
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
File: hYBFlRf-HXfU04pCnx0hxskt6TQ.mft (raw, json)
Hash identifier: zFR/sgKVHaxAlbJnVzn+iwCnyvti7pFUILQ4qmx0QXM=
Subject key identifier: 5E:31:A4:DC:3A:76:77:EF:0D:C2:54:A8:25:71:93:D3:17:DB:F2:DB
Authority key identifier: 85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34
Certificate issuer: /CN=A9145B5E/serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934
Certificate serial: 01A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
Manifest number: 01A3
Signing time: Wed 07 Oct 2026 04:42:36 +0000
Manifest this update: Wed 07 Oct 2026 04:42:35 +0000
Manifest next update: Wed 14 Oct 2026 04:42:35 +0000
Files and hashes: 1: hYBFlRf-HXfU04pCnx0hxskt6TQ.crl (hash: fJ02DR7x2IVmSiyf46N4beghMrz+s/yy6MQwwawWwDw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl
rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B5E, serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934
Validity
Not Before: Oct 7 04:42:35 2026 GMT
Not After : Oct 14 04:42:35 2026 GMT
Subject: CN=6ac5cdbb-78fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:7d:5c:2a:f9:4c:bf:d9:73:81:b9:4b:4d:
74:ff:2d:10:5b:0a:59:51:9b:0d:07:3b:ce:50:17:
92:eb:cd:02:42:da:fe:27:ab:f7:c2:f3:f9:4b:24:
3d:e7:bf:bd:d7:2e:f6:52:8f:33:9f:8f:97:8c:61:
98:c9:0c:49:f4:4c:2e:84:a0:4f:12:59:e7:99:2d:
e7:65:dd:e2:0d:40:7c:2d:a1:25:e2:09:2d:43:cc:
f0:16:84:71:3e:e3:a9:59:6d:b8:dd:91:bc:8e:1e:
1e:81:08:77:76:4e:6a:5f:2a:4d:a3:cd:b6:08:e7:
c6:e7:b0:d8:db:dc:f3:7f:7c:ac:1d:fb:12:9e:d4:
b9:cc:2f:5e:c5:d5:f1:c9:f7:8d:03:1c:85:45:c4:
35:3b:2c:a1:af:ad:90:37:98:a0:2a:f8:f1:e3:fd:
e5:ba:4f:b9:fd:02:10:9d:30:a8:8e:c6:05:df:c4:
3a:d5:d4:46:5d:9e:5f:08:30:c2:ba:2f:6a:e4:24:
c4:c7:52:47:81:58:c8:34:35:98:50:f1:46:f2:b6:
3b:42:47:34:8d:11:6f:f7:b5:d1:9e:b6:20:59:12:
b3:f1:99:f9:6b:58:96:e6:a6:4c:6e:7c:1a:f3:f3:
6c:7a:ac:18:6f:d4:3f:0d:22:75:19:96:0b:3b:0f:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:31:A4:DC:3A:76:77:EF:0D:C2:54:A8:25:71:93:D3:17:DB:F2:DB
X509v3 Authority Key Identifier:
keyid:85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:9c:bd:03:60:1d:a7:63:83:12:03:5c:db:ed:7a:7e:77:b1:
f1:40:3b:b5:ac:32:be:17:e5:a3:df:64:7b:33:81:90:f0:75:
29:e0:c5:a9:9a:7e:bb:bf:27:77:3e:45:24:6c:9e:46:86:0f:
ce:94:93:db:08:9f:5c:73:dd:96:95:bb:41:56:9d:8d:85:69:
94:11:66:28:5f:91:b4:3f:a7:0d:f4:7c:01:7c:bd:5f:f5:38:
89:91:59:db:66:9f:02:37:a4:9d:4f:4d:aa:60:f0:ff:03:f0:
f8:f2:3a:11:4b:93:69:0e:74:ac:2c:7f:b8:84:3b:8e:f4:bf:
da:7a:a2:79:22:5f:ce:eb:5b:88:46:a2:00:74:98:e5:a2:c6:
e2:12:31:20:62:4b:1a:c1:e2:8f:5f:18:71:3d:e1:78:5d:39:
60:1c:26:45:44:04:84:17:88:56:23:a9:57:07:f9:fe:fc:76:
b7:4a:fe:b8:42:6a:11:d0:20:28:2d:8e:b5:9f:92:c1:c8:bd:
c2:cb:da:2c:b8:63:7e:62:0f:7e:4e:d7:6e:86:3e:1d:14:00:
0b:3a:3c:0c:9e:04:58:7c:50:5d:13:c6:5a:01:e9:a3:6b:a7:
b6:3f:40:f4:63:79:22:bc:0a:d9:89:90:d0:ec:a9:45:d6:ef:
6c:38:42:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:18:58 2026 by rpki-client