
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
File: kHuyYrVxYj40suIMYKcYwXOcw70.mft (raw, json)
Hash identifier: 6o9T2jrxr51UL+gj2DJ/wfxnnVE+z776XzmlJbOo3AI=
Subject key identifier: 30:BF:4A:23:9D:FD:E7:62:9E:66:C0:C5:99:9E:E7:B3:4D:1C:54:E4
Authority key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD
Certificate issuer: /CN=A91A3A64/serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD
Certificate serial: 044B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
Manifest number: 0442
Signing time: Sun 05 Apr 2026 00:02:27 +0000
Manifest this update: Sun 05 Apr 2026 00:02:26 +0000
Manifest next update: Sun 12 Apr 2026 00:02:26 +0000
Files and hashes: 1: kHuyYrVxYj40suIMYKcYwXOcw70.crl (hash: q54+IczXRa56pmtjpJZ+Tl+5c2cyrdcrf10y++N6XGY=)
2: 5B92665E9ADD11ECA5401423C4F9AE02.roa (hash: Nb29Wu1CDYoesjc8FMHKjysC8EpiLHTgbPxZYxl0RNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl
rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1099 (0x44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3A64, serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD
Validity
Not Before: Apr 5 00:02:26 2026 GMT
Not After : Apr 12 00:02:26 2026 GMT
Subject: CN=69d1a693-9040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:54:87:2c:ef:c7:be:1a:c5:a7:3d:ac:d5:
33:d6:4c:83:01:88:fb:44:8c:4c:11:fc:6a:52:ce:
b5:16:3c:43:ba:fe:22:f2:2a:05:ca:9b:4d:43:56:
6e:16:af:12:9f:de:70:3f:40:4b:cd:63:3e:6f:78:
4d:b9:de:86:77:c6:dc:cb:1f:01:5a:e2:8f:09:db:
7b:a9:bd:94:b2:be:34:3a:5e:7e:b6:45:ec:1a:ed:
97:3c:14:97:cf:e9:1d:9b:42:f0:b0:74:a5:be:0f:
19:df:00:a4:79:2b:26:29:a7:64:c4:78:02:65:a7:
e9:cf:34:f5:a1:2a:fc:1d:25:79:12:fe:d7:bc:5d:
89:bb:0f:97:c3:2b:db:5c:60:0d:26:a9:b9:d5:d3:
de:53:6f:5f:73:4e:bb:98:26:7b:ef:0c:5e:55:bb:
38:19:e5:0f:ed:5a:18:91:4f:6c:65:cf:37:01:b6:
38:8c:43:67:94:0e:b9:28:9a:82:12:34:55:7a:70:
a0:36:a8:84:3c:3d:0a:a7:2d:73:55:53:09:8c:dd:
80:17:42:ac:aa:5c:88:d6:0d:27:8c:0e:12:8e:93:
5a:f9:d0:6a:e8:36:9b:17:d3:0f:e9:21:8b:bf:ae:
40:97:68:e6:ae:3b:f8:92:7d:ae:11:c4:52:a3:45:
b5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BF:4A:23:9D:FD:E7:62:9E:66:C0:C5:99:9E:E7:B3:4D:1C:54:E4
X509v3 Authority Key Identifier:
keyid:90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:7f:ff:df:80:fe:a6:92:62:3a:7c:04:ff:2a:3a:e7:5c:6f:
9e:e1:60:a8:d4:89:6f:72:92:dc:10:d3:9b:54:15:6d:51:7c:
19:cc:31:5e:be:c3:a0:36:bb:7f:1d:74:d9:de:04:aa:5f:ae:
9f:b6:4c:68:8f:fd:cc:71:a1:e6:f9:b7:23:a9:22:97:11:f1:
9d:ef:30:4d:35:66:a7:0a:15:57:1a:c7:fa:55:73:f8:f3:6f:
36:06:e1:f8:a7:ef:2b:41:28:8e:b0:03:0c:0e:4b:a4:07:26:
e5:c4:bf:c2:ea:dc:a6:de:e0:aa:2e:d6:3e:26:c1:ea:55:31:
ef:1f:66:25:ea:20:9b:66:c1:b5:6f:e6:3b:59:33:bb:68:fa:
3b:5b:40:18:00:c2:9d:fe:0d:65:55:48:5e:b7:31:01:38:05:
ee:c5:bc:83:d1:0d:de:35:cc:aa:df:72:0e:69:95:24:bb:8f:
a5:ef:0a:ac:b5:c8:d2:5f:d0:23:86:d3:47:d6:76:2f:c6:4e:
73:51:da:40:70:19:b0:f2:d7:34:69:02:67:4e:a7:2e:9a:8f:
5f:10:35:a1:1f:b4:b8:41:68:e4:40:fa:7d:16:95:8e:7a:d0:
3b:b8:8e:1f:27:bb:ca:60:c9:ef:ff:7b:35:1b:aa:54:42:3a:
0d:19:32:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:23 2026 by rpki-client