
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json)
Hash identifier: 1C5J97URi1OiAsFrPoswGAiMZe+DskmxXQttJUaBABE=
Subject key identifier: A3:AB:23:C2:A6:FF:8D:C5:1F:47:27:69:23:DE:88:08:4C:B1:33:59
Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Certificate serial: 053C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
Manifest number: 0530
Signing time: Tue 18 Aug 2026 23:55:21 +0000
Manifest this update: Tue 18 Aug 2026 23:55:20 +0000
Manifest next update: Tue 25 Aug 2026 23:55:20 +0000
Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: i8haAPIfl6QoiPhGBjZc0DlungYdAc/aXNCh2q5cz4E=)
2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: 9xagtFPDPDh7sP5RKvooGHMvmH3Edj6QzRlAg2sHVUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1340 (0x53c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Validity
Not Before: Aug 18 23:55:20 2026 GMT
Not After : Aug 25 23:55:20 2026 GMT
Subject: CN=6a84f0e9-526e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:97:98:a7:53:2e:98:23:37:91:d4:9f:52:
6e:2c:14:2c:ec:2d:07:d9:36:eb:9f:f2:15:3f:c6:
c6:88:b8:3b:78:4f:61:67:d0:b7:e4:40:51:b9:e6:
4d:77:8f:e6:ad:98:04:dd:c6:d2:c4:cb:77:fd:d3:
8a:fd:2d:73:33:b8:6d:e1:2b:41:24:6d:7c:67:f6:
46:8b:ac:50:b4:3b:83:8a:c2:a2:ce:62:af:7a:9c:
e9:42:eb:41:7b:ff:04:17:f2:c2:ba:fa:40:d8:96:
cf:4a:d6:9c:38:dd:70:1e:01:f6:4c:73:b7:02:86:
07:7e:d7:1f:08:f1:a8:bb:33:90:4a:62:9d:a3:96:
e4:44:0d:47:e7:6c:93:ad:b3:d8:82:f6:47:4e:ba:
d0:0f:2c:3c:55:a9:77:7b:98:51:16:42:dd:45:63:
53:ea:ce:3c:19:2f:6d:db:3e:53:5e:dd:c2:1c:5c:
fa:2e:87:06:ef:22:7c:ce:9c:6a:98:6d:ca:2e:58:
00:6c:78:cf:55:e0:6c:ef:29:5f:b5:9d:22:72:cf:
ff:c3:56:82:d7:a0:9d:10:a9:6d:48:25:67:cb:36:
95:20:8d:89:db:cb:97:02:38:9d:6a:75:59:1d:af:
39:5b:65:fa:d0:5e:f7:07:84:8e:41:d4:30:2e:bf:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AB:23:C2:A6:FF:8D:C5:1F:47:27:69:23:DE:88:08:4C:B1:33:59
X509v3 Authority Key Identifier:
keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:a1:7c:b2:91:93:2e:76:8b:ea:e3:cd:41:fe:1f:e4:b3:d6:
c6:3e:76:b0:4f:21:b4:80:e6:91:ee:9e:43:1f:c3:d5:7c:ff:
0b:c2:37:a0:47:7c:a5:4a:f3:49:ee:eb:4e:b9:8d:1a:70:30:
6d:71:bf:b2:79:f8:3e:fa:ab:e3:f4:2d:44:7a:ff:fd:11:b6:
bc:54:27:0b:f9:2e:d0:05:22:44:e4:93:c7:ee:82:1a:c9:0b:
0f:ab:1b:f0:f6:63:48:84:d4:fa:85:5c:7b:86:f0:b1:0a:ab:
c1:32:0f:5f:80:1e:84:7a:79:6d:67:94:04:5c:da:1a:e9:cf:
53:7a:e5:3d:94:21:36:e2:a0:2a:fc:12:d2:7a:e0:c1:85:a6:
eb:c8:3c:d9:fb:ba:73:95:58:d2:e7:79:97:11:41:f0:f2:8d:
b5:e2:68:0c:93:00:33:9a:0b:c7:62:2b:60:29:82:94:7a:9c:
3e:30:53:ca:68:06:7e:35:56:c3:1d:b0:26:6b:d1:30:5c:67:
40:56:7b:19:19:3c:5f:52:4b:7b:95:b9:68:21:80:92:f0:f6:
19:83:95:1d:9c:9d:a9:03:26:cf:bc:3f:09:27:02:72:6f:6c:
fc:e3:e1:9c:e5:9f:f0:9e:d7:8a:b9:ab:63:83:2d:92:39:b5:
d6:f6:7c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:53 2026 by rpki-client