
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
File: hYu8kCwHf24DE67cSds25v7yNLI.mft (raw, json)
Hash identifier: KQWfRBFRFeWUmfzZ8vlbl740TEj7fg5IS+CfPfP3zoY=
Subject key identifier: ED:E1:44:E6:A9:E4:7C:94:5B:4C:D0:74:3D:64:EF:47:CC:C3:DE:96
Authority key identifier: 85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
Certificate issuer: /CN=A91DE334/serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
Manifest number: 36
Signing time: Sun 05 Apr 2026 07:56:48 +0000
Manifest this update: Sun 05 Apr 2026 07:56:48 +0000
Manifest next update: Sun 12 Apr 2026 07:56:48 +0000
Files and hashes: 1: hYu8kCwHf24DE67cSds25v7yNLI.crl (hash: NdwBfzq7Xzy1Mqrs/u9RV25AG4KFlWm3IB2wUtHuu9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE334, serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Validity
Not Before: Apr 5 07:56:48 2026 GMT
Not After : Apr 12 07:56:48 2026 GMT
Subject: CN=69d215c0-fe7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:4b:63:62:1a:c1:5a:72:01:c8:3d:2a:d4:
1c:25:87:2c:da:a4:cb:19:f9:47:48:40:c1:40:df:
ba:12:a3:88:96:2e:6f:4c:97:ba:eb:4a:c9:73:c7:
dd:88:2a:52:af:b5:a0:14:8b:82:b5:0c:0e:05:fa:
d2:56:aa:13:f2:bb:f1:65:a9:c5:ce:5d:85:0b:8c:
93:0b:c9:0e:20:8b:33:51:7f:0d:e4:ef:fe:f9:7a:
95:5c:df:cb:b4:73:22:e8:96:99:c0:ca:86:2a:dc:
1c:24:29:64:a2:d6:80:24:4e:c7:1b:50:dd:ae:03:
07:fe:5d:49:14:eb:1f:05:7c:61:93:09:e5:99:11:
a5:5a:0f:ff:6d:9e:cb:e1:ed:d7:7e:2f:eb:44:9a:
09:cc:48:23:ce:33:67:3c:88:ad:41:c5:04:bb:73:
32:f3:42:db:30:99:24:9d:3d:61:19:b9:b7:a4:4b:
9d:2d:13:35:f1:d4:3e:49:21:0e:a3:bc:bc:91:4f:
0a:ee:7c:77:75:1f:96:d4:4a:2c:c8:b9:66:cf:11:
de:d5:34:4a:c2:a1:e3:19:33:27:fa:76:4c:54:07:
d4:f7:8d:e7:ef:00:0f:07:b6:48:5e:df:d3:b9:db:
e0:8a:6a:d9:b6:2d:29:9e:5d:10:2c:47:b7:df:3e:
dc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E1:44:E6:A9:E4:7C:94:5B:4C:D0:74:3D:64:EF:47:CC:C3:DE:96
X509v3 Authority Key Identifier:
keyid:85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f9:05:53:29:f1:c0:80:33:16:e3:61:4c:8a:6d:41:58:2d:
6b:d0:54:4b:1f:5d:1b:d4:9f:62:1e:eb:60:16:9e:08:87:16:
13:e3:3e:a2:ef:1a:eb:ab:f9:bc:e3:c5:3f:1d:da:a2:e9:5f:
14:a8:60:53:a1:c5:9f:6e:04:2e:aa:ac:d9:ac:ac:1c:66:d7:
ad:74:11:2e:6f:71:41:a5:4c:09:64:85:de:53:3e:69:06:62:
bd:c5:cf:82:59:b8:9e:57:e4:5c:ae:d8:c0:8f:ab:08:f3:45:
7e:a0:a1:ac:ab:6f:49:e8:77:6a:ca:e3:39:85:63:e1:12:bb:
9a:13:36:91:32:27:d2:92:63:23:08:b4:4e:dd:7b:cb:27:0f:
cb:6c:99:3d:fc:cc:ae:f9:0c:db:8a:15:19:50:8b:ec:aa:7d:
be:ae:7a:ea:8c:1c:00:4e:1f:5e:04:69:2b:e2:4b:6b:50:72:
2c:cb:25:9f:e9:18:68:38:a7:dd:ec:93:79:9f:86:4f:1f:00:
10:36:1e:c5:18:02:a9:50:e8:9e:ad:81:d6:95:f4:da:1f:1d:
68:0f:7b:b4:06:bb:34:19:03:18:01:5d:37:8f:72:94:94:00:
16:50:b9:43:80:8e:39:d1:e8:9e:97:b4:92:4f:5a:94:51:88:
81:ed:f4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:59 2026 by rpki-client