FB2sr8qelfZQfTjo6VeJ1aDS04+N9iHhfbXgAYIdS2yDWVOQm/PBFSXehLmCiVfG
VNSm7jZRVL9Viraom4mwklEo8nndMjWUYIGeG3cs08hUJ32LS7SSonwy6Shirzqf
yN8CRzplaSK6kO80R8M3ouDiWL55S+P/V4GTI9ZdtZTVBeioxznV6xJo9iqMwQ9h
+Erk+nd+BUl/+TH8nQ0hN4hkqL15ldAqJmR6H6CvGd3ReUTVqY1lx0BRVx4OGrcW
18DpO8ocWUOSkb2pEiXLWydg4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJXdbeC7
uHlyimeSMzdBRQPSFcjeMB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE
ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR
cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RkExNS83MDFGNTNEMjFEODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1Ra
VDl0SjdDWEZzU0RRdTVRcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe5Bm47iOp5SYnymIsf9/DH6CrnAbj800krNbNcHhe8JWP+5ijkLhW0zVq1eR
+L61cDkUMIeNHS9Bqa0o6YWs402zeXgb4Tq7E7s7L6UwtErYhedAk+62LLIIPdjQ
ECjkxOQMTFNLNBEi2rpfZfadc4A8B/BONESACF0lRfXm+bmoxLknPvErQMg47cOL
tGQewSAD3ct4k4jasXf4YszwTaKyGkLM5JutOHXPnWTarAx12tPU/d/0eJrCpp3q
0cynKrNfw8679A7NmKxbRnj+jJ+5tc04lAwwsNUPbMn68GYdcqimL9G6QCGYQ2hS
k1pYMYcJW5T3d7SE5EL2AGXE4g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:12:04 2026 by rpki-client