
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
File: hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json)
Hash identifier: CtS3WctPse+46SpeJyDiZ3+yyatlC56RYEZuChgCUgs=
Subject key identifier: 48:84:AD:21:BD:0C:9E:FD:A4:37:67:A0:37:E9:21:96:C2:99:C4:0B
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Certificate issuer: /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
Manifest number: 01D2
Signing time: Fri 05 Jun 2026 03:53:03 +0000
Manifest this update: Fri 05 Jun 2026 03:53:02 +0000
Manifest next update: Fri 12 Jun 2026 03:53:02 +0000
Files and hashes: 1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: otAAby79fw8SszdRukbM+K7YfJ4YjhILIpq3xPpgQ/I=)
2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: 6vqRkfNyBAwDiXHf3koAV6uBX2r6Cd6TaI9BMlOpzvA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 03:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060
Validity
Not Before: Jun 5 03:53:02 2026 GMT
Not After : Jun 12 03:53:02 2026 GMT
Subject: CN=6a22481f-8f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e1:23:d8:0b:a0:7f:6a:34:95:0e:fd:4e:84:
e6:63:d3:ac:99:38:e8:be:6b:d7:d2:82:61:13:a7:
37:32:a6:68:fa:b3:9d:68:69:bd:e6:e2:a1:f0:96:
0c:3b:22:b7:75:43:ee:35:ca:b2:85:d2:c0:56:a5:
22:da:64:bf:44:a8:5c:79:9b:03:04:55:cd:75:6d:
5b:83:45:2c:0f:1b:0c:5b:f7:33:c8:75:04:24:72:
9c:6e:ba:d6:02:b5:a2:e1:dc:5e:66:47:3d:34:77:
60:40:55:ce:16:5c:8c:7f:cf:83:77:5b:fe:0f:4b:
93:86:5d:e2:c3:be:76:2b:36:8d:a9:a2:0a:d7:e6:
c6:9c:f8:07:08:60:f4:98:18:b6:80:e5:21:43:8f:
02:53:7d:f4:8c:0b:90:8d:83:da:30:0c:96:fc:10:
c6:43:30:68:91:82:df:90:cb:9a:eb:15:cd:4e:d8:
21:9f:5d:00:58:e9:01:78:df:69:cb:e9:78:d0:22:
3d:f7:15:e7:91:ca:ff:ca:14:aa:5a:88:51:27:39:
39:0b:e0:9a:a1:81:12:f0:f3:69:a9:e8:6e:57:80:
0d:25:4f:da:53:18:88:7c:45:fd:26:16:a2:a6:f1:
6e:5b:77:7b:17:ac:3e:60:0d:9a:c6:76:08:60:e3:
f3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:84:AD:21:BD:0C:9E:FD:A4:37:67:A0:37:E9:21:96:C2:99:C4:0B
X509v3 Authority Key Identifier:
keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:89:c8:49:7e:b7:bf:9d:86:be:8d:f4:d0:77:ac:73:23:9b:
1a:d9:eb:6a:e7:51:c0:89:4a:d4:da:d1:f4:4f:2c:93:9c:e2:
3c:0d:e3:30:84:38:df:41:3d:b9:4f:02:d1:80:94:9e:99:fa:
ba:64:cb:a8:af:74:f8:95:94:6b:68:4f:88:f0:03:3b:f6:76:
a8:a2:0f:46:98:53:14:57:1f:6c:6e:ec:bc:21:18:c9:e9:29:
c0:84:96:8a:bf:3c:79:01:cf:4f:5e:c2:95:47:44:60:3e:e0:
7a:62:90:2c:0f:0e:83:b8:cf:43:ec:8a:cd:94:ed:56:fe:81:
de:85:63:e1:a8:92:b3:89:61:8c:af:a1:54:57:02:06:9c:bc:
88:c0:94:7c:b4:a8:d1:12:81:87:66:21:d8:ba:db:9c:b7:48:
94:41:26:5c:d3:4a:72:d5:af:44:5b:96:09:dd:9a:ca:07:e3:
ee:d5:76:88:50:d6:55:d5:96:47:10:16:4c:7c:e2:2d:27:e8:
f2:81:b5:cd:82:76:2c:ec:a1:a4:f7:1c:3c:76:7b:90:bc:0e:
8b:bc:2a:13:08:3e:54:37:f9:2e:18:d4:68:d1:34:5b:50:b4:
0a:8a:b7:15:f8:f0:7d:42:0b:03:e6:d6:1a:35:f2:6b:20:8b:
4c:60:99:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:29:14 2026 by rpki-client