
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
File: USSgTiOq3aRNlKsNSrLAt7IL_HU.mft (raw, json)
Hash identifier: 338cPRFX08w4uytJTNv7cLremDt72SCAyOX4BGXLw1A=
Subject key identifier: 20:DE:36:58:44:56:73:56:3B:42:33:D3:7D:14:C0:25:6A:96:45:32
Authority key identifier: 51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75
Certificate issuer: /CN=A91A8151/serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
Certificate serial: 0CE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
Manifest number: 0CDC
Signing time: Wed 20 May 2026 18:25:45 +0000
Manifest this update: Wed 20 May 2026 18:25:45 +0000
Manifest next update: Wed 27 May 2026 18:25:45 +0000
Files and hashes: 1: USSgTiOq3aRNlKsNSrLAt7IL_HU.crl (hash: eUmz6F33aEikcusk4J993kN2OiX24z9eKbkTuMaMES4=)
2: 4279BBD80C5811EA93151657C4F9AE02.roa (hash: wdDYplfzKaYX22uPvzlPb5qqxZS2nS6LfIySpohKPZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl
rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3305 (0xce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8151, serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
Validity
Not Before: May 20 18:25:45 2026 GMT
Not After : May 27 18:25:45 2026 GMT
Subject: CN=6a0dfca9-be4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:f3:ed:ba:34:b0:5f:1c:01:b2:6a:55:9e:
07:e8:70:1a:80:dd:6a:ee:55:f4:b9:4d:74:d6:02:
21:3f:a0:e4:2a:12:6a:18:a9:1e:9f:d4:cd:a6:3b:
bb:20:89:e0:56:cf:0d:c5:69:d5:f2:e5:78:25:f1:
c1:63:ee:49:95:48:21:db:29:99:4c:77:4d:1a:f4:
8d:41:e7:93:2a:bd:b5:d8:e3:10:5e:66:33:55:ca:
fc:f6:0e:8e:cd:7d:34:ef:be:c6:83:7b:8a:8f:bf:
02:a5:34:d5:ef:45:f0:d9:33:1e:a2:67:46:a8:b5:
2f:b4:28:40:eb:b1:8d:75:1a:b7:b0:bf:84:ed:f7:
b7:50:39:a5:58:64:0d:63:28:b8:0c:ab:7a:73:07:
47:f3:76:ef:a9:64:73:08:67:73:2a:67:48:83:c9:
bf:19:bc:a3:33:91:0b:e1:78:4e:b8:8d:78:26:8f:
7f:2a:05:1f:bb:8e:45:2b:74:6c:af:39:da:dc:cb:
fe:13:21:82:de:04:13:9e:ff:45:88:d2:c7:02:95:
a1:de:9d:d6:8d:79:32:2c:88:23:9b:bc:f7:7e:3f:
c7:b5:31:1c:5c:4e:ee:22:1b:40:35:43:9e:29:95:
95:f3:22:d4:e9:d6:c1:c9:76:fd:63:5a:4c:e2:1c:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DE:36:58:44:56:73:56:3B:42:33:D3:7D:14:C0:25:6A:96:45:32
X509v3 Authority Key Identifier:
keyid:51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ff:04:64:39:4c:73:c3:f9:4f:b3:3f:d8:f3:ff:ce:be:23:
f6:86:7e:7d:c8:ab:ad:f6:a8:09:6c:4d:1e:bf:d3:d4:a0:e8:
7b:40:e3:10:27:72:55:16:c3:ca:9a:f7:bc:29:e6:00:08:fe:
5a:92:01:e8:9b:e7:01:84:f9:83:cb:25:a5:7f:04:c3:88:5e:
9a:c1:80:d1:5d:13:5f:67:d2:a0:79:3d:b0:47:cd:3d:12:41:
21:86:68:30:2c:f2:a2:e9:3f:e4:6e:17:b1:f7:d8:c2:dc:78:
0d:70:ed:47:e3:2f:fc:5d:29:ba:96:62:68:66:bc:4d:51:a3:
5c:24:08:99:62:20:10:2e:01:93:78:d3:9d:bc:fe:a3:7e:74:
bd:06:8e:56:57:2b:86:9c:b8:71:42:9a:e8:6b:25:0b:77:d9:
f9:c8:b2:c7:ee:b7:f4:80:87:97:40:fe:3c:88:f8:6d:b9:06:
43:a8:73:01:e8:49:7c:aa:1d:c2:2d:0b:20:a3:e9:2e:8c:45:
a3:6f:3e:26:f6:52:12:b2:04:e7:dc:a6:17:95:5d:b1:c6:7e:
08:26:cd:4c:df:df:c8:45:0d:6d:76:92:eb:45:cd:2c:a0:22:
cf:1f:28:5e:fb:2f:eb:38:d7:03:77:be:1f:f0:16:f3:8c:db:
3c:46:c7:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgxNTExMTAvBgNVBAUTKDUxMjRBMDRFMjNBQUREQTQ0RDk0QUIwRDRBQjJDMEI3
QjIwQkZDNzUwHhcNMjYwNTIwMTgyNTQ1WhcNMjYwNTI3MTgyNTQ1WjAYMRYwFAYD
VQQDEw02YTBkZmNhOS1iZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAufzz7bo0sF8cAbJqVZ4H6HAagN1q7lX0uU101gIhP6DkKhJqGKken9TNpju7
IIngVs8NxWnV8uV4JfHBY+5JlUgh2ymZTHdNGvSNQeeTKr212OMQXmYzVcr89g6O
zX00777Gg3uKj78CpTTV70Xw2TMeomdGqLUvtChA67GNdRq3sL+E7fe3UDmlWGQN
Yyi4DKt6cwdH83bvqWRzCGdzKmdIg8m/GbyjM5EL4XhOuI14Jo9/KgUfu45FK3Rs
rzna3Mv+EyGC3gQTnv9FiNLHApWh3p3WjXkyLIgjm7z3fj/HtTEcXE7uIhtANUOe
KZWV8yLU6dbByXb9Y1pM4hxwFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCDeNlhE
VnNWO0Iz030UwCVqlkUyMB8GA1UdIwQYMBaAFFEkoE4jqt2kTZSrDUqywLeyC/x1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODE1MS83MDExNERBQTBD
NTcxMUVBOTg1MTAyNTZDNEY5QUUwMi9VU1NnVGlPcTNhUk5sS3NOU3JMQXQ3SUxf
SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VTU2dUaU9xM2FSTmxLc05TckxBdDdJTF9IVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODE1MS83MDExNERBQTBDNTcxMUVBOTg1MTAyNTZDNEY5QUUwMi9VU1NnVGlPcTNh
Uk5sS3NOU3JMQXQ3SUxfSFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW/8EZDlMc8P5T7M/2PP/zr4j9oZ+fcirrfaoCWxNHr/T1KDoe0DjECdyVRbD
ypr3vCnmAAj+WpIB6JvnAYT5g8slpX8Ew4hemsGA0V0TX2fSoHk9sEfNPRJBIYZo
MCzyouk/5G4XsffYwtx4DXDtR+Mv/F0pupZiaGa8TVGjXCQImWIgEC4Bk3jTnbz+
o350vQaOVlcrhpy4cUKa6GslC3fZ+ciyx+639ICHl0D+PIj4bbkGQ6hzAehJfKod
wi0LIKPpLoxFo28+JvZSErIE59ymF5VdscZ+CCbNTN/fyEUNbXaS60XNLKAizx8o
Xvsv6zjXA3e+H/AW84zbPEbH+Q==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:05 2026 by rpki-client