
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json)
Hash identifier: Y9BXiH4mP+vKjlk9NOD4PDekC+4RGAmVNh3cLDQ/TJM=
Subject key identifier: D0:62:B9:64:48:DF:61:39:4F:FE:AD:6E:2D:74:8D:14:90:0A:5F:B9
Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Certificate serial: 1537
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
Manifest number: 151E
Signing time: Sat 04 Apr 2026 16:44:13 +0000
Manifest this update: Sat 04 Apr 2026 16:44:13 +0000
Manifest next update: Sat 11 Apr 2026 16:44:13 +0000
Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: wmDEk9HKY28NiOQ9wJh8U0zkKGZTT0Yrs/426YZnTnc=)
2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: RnKanm5hHk3mFwa7+wHjDrcythGv+bDKBJwJ7N6lnUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5431 (0x1537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Validity
Not Before: Apr 4 16:44:13 2026 GMT
Not After : Apr 11 16:44:13 2026 GMT
Subject: CN=69d13fdd-e6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:0d:45:9f:42:dc:da:b1:b7:7f:ae:44:8c:
b2:b3:4a:c6:71:14:af:1f:a4:f5:23:a7:62:31:94:
d6:47:fe:4d:f9:a8:5a:ed:13:05:ca:45:a7:eb:09:
e8:70:d6:12:02:3f:23:5b:44:2f:a9:cd:ce:8a:9e:
de:7f:d8:98:08:4d:6e:60:70:c3:26:85:aa:cb:62:
5f:8e:fa:99:64:6e:6a:18:a4:23:1f:f4:d4:6f:06:
45:5d:2b:2b:65:0f:a7:d9:0a:82:ca:3d:c1:a7:07:
50:9a:60:6e:dd:1f:4f:42:c1:3e:f0:a1:df:74:36:
65:86:d7:fd:d7:73:b5:0a:86:2f:0b:17:e4:9c:77:
d7:5b:45:a0:72:84:34:98:7e:56:25:f3:52:6f:77:
6b:57:fa:00:ac:f2:6a:b6:d1:5b:fa:3a:66:1f:b7:
3e:0c:e8:30:4e:97:77:d3:9b:80:8b:2e:ce:c1:2b:
29:9f:5e:78:3e:73:5d:8c:2b:23:f3:19:ab:13:fa:
9c:ae:71:fd:f7:2f:d9:11:f7:12:dd:b5:5d:b7:90:
79:ac:31:ac:08:fc:51:00:21:1c:20:30:01:1c:2c:
aa:dc:03:0d:74:f8:18:d8:af:54:a0:44:e7:78:96:
d0:be:b1:96:b7:ea:15:76:14:b3:2d:b4:2e:36:75:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:62:B9:64:48:DF:61:39:4F:FE:AD:6E:2D:74:8D:14:90:0A:5F:B9
X509v3 Authority Key Identifier:
keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:4f:80:f6:97:2b:74:45:61:14:e8:e9:f3:c1:31:7b:09:09:
c7:f9:0b:ed:73:89:df:da:4f:ae:44:98:39:a4:7e:b7:17:76:
71:16:a6:c4:15:28:d7:44:71:ed:62:ae:21:1d:0b:c2:b1:76:
44:16:1f:13:65:8e:26:cd:81:79:da:48:c7:1f:48:fc:7d:f4:
ba:92:27:a4:8a:f5:c5:d3:df:23:c5:83:1c:20:6c:37:76:c3:
63:01:3b:43:95:32:31:94:5d:61:e5:03:1f:99:f9:c8:9d:da:
ff:c6:35:51:c0:8f:56:01:cb:27:69:34:64:6d:c0:6a:f3:ca:
65:d0:50:eb:33:cf:5a:ad:ef:5c:ac:e5:41:67:53:df:ca:2f:
51:80:37:7b:79:d9:01:ba:07:e1:6d:69:50:5c:ad:3a:14:73:
fa:bc:29:63:b5:07:00:06:29:fe:fc:5a:ab:52:99:ab:cb:e3:
10:c7:78:7d:c0:1d:d3:4c:20:72:6c:41:a4:50:c5:50:3c:dd:
53:00:8b:e8:c0:ab:80:f9:1a:20:5a:23:98:31:8a:26:87:15:
2d:d8:ef:82:30:63:24:2f:31:b4:8b:54:a8:44:03:d0:05:a4:
83:8b:1f:ea:19:40:6a:0c:85:a5:ec:f5:9d:c0:9a:ac:d3:32:
31:08:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:41 2026 by rpki-client