
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft
File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json)
Hash identifier: 6vNHWFvEzGxV1hLaGPHAiTHj/H7KBrbtle9cydiXrHM=
Subject key identifier: 41:4D:82:88:BD:F6:EE:97:9E:98:A6:BB:2E:10:B1:2F:79:B1:2D:9C
Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97
Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297
Certificate serial: 0CB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft
Manifest number: 0CA5
Signing time: Wed 12 Aug 2026 18:23:57 +0000
Manifest this update: Wed 12 Aug 2026 18:23:56 +0000
Manifest next update: Wed 19 Aug 2026 18:23:56 +0000
Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: huZ3wVA7Tf7AgSiD1Jg+BBx4eg7CcPKqjUaDtahXAtA=)
2: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: xWH01miclcx5O31BfTSaGuwngoIny+30I/eW071OJcs=)
3: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: bTLlb/2u7iS5Ad2viXPUXPjVg32ujRVd0pzOx369Isg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl
rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 19 Aug 2026 18:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3253 (0xcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFA15, serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297
Validity
Not Before: Aug 12 18:23:56 2026 GMT
Not After : Aug 19 18:23:56 2026 GMT
Subject: CN=6a7cba3d-808d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:d7:95:97:53:67:e9:87:28:b4:46:ca:29:
2b:7a:34:fb:da:8f:e4:36:71:5f:ec:11:ce:8d:7f:
4a:dc:ed:27:01:bb:80:ce:0e:c3:15:8e:9d:b0:a5:
3b:2c:39:6a:75:29:01:b5:52:b2:c0:1f:90:e5:60:
8f:d6:05:17:51:0d:69:0c:b5:4b:bb:fd:4a:e3:55:
86:f0:46:63:c0:82:ec:e9:28:f0:aa:3e:0c:84:04:
86:73:00:c5:ff:be:30:1e:4f:97:bb:80:c5:94:b2:
f4:08:ed:1f:53:fd:0e:53:36:cb:2f:23:2c:7e:8c:
9c:89:09:9e:f8:06:aa:fa:ec:da:9c:36:4e:1f:d4:
fd:02:f1:ec:97:02:e7:a1:b1:07:b2:ff:9f:3f:6a:
64:25:4b:61:86:58:8c:18:ce:34:8b:3e:5b:a2:46:
0c:38:03:70:d5:35:fd:90:f3:19:db:a5:83:54:7c:
b8:58:1f:59:91:3f:db:76:44:d6:ca:81:48:25:74:
2a:a1:8c:5f:1e:23:68:9c:36:4b:b7:2d:73:60:a4:
28:a9:38:8f:06:8b:30:57:ba:fa:39:fd:0c:0e:5b:
63:bf:a5:65:06:a2:a9:0c:5d:40:8a:9d:0c:a7:3c:
1a:f4:12:f1:ee:0c:e0:c6:12:fc:e2:b0:d3:81:8a:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4D:82:88:BD:F6:EE:97:9E:98:A6:BB:2E:10:B1:2F:79:B1:2D:9C
X509v3 Authority Key Identifier:
keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:3f:9b:14:77:02:e7:cb:a7:89:ff:1f:b5:0e:df:06:69:0f:
81:11:66:60:13:a4:31:07:e0:5d:a0:c4:09:95:46:0e:38:ec:
17:54:66:10:39:e9:ba:da:56:c9:c0:9d:0c:12:06:9f:05:09:
1f:d9:d1:37:00:6a:8a:37:51:cc:25:0c:af:e5:b6:f8:fa:10:
6a:87:2d:8d:16:8f:84:2f:04:cf:6f:dd:9f:65:2f:9b:e0:ad:
b9:86:e6:86:d7:8e:b2:77:c5:60:99:db:68:8b:8f:aa:25:ba:
ef:8d:2a:ab:39:f4:03:e3:81:04:e2:02:52:2b:27:9f:62:c8:
83:b4:99:11:39:a9:f4:d8:cd:66:10:d3:22:ad:c8:ca:13:8f:
8e:9e:bd:55:f3:27:c0:78:81:98:89:63:e8:04:c6:a4:a8:9a:
ab:78:fc:c6:3c:84:12:96:61:82:36:ad:87:83:99:0e:db:74:
54:4d:23:59:b9:cc:6e:a0:2b:65:0b:70:68:ef:59:ce:9f:e2:
5a:35:9a:06:92:8b:75:82:14:6a:ad:30:b2:a1:92:c8:10:1b:
db:84:1e:8d:f8:61:53:0a:43:db:00:72:02:48:3e:7a:15:5c:
3a:8b:37:30:ae:7e:12:f9:e4:01:a0:83:32:05:e3:87:8c:ed:
c8:5a:62:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:14:06 2026 by rpki-client