
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json)
Hash identifier: y+NeuwQvSRkqoaJygeeKfHsMgtgvSIOUeCwEo430SWI=
Subject key identifier: 91:A1:14:DB:FF:23:75:22:37:1B:89:DC:FF:8F:34:C1:CA:FE:B0:DF
Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
Manifest number: 018A
Signing time: Tue 03 Mar 2026 04:15:34 +0000
Manifest this update: Tue 03 Mar 2026 04:15:33 +0000
Manifest next update: Tue 10 Mar 2026 04:15:33 +0000
Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: Xs73vscl0c24ar/sV9Dq2A/5MlEaWVWR+H2TSzvwBlw=)
2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: dhcSaLNUlhbiUcFKAsa5AQ1b5rgid7EM2yOheX+7QNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl
rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Validity
Not Before: Mar 3 04:15:33 2026 GMT
Not After : Mar 10 04:15:33 2026 GMT
Subject: CN=69a66066-bba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:12:1b:88:3b:93:87:e3:3f:02:3a:fc:90:
3b:6c:bd:3f:10:47:01:8e:bf:ae:8d:35:45:18:ac:
bc:28:87:68:16:b9:60:ce:61:c4:dd:87:9a:e3:02:
76:55:96:38:7e:b0:3c:6f:c6:13:00:a9:b7:91:1e:
47:46:7f:48:60:fe:b9:08:d1:48:e2:01:1a:ab:ee:
0d:52:45:3c:20:bc:7f:0e:be:ca:6b:ee:c7:06:3d:
03:70:71:77:fb:3a:a3:fb:d9:7e:fc:1a:61:aa:93:
78:0d:cb:88:30:df:64:06:3e:53:df:1f:85:bd:92:
f0:b2:48:75:38:4c:d6:31:33:fb:4d:2c:64:c5:b0:
4e:54:6d:98:9f:f5:0f:41:88:83:fc:d2:3e:68:ec:
ce:b6:8e:d9:7e:77:a6:59:f9:e9:b1:92:79:6a:ae:
82:ea:43:af:ad:a4:7c:1e:84:20:63:98:9e:e7:56:
61:6e:e7:8c:c5:5f:4a:41:d6:20:22:7b:50:a4:0b:
74:31:c7:bf:00:02:7b:33:b5:2f:39:61:7d:48:ca:
89:47:5e:ab:16:f3:be:f5:06:a1:1f:4a:8e:81:df:
3e:9b:12:8a:88:b4:97:b7:f4:c6:71:6a:5f:c9:a0:
8a:e5:04:16:42:ae:5f:92:9a:ab:26:ac:c9:8e:18:
d7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A1:14:DB:FF:23:75:22:37:1B:89:DC:FF:8F:34:C1:CA:FE:B0:DF
X509v3 Authority Key Identifier:
keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:50:98:65:2d:6d:2a:df:5f:45:db:d2:42:0c:9e:d6:9e:db:
b0:61:39:f4:9f:bc:d8:3f:61:f6:d9:01:65:31:50:08:59:74:
8b:52:35:41:61:22:be:04:0f:77:c7:b6:3f:6c:71:08:f1:17:
b1:e0:b2:7c:52:f5:f8:bf:e0:fa:90:83:eb:b6:94:36:25:8a:
33:4f:8c:16:fe:2a:36:ab:e5:ae:82:ce:3b:b0:21:8b:13:0f:
7a:f3:c0:c7:dc:3f:28:10:41:a9:81:82:b5:9c:22:90:54:f6:
4d:6c:81:ca:c4:20:cf:1e:8e:64:fb:aa:47:45:ae:26:3e:0c:
9d:10:12:f7:c2:3b:d0:77:af:04:f3:d4:a1:a4:34:93:dd:85:
f3:3d:36:7c:20:64:55:89:04:ee:8f:79:a8:f5:00:70:27:8f:
5a:5c:98:04:57:56:10:50:df:26:09:f3:8f:8e:2f:52:36:87:
2f:14:64:59:ae:ff:c7:36:fc:88:6d:fe:15:b7:cf:83:ae:b6:
87:21:28:59:9b:67:be:f9:b6:f3:d7:2b:f4:c6:de:a1:e8:a7:
4e:85:a9:a6:56:10:a2:80:77:00:f4:4d:c8:dd:4c:81:90:3c:
88:24:28:de:d5:b9:0b:17:15:46:63:c3:d4:6c:3a:ad:3d:f7:
43:42:51:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2
Nzc1NTBBQzgwHhcNMjYwMzAzMDQxNTMzWhcNMjYwMzEwMDQxNTMzWjAYMRYwFAYD
VQQDEw02OWE2NjA2Ni1iYmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzUQSG4g7k4fjPwI6/JA7bL0/EEcBjr+ujTVFGKy8KIdoFrlgzmHE3Yea4wJ2
VZY4frA8b8YTAKm3kR5HRn9IYP65CNFI4gEaq+4NUkU8ILx/Dr7Ka+7HBj0DcHF3
+zqj+9l+/BphqpN4DcuIMN9kBj5T3x+FvZLwskh1OEzWMTP7TSxkxbBOVG2Yn/UP
QYiD/NI+aOzOto7ZfnemWfnpsZJ5aq6C6kOvraR8HoQgY5ie51ZhbueMxV9KQdYg
IntQpAt0Mce/AAJ7M7UvOWF9SMqJR16rFvO+9QahH0qOgd8+mxKKiLSXt/TGcWpf
yaCK5QQWQq5fkpqrJqzJjhjX/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJGhFNv/
I3UiNxuJ3P+PNMHK/rDfMB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx
MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0
Tlh3cVdwbS16XzluZFZDc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfVCYZS1tKt9fRdvSQgye1p7bsGE59J+82D9h9tkBZTFQCFl0i1I1QWEivgQP
d8e2P2xxCPEXseCyfFL1+L/g+pCD67aUNiWKM0+MFv4qNqvlroLOO7AhixMPevPA
x9w/KBBBqYGCtZwikFT2TWyBysQgzx6OZPuqR0WuJj4MnRAS98I70HevBPPUoaQ0
k92F8z02fCBkVYkE7o95qPUAcCePWlyYBFdWEFDfJgnzj44vUjaHLxRkWa7/xzb8
iG3+FbfPg662hyEoWZtnvvm289cr9MbeoeinToWpplYQooB3APRNyN1MgZA8iCQo
3tW5CxcVRmPD1Gw6rT33Q0JRkw==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:22:24 2026 by rpki-client