
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
File: hYu8kCwHf24DE67cSds25v7yNLI.mft (raw, json)
Hash identifier: m6gxlrW7IwEPK36hUWlSAj1tPjNdvF58mkK7WzDLzRE=
Subject key identifier: 5D:82:FA:42:56:C1:58:43:6D:18:34:24:3A:6A:E0:B9:4A:F4:14:9F
Authority key identifier: 85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
Certificate issuer: /CN=A91DE334/serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
Manifest number: 7A
Signing time: Wed 19 Aug 2026 08:29:12 +0000
Manifest this update: Wed 19 Aug 2026 08:29:11 +0000
Manifest next update: Wed 26 Aug 2026 08:29:11 +0000
Files and hashes: 1: hYu8kCwHf24DE67cSds25v7yNLI.crl (hash: StwRoEGc5dG4l3wSDO3tYtefvA0jgITzLWK2VTbet3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE334, serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Validity
Not Before: Aug 19 08:29:11 2026 GMT
Not After : Aug 26 08:29:11 2026 GMT
Subject: CN=6a856958-6674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:47:62:65:56:99:b7:c3:db:09:57:aa:48:4d:
40:15:b1:50:31:17:d1:72:07:02:a8:ab:71:b3:b6:
b9:40:44:99:a0:17:7d:da:45:40:7e:7d:64:55:cc:
1d:06:6e:93:56:b3:ae:4c:95:b3:e5:53:57:98:5f:
6e:50:4e:a4:ca:1e:a6:38:27:1f:5b:1c:51:bf:6c:
35:33:02:4b:f9:9f:00:c2:ee:b0:64:4b:30:22:8a:
17:6a:f5:0e:56:20:ca:ce:d7:fe:ae:bf:92:ff:a0:
c7:59:c5:0c:3d:ee:97:38:54:8c:fa:87:90:27:71:
ff:d2:4b:1e:81:ec:04:0e:67:00:d1:db:0e:f7:2f:
23:63:f6:ad:ff:58:8b:c9:1c:05:e7:68:12:93:a3:
84:7b:5f:9e:0e:db:71:55:1d:5c:34:2b:01:7e:67:
8b:cb:08:13:bf:f2:15:18:e3:0f:c0:ab:d7:9d:cb:
c7:e7:99:63:79:9e:17:e0:bd:d8:eb:85:28:54:80:
46:55:91:9c:88:86:d6:6d:81:95:23:01:cc:b3:cc:
de:51:86:80:48:c2:bc:fb:da:2e:55:19:f0:c1:3e:
ad:a2:e5:07:fc:40:60:9a:32:72:27:04:2e:a4:ac:
6f:9d:c0:0b:fc:fa:90:8b:45:02:9b:e4:eb:0f:5d:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:82:FA:42:56:C1:58:43:6D:18:34:24:3A:6A:E0:B9:4A:F4:14:9F
X509v3 Authority Key Identifier:
keyid:85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:56:18:a4:f3:d9:9d:84:95:81:ba:a9:22:d2:65:4b:1c:43:
68:81:62:f0:33:19:e3:62:ef:56:96:10:85:32:13:f3:7c:d7:
17:e0:f2:c6:51:4c:66:ea:fd:bf:c4:39:8f:2b:67:bf:7d:ec:
6b:31:13:b8:11:f6:a9:83:d9:3c:11:e4:96:11:df:d6:33:61:
2c:48:b5:56:01:7a:e3:2e:a6:83:05:74:74:ce:16:b1:8c:02:
b5:1e:fc:0d:83:43:71:d7:2b:c1:be:59:3c:f5:d0:03:c4:bb:
15:69:05:74:f7:55:5e:c2:2b:59:c7:4c:db:ca:71:3f:aa:3d:
9c:95:ce:49:db:e3:4c:09:bb:67:ad:bb:f2:96:04:aa:d2:b3:
92:d3:cb:cf:ae:f7:02:c8:83:07:8c:6d:98:33:8a:20:6b:59:
13:83:68:f3:2d:1b:e2:93:ba:d3:42:8f:cb:19:b0:4f:aa:0f:
e6:ed:dd:95:25:e3:2a:52:b7:9e:e3:32:79:69:f7:ac:cb:d6:
eb:5e:52:63:1f:33:91:39:54:b6:48:cc:ba:09:60:44:9a:8a:
5c:9b:c1:11:30:d1:c0:1f:a7:51:0b:9a:7f:a3:e4:a3:5b:c5:
bb:f0:6b:da:c6:81:40:2f:6d:a5:67:f8:46:db:0a:e5:72:56:
68:35:96:0d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RTMzNDExMC8GA1UEBRMoODU4QkJDOTAyQzA3N0Y2RTAzMTNBRURDNDlEQjM2RTZG
RUYyMzRCMjAeFw0yNjA4MTkwODI5MTFaFw0yNjA4MjYwODI5MTFaMBgxFjAUBgNV
BAMTDTZhODU2OTU4LTY2NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSR2JlVpm3w9sJV6pITUAVsVAxF9FyBwKoq3GztrlARJmgF33aRUB+fWRVzB0G
bpNWs65MlbPlU1eYX25QTqTKHqY4Jx9bHFG/bDUzAkv5nwDC7rBkSzAiihdq9Q5W
IMrO1/6uv5L/oMdZxQw97pc4VIz6h5Ancf/SSx6B7AQOZwDR2w73LyNj9q3/WIvJ
HAXnaBKTo4R7X54O23FVHVw0KwF+Z4vLCBO/8hUY4w/Aq9edy8fnmWN5nhfgvdjr
hShUgEZVkZyIhtZtgZUjAcyzzN5RhoBIwrz72i5VGfDBPq2i5Qf8QGCaMnInBC6k
rG+dwAv8+pCLRQKb5OsPXRCLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXYL6QlbB
WENtGDQkOmrguUr0FJ8wHwYDVR0jBBgwFoAUhYu8kCwHf24DE67cSds25v7yNLIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMzM0L0M1MTI2Q0NFRTU3
OTExRjA4MzZFRUFBMTQxNkY1NkJDL2hZdThrQ3dIZjI0REU2N2NTZHMyNXY3eU5M
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaFl1OGtDd0hmMjRERTY3Y1NkczI1djd5TkxJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF
MzM0L0M1MTI2Q0NFRTU3OTExRjA4MzZFRUFBMTQxNkY1NkJDL2hZdThrQ3dIZjI0
REU2N2NTZHMyNXY3eU5MSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBIVhik89mdhJWBuqki0mVLHENogWLwMxnjYu9WlhCFMhPzfNcX4PLGUUxm6v2/
xDmPK2e/fexrMRO4Efapg9k8EeSWEd/WM2EsSLVWAXrjLqaDBXR0zhaxjAK1HvwN
g0Nx1yvBvlk89dADxLsVaQV091VewitZx0zbynE/qj2clc5J2+NMCbtnrbvylgSq
0rOS08vPrvcCyIMHjG2YM4oga1kTg2jzLRvik7rTQo/LGbBPqg/m7d2VJeMqUree
4zJ5afesy9brXlJjHzOROVS2SMy6CWBEmopcm8ERMNHAH6dRC5p/o+SjW8W78Gva
xoFAL22lZ/hG2wrlclZoNZYN
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:01 2026 by rpki-client