
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.mft
File: HimymPrXg8InXAD86GVujPdJpIk.mft (raw, json)
Hash identifier: 3h8GEHJ3sWXGtE/gQEcp3MSR7G4/Lt696pTW0PtArM0=
Subject key identifier: 13:BD:4A:D9:CB:50:6C:99:88:BF:C0:72:65:97:AA:DF:D8:85:0C:B6
Authority key identifier: 1E:29:B2:98:FA:D7:83:C2:27:5C:00:FC:E8:65:6E:8C:F7:49:A4:89
Certificate issuer: /CN=A91598F6/serialNumber=1E29B298FAD783C2275C00FCE8656E8CF749A489
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HimymPrXg8InXAD86GVujPdJpIk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.mft
Manifest number: 10
Signing time: Wed 07 Oct 2026 09:45:40 +0000
Manifest this update: Wed 07 Oct 2026 09:45:40 +0000
Manifest next update: Wed 14 Oct 2026 09:45:40 +0000
Files and hashes: 1: HimymPrXg8InXAD86GVujPdJpIk.crl (hash: NzcMpNk0CoaqOJO6/3VZehEzuZlZtAke9a2gYGllxB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.crl
rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HimymPrXg8InXAD86GVujPdJpIk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:45:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91598F6, serialNumber=1E29B298FAD783C2275C00FCE8656E8CF749A489
Validity
Not Before: Oct 7 09:45:40 2026 GMT
Not After : Oct 14 09:45:40 2026 GMT
Subject: CN=6ac614c4-5f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:53:ff:8a:7c:22:14:fc:4a:49:94:c7:26:
c1:52:9a:63:69:ff:24:41:7a:f9:6f:5d:28:47:e1:
19:de:28:ea:e6:73:6c:9e:74:2a:53:84:b6:e4:a9:
81:f7:5c:4b:26:46:d9:f6:ac:24:29:e0:ad:9c:79:
57:03:3e:89:32:d5:73:d8:70:8f:a0:3c:06:b1:29:
80:da:e0:6a:77:7b:36:cf:a0:5d:7b:30:49:ac:78:
af:87:3e:d8:9a:83:72:d8:2e:e5:f7:de:00:06:50:
89:98:d6:58:c0:52:28:09:df:f3:fe:8c:a1:1e:1c:
ab:85:9a:b8:5c:ac:e4:35:37:cf:5c:ad:3b:73:7d:
a4:13:28:eb:a0:28:da:60:91:0b:99:67:67:6a:b9:
5c:24:ca:4d:a1:bb:68:03:69:d0:45:94:f0:b0:c8:
d9:52:7f:b6:6f:82:f3:13:4e:a9:ed:eb:18:3b:a7:
f6:e9:f0:b2:38:3a:3d:a8:44:68:d1:a6:32:58:f8:
4e:dd:d6:32:ca:7e:53:83:a4:42:97:4e:dc:5c:8c:
fc:b9:0e:5b:57:3c:18:00:5a:67:a6:f3:a9:33:c1:
38:da:e9:5c:32:d4:08:f1:62:1e:80:3c:6a:09:27:
e2:1f:95:84:c9:3b:26:ef:f7:b8:9d:a6:a0:f6:b9:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BD:4A:D9:CB:50:6C:99:88:BF:C0:72:65:97:AA:DF:D8:85:0C:B6
X509v3 Authority Key Identifier:
keyid:1E:29:B2:98:FA:D7:83:C2:27:5C:00:FC:E8:65:6E:8C:F7:49:A4:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HimymPrXg8InXAD86GVujPdJpIk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2a:02:17:67:ed:6a:3c:72:0f:41:c4:b5:6a:49:32:35:92:
9d:68:de:0c:2d:d0:10:7a:70:25:26:a5:72:21:0e:41:ee:7c:
16:39:1f:bb:cb:46:ef:a9:f5:78:08:e4:65:b5:ed:6b:f1:67:
90:9f:ca:73:36:87:84:90:18:43:9b:d1:d6:22:3b:c4:fa:de:
23:ad:23:51:eb:7f:78:42:64:a4:0c:44:d1:68:0f:95:f5:ed:
58:90:f6:86:39:17:e9:6c:34:a3:1c:98:21:e1:60:5c:c9:ed:
6d:42:2a:45:c1:28:96:74:2a:d1:7d:11:5f:fa:56:21:c8:9a:
b9:57:76:78:fa:4f:1f:f2:50:15:68:66:ce:a3:01:29:4f:ec:
37:85:37:d5:36:c5:d8:97:e9:f7:27:ab:12:13:ca:5f:c3:fa:
db:87:20:0a:c9:cf:ac:29:30:33:55:79:c1:48:40:8b:f0:ac:
76:16:96:53:75:2c:05:15:f9:88:cd:cb:65:19:ec:ae:22:30:
56:56:a7:65:fb:8c:09:6f:14:2f:e0:ea:9f:b9:5d:86:23:97:
74:e0:f2:0a:d9:e6:3c:39:6c:48:a8:47:61:24:c3:49:ff:c5:
9f:00:c6:56:e4:1c:24:87:cf:56:0d:28:00:b2:34:1a:b4:37:
ac:31:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:12:59 2026 by rpki-client