
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
File: hETqrJKViOiWt8WR9g40MEKw37w.mft (raw, json)
Hash identifier: c6VMI7qf8UMm1t63BD58YptcsvEgyn2KJQ1WPJcGzbA=
Subject key identifier: D3:69:64:5B:BE:E6:B8:41:65:1B:ED:0A:80:6E:9A:2D:E8:FA:3D:A3
Authority key identifier: 84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC
Certificate issuer: /CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC
Certificate serial: 0460
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
Manifest number: 0458
Signing time: Wed 13 May 2026 00:18:15 +0000
Manifest this update: Wed 13 May 2026 00:18:15 +0000
Manifest next update: Wed 20 May 2026 00:18:15 +0000
Files and hashes: 1: hETqrJKViOiWt8WR9g40MEKw37w.crl (hash: InbA0ELhVv2BCpte0IHtEg13fv50jjQ0eUdsehptw2k=)
2: C8899170FB7211F08F8762E74F6F56BC.roa (hash: ctiS/J2TVY8JJKVzXFhRdcRDN1f1H0n8TDJvzQMZJ5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl
rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:18:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1120 (0x460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114431, serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC
Validity
Not Before: May 13 00:18:15 2026 GMT
Not After : May 20 00:18:15 2026 GMT
Subject: CN=6a03c347-2f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:94:ed:9a:bc:b4:27:ff:6d:45:4e:6f:0c:
1a:df:b0:9e:76:a4:82:26:d1:26:53:83:57:b7:46:
67:86:5d:e8:06:3d:33:10:6c:ef:95:bf:a4:55:52:
e9:13:ae:b2:c4:8a:0b:b2:d1:e9:f5:b3:09:bc:9b:
69:86:27:c7:4a:ec:89:6e:5b:cd:27:07:29:fa:b1:
cb:38:da:ac:5e:5d:09:98:46:c6:c7:bf:91:7b:fc:
d4:06:19:f2:22:fc:d7:d1:78:95:05:5e:2a:33:27:
98:4b:48:15:d5:2b:d5:84:ec:cb:a9:df:21:78:50:
27:dd:c1:ca:71:1e:a8:f5:f3:2f:71:20:11:db:fe:
4a:43:44:35:6c:4e:fc:fd:fe:cc:d1:98:ce:96:2c:
f9:5b:b7:2c:2b:08:a6:26:cb:1f:f3:7d:aa:5c:76:
40:a1:63:68:e8:7a:8d:43:f1:72:20:cc:a1:0c:7b:
53:4f:c4:4c:c7:fb:b3:4f:cd:e3:08:d2:24:79:de:
84:e8:55:41:56:74:d9:2b:38:4b:2c:3a:33:ea:3f:
dc:90:8c:64:fb:80:9b:e9:3e:69:dd:4a:c7:79:a1:
ac:0c:52:45:99:71:88:26:4b:04:86:99:a2:26:cf:
ad:8e:6d:de:83:44:a3:e2:b0:76:5a:d3:e1:1e:c6:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:69:64:5B:BE:E6:B8:41:65:1B:ED:0A:80:6E:9A:2D:E8:FA:3D:A3
X509v3 Authority Key Identifier:
keyid:84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:2b:8e:02:6e:75:02:18:d0:55:d4:14:6e:a6:e5:13:63:1b:
81:5d:4e:90:bc:3a:49:fc:b5:1c:01:d9:e6:2c:f5:aa:9f:77:
22:76:cb:26:f7:e8:84:79:15:eb:1f:f5:14:4d:42:25:95:d6:
c8:1b:a9:bc:07:09:fd:06:a1:62:3c:6a:99:07:ca:5c:f6:eb:
b0:a3:0b:29:0f:44:e6:b7:8a:72:07:8b:62:a0:d6:6a:6d:3d:
2e:b3:51:b9:5a:fe:57:0c:39:b6:05:b1:e3:6b:b8:60:b3:41:
35:b9:72:96:45:3c:c0:d1:ee:69:38:3d:11:7f:e9:45:19:9f:
5a:2d:ce:bc:c1:a0:3e:04:64:24:2b:f5:0c:38:8e:68:57:f7:
e1:a6:5c:b1:32:b0:6f:f4:38:d2:b3:04:6d:22:05:36:2a:02:
2c:0d:80:99:1b:f2:b3:f3:83:6c:e0:f7:8a:84:d5:4e:9b:a1:
af:fe:eb:89:5c:4b:02:1e:4b:84:64:1a:7a:c8:9a:11:6f:ae:
38:d2:c0:cd:95:7c:4d:4a:ab:67:cb:af:c0:bb:13:d3:11:79:
d2:5d:4e:7e:97:3d:05:7b:08:49:62:4f:4b:80:c0:59:66:c0:
14:33:52:f4:6a:3b:79:1d:39:98:0e:79:5b:d9:b8:d2:d7:69:
b1:48:44:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ0MzExMTAvBgNVBAUTKDg0NDRFQUFDOTI5NTg4RTg5NkI3QzU5MUY2MEUzNDMw
NDJCMERGQkMwHhcNMjYwNTEzMDAxODE1WhcNMjYwNTIwMDAxODE1WjAYMRYwFAYD
VQQDEw02YTAzYzM0Ny0yZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzrCU7Zq8tCf/bUVObwwa37CedqSCJtEmU4NXt0Znhl3oBj0zEGzvlb+kVVLp
E66yxIoLstHp9bMJvJtphifHSuyJblvNJwcp+rHLONqsXl0JmEbGx7+Re/zUBhny
IvzX0XiVBV4qMyeYS0gV1SvVhOzLqd8heFAn3cHKcR6o9fMvcSAR2/5KQ0Q1bE78
/f7M0ZjOliz5W7csKwimJssf832qXHZAoWNo6HqNQ/FyIMyhDHtTT8RMx/uzT83j
CNIked6E6FVBVnTZKzhLLDoz6j/ckIxk+4Cb6T5p3UrHeaGsDFJFmXGIJksEhpmi
Js+tjm3eg0Sj4rB2WtPhHsbwBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNNpZFu+
5rhBZRvtCoBumi3o+j2jMB8GA1UdIwQYMBaAFIRE6qySlYjolrfFkfYONDBCsN+8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDQzMS8xMjI0N0UyNDlB
NTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlPaVd0OFdSOWc0ME1FS3cz
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hFVHFySktWaU9pV3Q4V1I5ZzQwTUVLdzM3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDQzMS8xMjI0N0UyNDlBNTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlP
aVd0OFdSOWc0ME1FS3czN3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhyuOAm51AhjQVdQUbqblE2MbgV1OkLw6Sfy1HAHZ5iz1qp93InbLJvfohHkV
6x/1FE1CJZXWyBupvAcJ/QahYjxqmQfKXPbrsKMLKQ9E5reKcgeLYqDWam09LrNR
uVr+Vww5tgWx42u4YLNBNblylkU8wNHuaTg9EX/pRRmfWi3OvMGgPgRkJCv1DDiO
aFf34aZcsTKwb/Q40rMEbSIFNioCLA2AmRvys/ODbOD3ioTVTpuhr/7riVxLAh5L
hGQaesiaEW+uONLAzZV8TUqrZ8uvwLsT0xF50l1Ofpc9BXsISWJPS4DAWWbAFDNS
9Go7eR05mA55W9m40tdpsUhELg==
-----END CERTIFICATE-----
Generated at Wed May 13 13:28:26 2026 by rpki-client