
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json)
Hash identifier: UgSV1Rj7QmdCW0jARS1KTdlWKJhuragqkVKd7MWAcW4=
Subject key identifier: DA:6D:81:15:CE:84:CA:99:65:76:70:E7:ED:E0:9A:99:C1:8A:75:6B
Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Certificate serial: 0432
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
Manifest number: 0426
Signing time: Sun 01 Nov 2026 00:51:46 +0000
Manifest this update: Sun 01 Nov 2026 00:51:46 +0000
Manifest next update: Sun 08 Nov 2026 00:51:46 +0000
Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: 1JNfzxVLn5XxyvH/3Zb4H2+5OMFfDu2IOwWh9Xf6ilQ=)
2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: bEkAf8RbC70HpP82l6520PaTKeuoOgUw/cUr1803UXE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl
rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Nov 2026 00:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1074 (0x432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Validity
Not Before: Nov 1 00:51:46 2026 GMT
Not After : Nov 8 00:51:46 2026 GMT
Subject: CN=6ae68d22-e4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:c3:fe:3e:48:0f:dc:0a:bf:a4:76:e4:64:
78:3a:9d:02:9d:12:8d:98:db:76:3b:17:28:66:9d:
46:db:73:11:ed:a3:f3:26:af:2b:e7:05:f7:7e:d8:
0e:da:a8:1f:cb:fd:78:fc:f6:e6:5b:4f:ba:8b:46:
c5:fe:ec:78:41:da:b3:bd:d6:c6:42:fa:b8:2d:70:
c8:bf:23:6e:57:13:b5:b1:55:22:37:9d:02:17:dc:
81:ba:92:44:c5:c9:f0:7c:b2:a2:8b:a0:2f:6a:27:
f6:65:45:df:06:e1:20:85:ef:4d:c7:0c:58:80:25:
37:a3:31:42:e7:e2:83:8e:fe:16:f6:bb:0f:ad:01:
35:96:16:8d:03:4b:d7:1c:34:2c:6e:bb:34:f0:8b:
36:7d:05:79:66:35:f7:9b:9a:53:a6:d0:bf:df:94:
2b:17:44:35:cd:ec:c6:f3:f5:a6:76:10:05:b2:56:
d0:40:ad:f9:cd:c1:7b:11:48:a1:5f:2a:1e:8e:2d:
37:90:f3:02:8c:25:56:e6:53:70:91:29:bf:8c:29:
c6:77:20:fe:21:69:ae:28:4c:7f:26:79:a1:6b:2c:
71:ca:f4:1a:ec:fd:09:c7:05:c6:d0:33:a4:57:a1:
a2:c4:ae:79:78:01:24:4d:db:79:75:da:ac:91:09:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6D:81:15:CE:84:CA:99:65:76:70:E7:ED:E0:9A:99:C1:8A:75:6B
X509v3 Authority Key Identifier:
keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8c:e8:74:c0:d0:6c:33:8e:88:d8:13:a0:85:2f:4c:ef:a9:
1b:e2:9f:57:a6:ed:9f:ea:3f:2d:7f:6b:47:97:76:7d:b3:48:
cf:ac:55:5a:c1:12:85:35:ef:ec:01:9a:b8:b2:1a:d5:43:14:
f9:cb:71:dd:b1:2e:80:a7:bb:e1:4a:4e:25:71:78:9d:d8:16:
1d:26:7c:2b:74:af:25:45:2b:2b:47:52:a3:9a:65:63:d3:c4:
36:cf:25:59:07:c6:3b:20:7a:91:d1:9b:ef:48:9e:da:58:df:
ab:f4:ab:e6:db:26:b5:c4:30:6d:00:a4:e1:61:00:2e:29:be:
40:2a:bc:82:f6:fd:03:2f:db:0e:fc:98:88:8a:91:ed:10:4d:
d2:db:05:f0:48:f6:f1:83:12:89:9e:e3:44:f9:0e:2f:6f:4f:
88:3a:17:2b:81:0d:70:2b:95:85:f9:31:8f:89:57:e4:2c:51:
9e:7a:fd:f6:c8:66:c7:f1:d6:ef:5b:df:ff:3d:a1:10:e0:47:
c1:fb:5a:d2:b4:ae:25:2d:7d:2f:6f:66:ca:e2:9d:e3:99:7d:
07:61:16:cd:e9:2b:9e:be:43:04:53:b9:77:fa:f8:1d:18:0a:
89:90:9c:c5:91:23:e5:e1:bd:7c:20:98:ac:14:98:7e:ca:4a:
58:ca:05:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:24:42 2026 by rpki-client