
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json)
Hash identifier: SDR+8lDhjd1dG+GCU7lMC7TayBsUApFpo0H9liEPE34=
Subject key identifier: EB:5C:0B:79:AD:FA:2A:DC:28:1A:F5:FE:EB:64:DA:2B:77:76:15:17
Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Certificate serial: 0554
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
Manifest number: 0548
Signing time: Sun 04 Oct 2026 23:30:37 +0000
Manifest this update: Sun 04 Oct 2026 23:30:36 +0000
Manifest next update: Sun 11 Oct 2026 23:30:36 +0000
Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: 4cIXShH20RoPj6fDKLxnp5SqfhRmvAld/vdTySa5SDw=)
2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: 9xagtFPDPDh7sP5RKvooGHMvmH3Edj6QzRlAg2sHVUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1364 (0x554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Validity
Not Before: Oct 4 23:30:36 2026 GMT
Not After : Oct 11 23:30:36 2026 GMT
Subject: CN=6ac2e19d-4675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:33:fe:ed:2f:9f:c0:a3:2a:5f:d1:81:51:
1d:0b:36:5e:c5:6d:65:17:14:64:17:0b:e0:31:5f:
fa:66:b1:90:21:38:9f:76:dc:8d:bb:6b:b7:90:8b:
f7:92:43:f7:7d:09:3c:a2:70:27:4c:17:63:c3:5d:
47:5a:87:57:ff:d4:fd:04:e0:0a:68:dd:a1:12:c6:
36:92:fe:da:56:a3:15:bb:95:88:b9:4b:f6:3d:87:
57:6b:c4:f9:8f:9c:c0:9c:1b:59:d2:10:97:63:72:
b6:b6:fd:a9:8d:6e:82:fa:61:72:bd:d7:ac:ab:94:
f2:22:0d:11:37:8c:4a:db:38:78:90:25:3f:74:25:
d2:90:bf:49:46:56:35:29:ab:15:db:1b:4f:db:74:
3c:ee:ec:78:fa:5e:6c:ec:19:e9:2c:85:39:2a:62:
d3:f0:b2:d4:e6:c8:0c:90:55:a4:e8:d3:8e:a4:3e:
bd:14:78:03:2a:52:f3:6a:54:ec:cb:03:7b:08:1a:
82:22:b5:79:d6:12:64:04:a2:54:67:81:60:8f:27:
38:26:ae:64:66:e3:cf:c7:2b:54:da:77:c7:f7:29:
63:58:d0:66:15:aa:e9:86:92:42:3f:1c:fe:27:b5:
4c:94:e9:ac:66:ba:d8:b4:70:cb:81:29:0f:0a:9e:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5C:0B:79:AD:FA:2A:DC:28:1A:F5:FE:EB:64:DA:2B:77:76:15:17
X509v3 Authority Key Identifier:
keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6a:22:a5:7f:69:24:ed:d4:90:a4:70:22:f5:39:bb:bf:c0:
d4:08:bc:63:89:b2:9f:11:45:ed:5f:d4:da:87:d3:ab:79:e6:
96:9a:03:6e:9b:cf:ef:23:b1:49:77:0f:c5:35:44:93:90:47:
f4:20:23:b2:bf:8e:b5:aa:ca:be:71:17:0e:a8:a6:fd:26:e6:
7e:e1:fe:19:53:7a:39:99:cd:c2:5c:af:6f:f4:f8:fb:12:28:
94:30:b8:77:34:23:fc:8b:c6:b6:cb:2e:c9:44:36:e4:09:3b:
c8:69:33:ac:d6:e1:5a:50:6f:be:25:b4:e7:dc:97:08:71:bc:
be:06:0e:f7:76:5e:e5:06:fe:61:77:c0:f4:ac:5f:e7:fc:46:
92:03:86:33:a4:32:ac:5c:68:1f:c3:59:1c:84:e0:e0:6a:dc:
4a:86:64:8e:69:af:f6:83:55:95:a5:33:21:c3:c9:58:0b:90:
77:3e:b3:a1:db:bb:5b:58:21:a9:bd:27:75:8e:8e:a9:9f:9e:
8c:51:d5:4f:74:48:73:b0:a4:9c:cc:cf:91:8d:44:62:f7:be:
da:75:9d:9d:4c:0b:a5:61:15:80:ae:4d:07:90:4d:b2:f7:8a:
d2:12:24:b4:1c:fe:8c:77:55:8d:20:1d:0c:6b:9f:e1:4d:f1:
0f:98:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:04:09 2026 by rpki-client