
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
File: HtdycKSBilV07-7Kyvt0g812iCE.mft (raw, json)
Hash identifier: kjmUTi+dEASx00ufBfDOyOMEAm+Pkg79m7UxE9JZJtQ=
Subject key identifier: 53:79:CF:BB:0C:F7:74:91:69:EB:E5:8B:1E:46:9D:13:33:D1:08:87
Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21
Certificate issuer: /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821
Certificate serial: 0AFE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
Manifest number: 0AF5
Signing time: Sat 04 Apr 2026 19:11:40 +0000
Manifest this update: Sat 04 Apr 2026 19:11:40 +0000
Manifest next update: Sat 11 Apr 2026 19:11:40 +0000
Files and hashes: 1: HtdycKSBilV07-7Kyvt0g812iCE.crl (hash: mWMhcqQssamw1Rk/WahEu/RIrVeGODKg04e+waKtjIQ=)
2: 7C29A45A669A11EA9A11434FC4F9AE02.roa (hash: FltWI5xRyUf7n10bBM13nJiUl3E+pGaXZNwDZHIDukY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl
rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2814 (0xafe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821
Validity
Not Before: Apr 4 19:11:40 2026 GMT
Not After : Apr 11 19:11:40 2026 GMT
Subject: CN=69d1626c-934f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:37:98:79:7d:31:6f:ef:75:e7:45:c0:b9:
d9:2a:3f:1f:22:5a:7a:af:58:63:6e:9d:af:a2:57:
2e:e7:93:fc:95:5b:b9:92:8c:03:99:54:dc:35:7e:
67:57:2d:b0:88:ac:d5:52:24:d0:28:ae:44:bb:6b:
00:51:8d:f2:da:1b:7d:a1:40:49:ad:71:c1:75:25:
f2:a2:42:2e:0e:c3:7f:bf:2b:65:79:6d:45:09:8f:
25:21:f9:46:08:96:f4:91:d7:88:d7:3e:95:ad:5e:
c7:d3:c7:ee:6c:d6:a3:68:56:89:a0:0b:ec:db:59:
e3:72:d7:fe:c8:e8:f6:6d:90:be:bd:0e:c9:84:7e:
80:8b:37:1d:d4:aa:a1:b6:51:a5:1a:c8:c2:42:c5:
94:8b:84:52:98:9c:be:be:db:4c:5b:5d:6e:ec:84:
36:fc:66:ed:98:63:f0:5d:f0:2b:4b:d6:ff:53:9f:
1f:6b:d9:08:bf:c0:40:76:c9:38:83:ec:4f:da:25:
09:78:89:be:e2:38:05:03:1b:40:90:68:f4:a1:12:
f4:12:b7:0d:d9:c9:29:0c:6b:06:49:8d:d8:33:31:
67:5a:3c:3b:01:2f:ef:82:7d:af:e3:a6:21:46:81:
39:14:8c:2c:46:3e:15:99:75:45:24:c2:02:0d:31:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:79:CF:BB:0C:F7:74:91:69:EB:E5:8B:1E:46:9D:13:33:D1:08:87
X509v3 Authority Key Identifier:
keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:33:bb:56:58:e2:b9:d0:d3:68:5e:bc:df:5d:6a:33:15:6d:
18:ee:58:2b:1f:80:ec:2f:77:cf:25:8d:93:ce:55:3c:bf:f4:
2c:0e:25:45:73:dc:69:ce:68:30:37:dc:af:67:24:15:04:fc:
52:64:29:c7:77:c4:fc:97:b9:f5:37:9d:70:c6:29:0e:75:14:
b0:75:d7:ad:b7:af:31:92:db:7a:72:76:f5:d8:20:a5:02:6a:
b2:cc:9c:60:08:e7:55:09:36:26:09:ee:ed:47:2e:cb:23:34:
b8:b5:fb:9b:3d:86:ff:36:32:bf:8b:df:b8:8c:8e:30:d2:5b:
24:ac:8f:36:5e:01:ae:bd:00:7d:bd:8a:4c:87:b7:92:d5:ce:
0b:b0:8c:93:15:f6:6f:db:d1:48:e8:98:ea:aa:71:e5:0b:21:
e2:18:cc:ac:1b:0a:7f:40:1d:8d:bd:01:5f:86:a4:dd:e2:b7:
02:8f:bc:a5:a0:c4:f8:e6:47:33:89:c0:0c:ec:cf:ef:37:96:
e8:15:85:52:cb:93:64:3c:ce:e3:f3:51:27:1d:ba:bb:ec:1a:
31:b5:0a:e1:c8:13:dd:74:e5:a8:c9:b6:84:52:47:df:33:38:
f3:dc:d9:22:1d:38:96:cb:2d:b1:54:26:bb:ab:b3:5e:09:51:
22:52:29:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:01 2026 by rpki-client