
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
File: hYBFlRf-HXfU04pCnx0hxskt6TQ.mft (raw, json)
Hash identifier: erynPQ9h8pdDK/2L7Kiu95177ntWHgIf9mRUDMjWol4=
Subject key identifier: B4:55:98:85:96:A3:29:86:26:46:87:E6:61:D0:CD:E2:0D:2F:4C:8E
Authority key identifier: 85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34
Certificate issuer: /CN=A9145B5E/serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934
Certificate serial: 015D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
Manifest number: 015D
Signing time: Thu 21 May 2026 05:06:11 +0000
Manifest this update: Thu 21 May 2026 05:06:10 +0000
Manifest next update: Thu 28 May 2026 05:06:10 +0000
Files and hashes: 1: hYBFlRf-HXfU04pCnx0hxskt6TQ.crl (hash: qsPcJjbSTpsVPRZK2kXg0qIg6F74BBLCKWPX5bBLYiY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl
rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B5E, serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934
Validity
Not Before: May 21 05:06:10 2026 GMT
Not After : May 28 05:06:10 2026 GMT
Subject: CN=6a0e92c3-6edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:0c:fe:97:9b:65:7d:ff:24:dc:4c:88:a2:
9a:15:e2:34:d2:79:0e:a1:16:41:15:16:15:f4:52:
3c:e0:49:b6:ce:06:da:c8:ab:ce:07:10:1c:88:65:
cf:6b:2b:72:4b:40:39:81:67:cc:1b:12:ee:c3:9b:
4d:d7:44:b6:c7:fa:ac:3e:ad:03:3d:80:25:8f:25:
31:b8:e3:8a:1d:4f:cb:2e:b7:d1:5b:ba:1c:92:e2:
92:35:2c:f1:ba:f7:a7:3b:13:37:52:ae:c1:3d:70:
34:14:1b:55:6c:b3:66:91:2d:9a:8e:c0:5b:64:94:
9b:48:32:ed:ec:1c:d1:08:3a:9c:da:51:7d:fc:a6:
0d:11:85:83:26:98:30:dc:98:92:82:78:0f:c2:13:
bd:db:fa:4e:00:1f:f3:d8:74:25:85:1a:6e:0f:7c:
bb:98:f4:ca:ec:34:7e:f5:ee:c4:f1:5a:0f:05:59:
29:2f:0e:b4:79:cd:b1:34:17:db:a2:d1:cb:87:91:
dd:8b:ca:2c:55:67:0d:d9:54:7a:6c:eb:9f:7a:85:
ab:ce:0f:c4:9f:76:e0:5f:a2:41:96:29:a2:02:c6:
34:52:ce:03:5e:ed:13:1a:3b:71:9d:1d:b7:2d:76:
27:4a:c3:f3:90:15:32:6a:17:27:29:ad:42:74:e3:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:55:98:85:96:A3:29:86:26:46:87:E6:61:D0:CD:E2:0D:2F:4C:8E
X509v3 Authority Key Identifier:
keyid:85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:43:d2:b7:8d:57:9b:31:0a:43:35:12:3c:24:a2:74:ab:04:
49:ad:60:63:24:b0:ef:85:d5:27:e7:59:3e:dd:e1:c9:5f:c8:
ea:df:e2:fe:ec:c2:4c:59:5a:d5:03:90:20:76:79:8b:ae:f4:
d3:4c:af:a4:a4:3e:2d:80:32:25:75:57:6d:da:04:fd:43:9f:
02:db:69:75:a3:b5:a9:1d:0a:6f:b5:57:a7:58:9d:de:f5:96:
28:ff:51:2b:00:b6:46:c7:75:13:4c:45:90:b1:88:6d:7d:b7:
07:fb:91:d5:c8:6f:a1:ab:0d:e2:4e:a6:1b:76:47:fc:f3:17:
ec:7e:02:fa:34:c8:ea:b7:4f:94:40:a6:89:9b:97:a3:9a:36:
4b:60:2b:6e:d8:6f:27:e8:85:58:3b:30:ce:31:5c:85:92:bb:
76:e5:e4:2a:a4:4d:aa:0e:c5:a7:b4:75:d0:b0:c8:bc:57:47:
ab:8a:6e:3f:93:4e:d4:6d:b2:b9:4b:d2:2d:bd:5f:d3:be:d7:
52:8a:bc:59:a7:44:47:61:ef:45:e3:b1:e5:3d:e4:f9:80:00:
8e:a8:5f:2e:6e:61:5a:94:c6:fa:35:84:58:d8:b4:ae:9f:05:
90:4e:81:bf:74:e2:c3:e7:72:1c:65:f9:7d:03:e7:31:4b:cf:
17:2a:e8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:47 2026 by rpki-client