
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json)
Hash identifier: rHscFjQx2WJwhC4u2ldKo2a3eLGE1UNzUpMW9Nm/Coc=
Subject key identifier: DB:2E:CD:69:7E:4B:F9:FA:6C:95:03:0B:90:50:E9:99:74:4E:59:B9
Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Certificate serial: 051F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
Manifest number: 0513
Signing time: Mon 22 Jun 2026 23:43:28 +0000
Manifest this update: Mon 22 Jun 2026 23:43:27 +0000
Manifest next update: Mon 29 Jun 2026 23:43:27 +0000
Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: tR4mGvTXOGR5sN1KdY4d8vcO/u5zozfDujRCdxgmoI8=)
2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: 9xagtFPDPDh7sP5RKvooGHMvmH3Edj6QzRlAg2sHVUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 23:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1311 (0x51f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Validity
Not Before: Jun 22 23:43:27 2026 GMT
Not After : Jun 29 23:43:27 2026 GMT
Subject: CN=6a39c8a0-34fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:64:81:24:a9:63:69:db:96:86:fe:b8:a1:
5e:18:72:9a:b8:5c:ae:82:09:7f:2d:2e:5f:96:81:
f5:f3:a7:7e:1a:12:f8:cd:e0:35:1c:dd:e1:aa:28:
cb:37:a4:06:ec:3a:eb:5f:25:e9:b6:90:09:e3:4a:
0f:93:04:e9:0d:14:c2:16:0b:94:a9:11:cc:15:fd:
34:c6:11:b4:c2:ef:2f:82:c9:9a:32:6b:aa:ab:e5:
49:ac:df:64:75:dd:2c:c2:4c:d3:b6:d9:cf:e4:e1:
d0:b2:ad:a4:50:f7:02:d2:52:fc:23:c5:b1:86:60:
ab:64:3a:2f:ca:f6:62:f3:1f:9f:0f:59:0a:1f:8a:
a6:99:27:62:32:c8:9f:ae:ba:ec:79:5c:71:42:9d:
a7:1d:76:a0:fb:1b:3f:06:77:79:d6:7b:53:b4:bb:
38:71:3b:91:c0:6b:96:af:f3:c0:4e:f1:94:b2:df:
68:1b:d6:93:42:89:5d:32:b3:9f:b1:24:95:46:58:
9c:16:33:7f:03:f1:66:f4:fe:e7:01:a7:cb:6c:83:
95:ba:96:6b:6b:22:8b:f6:97:37:7e:69:be:00:f8:
a6:9a:cd:da:8e:c9:93:b0:87:6b:d8:7d:44:26:a1:
20:af:86:af:c9:33:ee:42:52:5f:cc:30:13:d1:d4:
9f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2E:CD:69:7E:4B:F9:FA:6C:95:03:0B:90:50:E9:99:74:4E:59:B9
X509v3 Authority Key Identifier:
keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:35:74:09:4c:62:4f:10:70:3a:82:33:12:5b:b3:8b:04:44:
5b:f6:38:ac:d5:99:b4:de:30:e2:50:40:aa:0e:7c:d9:8b:e1:
11:00:67:ed:cb:7b:d9:c1:5c:9a:0e:b4:61:5f:8e:25:38:9d:
75:4e:6d:a8:ee:74:e2:62:ab:bf:ae:52:a9:8f:02:7e:10:0f:
49:bf:48:b4:d1:e4:b0:c6:47:08:32:5e:bc:0a:bc:eb:14:b3:
36:09:0b:aa:a2:31:44:6a:09:52:5c:ff:b0:31:70:b3:06:5a:
17:8b:63:84:b3:e2:28:e3:4c:af:24:be:79:d5:25:a7:3c:64:
bd:05:5b:71:d0:db:8b:f7:8e:e6:5d:6b:4b:59:30:2e:bb:5c:
15:3b:a4:99:9b:18:95:40:da:f3:a2:14:3c:74:75:48:40:4e:
90:88:6f:19:56:2f:d7:b6:3d:e9:6c:c7:76:58:1c:32:4f:b9:
0a:31:8e:42:de:e6:56:eb:4b:a4:c8:9d:35:84:92:7e:ad:46:
62:e8:18:be:7a:5e:4c:da:a1:14:34:92:20:ac:38:74:4b:7c:
29:39:c2:82:e8:23:cb:a7:8a:6a:5b:4e:95:7f:b5:70:bf:f1:
31:35:ae:31:f8:c0:e3:bb:cb:42:2f:14:82:3b:e7:da:0a:08:
ea:7c:c2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:16 2026 by rpki-client