
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json)
Hash identifier: nBszMKS1H6y6j9oJGgNA8mXW7WKVj+AIoYT4rEkoIPw=
Subject key identifier: 6E:AD:F3:6F:88:B4:88:12:85:11:65:06:A8:8C:0E:21:F4:02:8F:0A
Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Certificate serial: 04F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
Manifest number: 04E9
Signing time: Sat 04 Apr 2026 23:33:58 +0000
Manifest this update: Sat 04 Apr 2026 23:33:58 +0000
Manifest next update: Sat 11 Apr 2026 23:33:58 +0000
Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: JmIG/MKmFN0mLzmvIF8NtlEjZqCzEBHcscLpzDWoEPA=)
2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: n648Yvz53rsJ1dG0NtAeKrqioIBy25td2h9ZGC5vq8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1268 (0x4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Validity
Not Before: Apr 4 23:33:58 2026 GMT
Not After : Apr 11 23:33:58 2026 GMT
Subject: CN=69d19fe6-edf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1d:7c:da:3f:c2:50:88:22:6a:e8:37:cb:00:
da:ef:18:0e:0c:52:75:d4:f2:9a:df:5b:5d:6c:33:
c0:02:c1:20:1c:90:f7:be:3b:12:80:73:91:e4:5a:
a2:bd:64:2c:16:b3:ad:e7:85:74:51:e3:54:d1:46:
fe:84:35:f9:94:43:c1:3a:bd:46:c6:85:58:fa:47:
e3:60:75:70:81:d4:5f:46:a5:d2:87:a3:25:81:59:
ba:93:2e:91:92:98:14:0b:30:34:11:15:cc:39:cf:
ca:c1:79:28:ce:9b:5a:f7:29:39:b9:e3:6f:9b:61:
1c:62:d4:f1:17:7a:0e:d0:0a:b5:10:9e:ef:03:ef:
46:ba:d8:af:4d:b1:61:2b:47:87:df:4a:43:51:33:
2c:1e:82:8d:47:fe:d0:46:c7:56:fc:52:c3:fb:c3:
11:80:9f:76:8e:b6:d7:ef:23:5a:34:c6:c5:40:33:
5c:52:84:a8:04:8e:76:39:f6:a5:1a:34:47:d8:41:
f8:72:bf:99:59:c1:a1:26:9a:69:fb:08:b9:36:94:
de:69:09:a8:e9:ba:8c:53:8c:94:a2:ad:83:59:d5:
5a:f7:80:0f:b4:c8:85:21:12:13:f1:35:c1:fb:0e:
95:1a:d3:55:77:4f:a7:ab:98:fb:d0:e2:d9:d7:94:
1c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AD:F3:6F:88:B4:88:12:85:11:65:06:A8:8C:0E:21:F4:02:8F:0A
X509v3 Authority Key Identifier:
keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:2f:b6:52:ef:3f:77:80:1b:ec:fa:1c:81:c2:a4:37:50:8a:
26:51:f0:49:c8:d9:c4:50:2b:c7:bc:62:fd:56:4a:84:ee:b4:
d0:b4:23:d1:e3:b2:a9:7a:90:c7:b7:fb:4f:12:8f:b9:3d:51:
f9:0f:22:dc:a9:4e:10:5a:ef:7f:1e:f3:7b:fa:09:94:59:7e:
0a:9c:6c:63:bd:93:cb:ff:6f:df:04:27:80:fd:72:2c:d7:ae:
16:18:6b:97:19:68:e9:ff:e8:ff:42:0c:ca:92:9e:33:07:03:
85:b1:07:e6:e2:15:04:0e:fb:ee:b2:69:be:4b:54:95:f3:59:
b6:1c:c2:f5:17:b2:21:52:06:38:05:01:61:98:5e:e0:0e:e5:
f1:e4:93:73:9c:76:a1:4d:31:72:08:af:00:2f:db:2a:05:0c:
f8:de:44:ae:dd:d6:68:4a:c2:7f:b2:df:9c:15:a0:84:77:9b:
be:72:8a:d9:cb:de:85:92:a1:94:f8:3f:fb:03:3f:ba:6a:57:
50:40:52:bf:03:fb:87:80:b6:33:be:ce:80:a6:bd:8b:dd:12:
5b:7d:db:3e:18:71:36:49:58:69:b5:00:78:29:ef:1e:b8:06:
e2:4d:83:2f:60:f0:eb:28:6f:6f:b3:15:63:86:bc:2f:89:c1:
f2:7e:94:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRCQjMxMTAvBgNVBAUTKEFDN0M5RTcxODIyQzA1NjE4NTE4NjQ1M0Y5NjBCMkMx
RThDQTk0RTMwHhcNMjYwNDA0MjMzMzU4WhcNMjYwNDExMjMzMzU4WjAYMRYwFAYD
VQQDEw02OWQxOWZlNi1lZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiB182j/CUIgiaug3ywDa7xgODFJ11PKa31tdbDPAAsEgHJD3vjsSgHOR5Fqi
vWQsFrOt54V0UeNU0Ub+hDX5lEPBOr1GxoVY+kfjYHVwgdRfRqXSh6MlgVm6ky6R
kpgUCzA0ERXMOc/KwXkozpta9yk5ueNvm2EcYtTxF3oO0Aq1EJ7vA+9GutivTbFh
K0eH30pDUTMsHoKNR/7QRsdW/FLD+8MRgJ92jrbX7yNaNMbFQDNcUoSoBI52Ofal
GjRH2EH4cr+ZWcGhJppp+wi5NpTeaQmo6bqMU4yUoq2DWdVa94APtMiFIRIT8TXB
+w6VGtNVd0+nq5j70OLZ15QcswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG6t82+I
tIgShRFlBqiMDiH0Ao8KMB8GA1UdIwQYMBaAFKx8nnGCLAVhhRhkU/lgssHoypTj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEJCMy9BRUE4NzNFQzVC
QzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JXR0ZHR1JULVdDeXdlakts
T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JIeWVjWUlzQldHRkdHUlQtV0N5d2VqS2xPTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NEJCMy9BRUE4NzNFQzVCQzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JX
R0ZHR1JULVdDeXdlaktsT00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARy+2Uu8/d4Ab7PocgcKkN1CKJlHwScjZxFArx7xi/VZKhO600LQj0eOyqXqQ
x7f7TxKPuT1R+Q8i3KlOEFrvfx7ze/oJlFl+CpxsY72Ty/9v3wQngP1yLNeuFhhr
lxlo6f/o/0IMypKeMwcDhbEH5uIVBA777rJpvktUlfNZthzC9ReyIVIGOAUBYZhe
4A7l8eSTc5x2oU0xcgivAC/bKgUM+N5Ert3WaErCf7LfnBWghHebvnKK2cvehZKh
lPg/+wM/umpXUEBSvwP7h4C2M77OgKa9i90SW33bPhhxNklYabUAeCnvHrgG4k2D
L2Dw6yhvb7MVY4a8L4nB8n6U1A==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:47:29 2026 by rpki-client