
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json)
Hash identifier: dWO7cIkLis0DqU3wYcuuZijCRl92ZM9ReHQXSRbZdqU=
Subject key identifier: 8A:B6:0E:5E:83:45:DD:61:DE:F7:09:73:89:29:DD:12:2F:83:47:BD
Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB
Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
Certificate serial: 129F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
Manifest number: 1286
Signing time: Mon 26 Oct 2026 17:05:33 +0000
Manifest this update: Mon 26 Oct 2026 17:05:33 +0000
Manifest next update: Mon 02 Nov 2026 17:05:33 +0000
Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: ZCgktmflV/z+r71kkA/+2C2PH5H3m4RLdFdwcHwlu1E=)
2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: 1PUveXSVNEFsI6eTf+ATt+sd0I0xyK56lA2WpD1UOWM=)
3: rU4P7at9ntl2gnj69OM_fFkQ_Rw.asa (hash: psc+5+7o7YR1fz875C8WukUuUUf4mdTKlF0hhWPlCB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl
rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 17:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4767 (0x129f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
Validity
Not Before: Oct 26 17:05:33 2026 GMT
Not After : Nov 2 17:05:33 2026 GMT
Subject: CN=6adf885d-639e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:15:dd:f5:77:ed:a5:77:93:fb:ac:fe:d2:82:
45:ad:90:d7:2c:5d:13:ec:9c:07:ac:f2:85:2c:b7:
b3:01:33:d1:cc:61:47:58:27:30:6c:e1:04:79:15:
d4:ea:56:1c:ac:2a:4d:25:ea:41:7e:7a:73:a8:51:
e6:4c:ef:b1:2e:16:db:73:d5:56:c4:36:7e:28:bf:
1b:b6:17:34:27:3a:d0:d8:70:c7:9f:e4:3a:2d:8a:
db:57:b2:c4:56:ca:fb:8f:91:c7:46:ad:36:3a:97:
32:e0:9e:8a:c7:9f:61:17:6b:0b:d2:86:4f:fe:36:
d2:11:6b:1c:8a:db:a3:27:6d:cc:70:cb:2b:45:d9:
af:d9:5e:96:2c:98:58:66:1e:4f:22:3d:96:e2:38:
43:6f:53:44:8a:59:34:cc:ed:21:b7:6a:6a:21:ba:
08:61:9c:13:fa:46:39:75:e1:41:ca:b8:be:ad:66:
ef:d3:da:26:56:cc:fa:84:8e:fd:69:2e:a6:4b:d2:
09:17:c8:fe:59:2a:84:24:4f:19:03:24:2a:f5:f6:
ac:20:24:fd:de:e0:8c:9a:e1:d5:ef:52:6c:8f:29:
20:6f:d3:55:c5:77:87:7d:c9:c3:13:07:aa:ec:d2:
e8:5b:35:92:1a:40:be:d6:29:d4:98:60:6a:b1:25:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B6:0E:5E:83:45:DD:61:DE:F7:09:73:89:29:DD:12:2F:83:47:BD
X509v3 Authority Key Identifier:
keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:dd:4b:c4:56:b4:4d:0e:9d:6f:f1:e8:04:ef:62:1d:95:51:
49:81:41:29:c6:d6:ce:97:31:bb:e3:44:e0:33:94:81:e3:66:
02:27:40:fe:5a:a1:af:a2:c6:3d:3c:80:2c:a6:45:f9:34:96:
b3:f3:ea:f3:56:eb:fc:33:d3:48:e0:4a:7e:84:ac:04:30:73:
e2:18:3f:95:10:11:16:67:01:ac:a2:4f:7e:39:4c:1a:56:1b:
12:e8:bd:eb:5c:1d:18:91:1a:23:30:78:64:de:f0:2a:f5:56:
51:5a:10:1c:d7:36:ab:f9:75:18:5c:0c:1b:91:ee:24:66:80:
53:bc:a8:33:a1:09:4d:43:f4:b8:0d:ab:33:e9:c0:fd:65:c9:
d5:6e:6a:e6:8e:0d:46:a7:e1:08:25:64:0c:72:96:ba:0a:e0:
a7:fd:86:8f:05:2c:f4:02:ae:c6:c9:3b:27:f9:de:c8:7d:f6:
82:ac:42:87:45:81:9d:37:df:05:45:eb:ad:64:39:5e:46:c3:
33:fe:f0:69:49:0e:42:c9:1b:1e:c0:d8:f0:aa:f0:b5:b9:3a:
e5:33:7a:8c:e1:8b:dd:f7:4e:9b:f6:54:4c:fe:9c:53:a6:f9:
64:7a:7a:9e:77:6c:9e:d8:91:43:c8:75:e1:5c:41:dd:c1:2a:
a7:f4:e5:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjcyN0MxMTAvBgNVBAUTKDFEODgyQzhDRjI0MzRDQzlCQkZENzkxOTFEQzJDNjk4
MjkyNkU4QUIwHhcNMjYxMDI2MTcwNTMzWhcNMjYxMTAyMTcwNTMzWjAYMRYwFAYD
VQQDEw02YWRmODg1ZC02MzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4xXd9XftpXeT+6z+0oJFrZDXLF0T7JwHrPKFLLezATPRzGFHWCcwbOEEeRXU
6lYcrCpNJepBfnpzqFHmTO+xLhbbc9VWxDZ+KL8bthc0JzrQ2HDHn+Q6LYrbV7LE
Vsr7j5HHRq02Opcy4J6Kx59hF2sL0oZP/jbSEWscitujJ23McMsrRdmv2V6WLJhY
Zh5PIj2W4jhDb1NEilk0zO0ht2pqIboIYZwT+kY5deFByri+rWbv09omVsz6hI79
aS6mS9IJF8j+WSqEJE8ZAyQq9fasICT93uCMmuHV71Jsjykgb9NVxXeHfcnDEweq
7NLoWzWSGkC+1inUmGBqsSUBiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIq2Dl6D
Rd1h3vcJc4kp3RIvg0e9MB8GA1UdIwQYMBaAFB2ILIzyQ0zJu/15GR3CxpgpJuir
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI3Qy85RDc3QzZENDAy
OEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRNbTdfWGtaSGNMR21Da202
S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hZZ3NqUEpEVE1tN19Ya1pIY0xHbUNrbTZLcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NzI3Qy85RDc3QzZENDAyOEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRN
bTdfWGtaSGNMR21Da202S3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACd1LxFa0TQ6db/HoBO9iHZVRSYFBKcbWzpcxu+NE4DOUgeNmAidA/lqhr6LG
PTyALKZF+TSWs/Pq81br/DPTSOBKfoSsBDBz4hg/lRARFmcBrKJPfjlMGlYbEui9
61wdGJEaIzB4ZN7wKvVWUVoQHNc2q/l1GFwMG5HuJGaAU7yoM6EJTUP0uA2rM+nA
/WXJ1W5q5o4NRqfhCCVkDHKWugrgp/2GjwUs9AKuxsk7J/neyH32gqxCh0WBnTff
BUXrrWQ5XkbDM/7waUkOQskbHsDY8Krwtbk65TN6jOGL3fdOm/ZUTP6cU6b5ZHp6
nndsntiRQ8h14VxB3cEqp/Tlpg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:39:29 2026 by rpki-client