
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft
File: Hy55yPeszIoD-1tKOvzF9pMbN4I.mft (raw, json)
Hash identifier: sGMQdzKKkB30e2AlzZ2HWkZYVX0TrxW0PNBBkQ5tv3w=
Subject key identifier: 29:36:20:A2:70:43:FF:5A:EC:DC:DB:1D:2C:DA:5F:35:4B:E4:73:7F
Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82
Certificate issuer: /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782
Certificate serial: 1820
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft
Manifest number: 1813
Signing time: Tue 18 Aug 2026 16:40:59 +0000
Manifest this update: Tue 18 Aug 2026 16:40:59 +0000
Manifest next update: Tue 25 Aug 2026 16:40:59 +0000
Files and hashes: 1: Hy55yPeszIoD-1tKOvzF9pMbN4I.crl (hash: /MfGU9Tn2h9oWSDBPnIzf97fGwDVu5l1vKRAfp3zGoY=)
2: 02181C4CE13511E7B0D71C83C4F9AE02.roa (hash: v3H/p5Ktvsz+MkxJKek+k3rhTh/FkFVJc40/XtTzh38=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl
rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6176 (0x1820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB09C, serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782
Validity
Not Before: Aug 18 16:40:59 2026 GMT
Not After : Aug 25 16:40:59 2026 GMT
Subject: CN=6a848b1b-df70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:a7:8b:3c:84:4f:f0:bc:01:07:cb:0d:1e:
3f:cf:8b:19:a0:7d:a6:32:a1:6b:d7:f8:09:14:9e:
d7:4d:a9:4a:8a:df:34:87:46:c7:cd:da:a5:9f:83:
8b:e4:f3:e4:d1:ff:b9:f9:7c:06:f8:a9:3f:3b:83:
7b:70:f1:d4:a4:43:df:6f:d0:40:43:25:fe:91:89:
97:72:43:2c:c7:02:18:d7:15:e2:92:96:cf:e6:e9:
5f:a5:51:c4:09:ee:14:39:8b:03:6e:99:99:f7:5d:
a9:de:45:52:04:6d:c9:5d:aa:5a:ad:e0:ba:bc:40:
c8:d3:67:95:6b:71:1b:03:12:c0:94:7d:61:97:61:
88:26:76:a7:9c:fe:f9:eb:57:50:2e:88:ce:f7:7a:
3e:77:61:c7:48:01:8d:ef:52:b5:92:30:8a:97:12:
28:3a:04:62:f9:e6:16:d2:23:d0:bd:22:05:e2:45:
d4:2a:d4:8e:b0:c5:51:8c:f3:0a:7b:8b:89:a9:ba:
1a:eb:4b:98:d4:89:08:2e:e0:dd:27:52:42:c7:ec:
bb:ca:13:4d:23:73:a3:46:a1:e7:66:9f:35:8f:c9:
da:34:f8:f7:bb:73:dc:b5:6f:43:e1:9d:a7:8f:f4:
86:85:7c:3a:21:c2:ef:e9:28:5a:72:1d:2a:3f:56:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:36:20:A2:70:43:FF:5A:EC:DC:DB:1D:2C:DA:5F:35:4B:E4:73:7F
X509v3 Authority Key Identifier:
keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:68:3a:a8:f4:79:03:51:c5:a3:39:b8:28:3a:ce:b8:3a:94:
38:bf:5a:0d:11:31:4b:e2:d4:2c:5a:85:04:19:35:74:bf:57:
d9:4e:f4:19:89:e5:38:48:de:b5:e6:f9:13:9f:4f:27:2d:57:
8d:80:a2:87:a9:e8:8e:7a:ec:9b:69:5c:0c:a0:c3:61:f8:23:
7b:62:b5:c4:46:d6:05:bb:cc:ad:9b:f0:cc:4f:22:8a:d8:ca:
32:21:a6:8c:14:34:3d:38:8e:74:04:86:59:35:84:7b:97:73:
17:d3:4c:14:6c:3a:1f:0d:ec:ca:17:df:d4:0d:90:70:b7:75:
d9:3e:0c:cb:f3:4b:90:64:89:ee:fb:18:1e:6a:82:8b:52:fe:
54:24:15:8c:e9:a5:61:0a:5a:aa:05:d4:51:60:f2:a8:e4:68:
45:a4:b9:ff:f4:1e:6c:7c:43:be:ed:a7:ac:5b:79:5b:c7:aa:
5c:8d:96:26:4c:c4:ee:89:fd:43:34:0f:94:99:84:d2:fe:10:
e2:e0:9e:d5:95:dc:84:74:a2:57:7c:14:4e:67:57:27:ef:83:
c1:9b:4a:fd:a3:aa:70:2c:4a:58:9b:d9:76:fc:ac:10:e1:35:
d5:18:f9:97:55:ad:4e:a3:8d:ff:cb:d2:35:f8:84:91:17:78:
af:36:12:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:33 2026 by rpki-client