
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json)
Hash identifier: sxhu+dtHQjoB4K7CGJa3RXz1QOPP94mmk71L4qihflQ=
Subject key identifier: FA:A6:B9:B4:2C:0D:A7:5D:1B:8B:72:DD:55:6B:DD:32:8D:1A:2C:F4
Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB
Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
Certificate serial: 1283
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
Manifest number: 126B
Signing time: Fri 04 Sep 2026 17:04:08 +0000
Manifest this update: Fri 04 Sep 2026 17:04:07 +0000
Manifest next update: Fri 11 Sep 2026 17:04:07 +0000
Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: YW7qQRDJBvRD5hpwddacjtJaxCITThZJhRFfbHVabvs=)
2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: 1PUveXSVNEFsI6eTf+ATt+sd0I0xyK56lA2WpD1UOWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl
rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4739 (0x1283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
Validity
Not Before: Sep 4 17:04:07 2026 GMT
Not After : Sep 11 17:04:07 2026 GMT
Subject: CN=6a9afa08-144f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:ba:21:84:8c:2e:a8:16:20:50:2a:6d:b1:
60:07:e6:2f:bf:d3:fd:d9:24:be:5f:47:0f:5c:9f:
a0:8f:e5:4a:c7:7c:12:71:b6:76:4e:2d:14:2f:6d:
34:1f:26:14:ec:cc:79:ce:82:13:58:d7:a0:1d:3f:
ed:5d:e2:50:93:19:ce:c4:e1:46:59:27:bc:07:f6:
f8:ab:2d:49:20:1a:88:c0:7d:9e:e4:c3:ba:9c:13:
5f:2b:71:03:24:30:74:c0:f3:a7:e3:0e:17:c4:9e:
b6:89:d8:fb:59:e5:4b:9b:13:dd:58:d2:5a:06:a3:
fd:66:a9:f4:f0:2b:9f:81:ae:65:39:87:8e:fc:3c:
ed:0c:25:1d:d8:12:cd:04:0b:53:e8:82:9f:41:2b:
f0:ad:60:b6:eb:e1:2a:b0:5d:28:55:42:0d:a9:98:
27:9c:06:e6:d9:ee:9b:dd:3e:bd:32:9f:db:ce:1d:
d2:f9:ea:cf:4c:cf:fe:de:cd:c8:2a:59:83:83:31:
f3:30:8e:ed:5e:a5:ff:80:e1:ea:4f:84:35:71:21:
38:84:d4:b0:29:b4:de:e7:b7:a4:d6:f5:eb:ef:f9:
88:13:a7:0d:d5:ce:ee:9a:4d:1a:09:5d:bf:ab:91:
27:ce:15:b3:01:2e:e4:21:28:7c:29:2d:a7:2c:75:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A6:B9:B4:2C:0D:A7:5D:1B:8B:72:DD:55:6B:DD:32:8D:1A:2C:F4
X509v3 Authority Key Identifier:
keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:e1:3d:2c:45:8b:51:bf:c4:aa:05:e6:3e:3b:37:3e:cc:db:
11:55:d7:43:30:eb:87:34:d9:24:46:b1:99:71:67:5c:92:1e:
83:8c:0f:99:79:fc:fc:76:72:cb:0b:07:67:30:39:f1:6c:bd:
0c:f1:45:45:0c:49:11:91:fb:2e:e3:f6:75:0f:7e:4e:45:e6:
5d:60:63:87:8e:ec:9f:56:a2:b7:bf:fc:1b:65:b1:10:de:85:
b8:ed:6a:c5:10:ca:09:57:0d:88:10:1c:b6:9c:e3:cc:10:94:
fc:f3:ae:5c:a3:a4:8d:0b:1a:a5:aa:56:82:e8:52:49:5c:77:
c5:01:1d:31:19:1c:66:6b:1c:13:af:21:57:b2:c4:91:40:4c:
ad:fa:c7:09:f8:7a:71:c6:52:fc:35:28:63:2e:d6:67:f5:f1:
06:e6:c9:8e:f0:da:4f:26:98:d5:9f:23:85:d5:09:cc:d5:9a:
ef:93:94:ae:62:ac:ee:96:8e:20:04:74:a4:7b:e3:50:14:88:
4d:4b:bd:15:9e:62:ad:43:19:6e:7e:51:68:e9:72:d6:5b:ef:
0d:2f:bb:d6:15:fe:c0:bf:e1:86:64:60:76:00:ff:b9:37:c2:
74:63:11:f0:c5:1d:d8:7d:fd:ef:da:55:29:55:2e:fe:25:9e:
99:48:d1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 14:19:28 2026 by rpki-client