
$ rpki-client -vvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
File: htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json)
Hash identifier: 4ZKjJiBKOeQpDvM8Z1BbPxNKNuyTFXWEg9hVKWSoxT0=
Subject key identifier: E1:7A:0E:98:E5:0A:1C:B2:97:EF:87:39:A7:B4:F2:15:8F:F4:4F:03
Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
Certificate issuer: /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
Manifest number: 01D1
Signing time: Mon 11 May 2026 03:45:24 +0000
Manifest this update: Mon 11 May 2026 03:45:23 +0000
Manifest next update: Mon 18 May 2026 03:45:23 +0000
Files and hashes: 1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: 7p7TTGhzKIwEBqeRF/kTkEsclBbDoVlF40jQW2hKHDo=)
2: F9EE01A842E211F1B650BCD08E833773.roa (hash: 2XaqgQvJvdCsnon/kkAwU+ckm99qA9tybA5kJKKFgfM=)
3: 385B3E3A42EB11F187C800F790833773.roa (hash: lsXYrcjPbnHgiNpDbl0Ybrr03F7tffMHJYTiyEAODzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911933B, serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Validity
Not Before: May 11 03:45:23 2026 GMT
Not After : May 18 03:45:23 2026 GMT
Subject: CN=6a0150d4-2d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:12:0c:a9:cb:50:d0:fc:7f:a2:b9:d9:16:
ba:02:6a:16:17:79:f0:1b:08:21:eb:8a:55:57:44:
52:52:38:a7:23:c1:e6:d0:1f:f1:5f:3d:f3:38:62:
13:16:f6:d5:a6:0f:de:ca:6b:99:10:af:03:ef:39:
86:d4:2c:d0:84:25:8a:ec:23:22:d7:64:1d:cd:53:
39:02:2e:31:8e:2e:e8:fb:65:0d:a6:78:97:bc:6b:
c6:53:6f:f2:14:04:7e:b1:53:cd:f4:ae:ee:f8:7c:
09:20:4b:9f:91:a3:b0:19:db:c5:0a:3a:fe:90:75:
fc:72:a7:b0:f6:d3:56:08:04:a1:cc:2d:a8:ce:49:
fd:27:c2:ee:0c:4c:27:61:50:23:de:b6:76:c8:96:
24:3b:ee:3b:6e:51:de:57:32:a3:22:e7:97:c1:f8:
b1:a3:2b:05:38:d5:28:55:93:40:24:1d:ec:61:fe:
54:df:a0:4d:02:14:45:96:59:aa:73:e6:e7:5e:c8:
db:7e:ab:57:46:4b:73:81:1f:b1:81:d0:a1:ee:d2:
72:0c:2c:72:0e:aa:05:2d:89:5c:38:e9:ba:7a:30:
e8:c2:60:1f:a0:e7:d4:ac:56:df:f5:6b:83:82:74:
98:a4:93:4b:26:74:ac:47:34:ab:fd:cb:6a:b0:6a:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7A:0E:98:E5:0A:1C:B2:97:EF:87:39:A7:B4:F2:15:8F:F4:4F:03
X509v3 Authority Key Identifier:
keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:c6:da:82:45:3f:ed:e9:1e:68:c2:af:74:33:7e:34:0f:ea:
99:79:6d:b7:c9:97:05:46:4c:5a:fd:18:5a:04:a2:f7:35:47:
7f:8b:ee:da:2e:e4:36:d7:19:ac:53:91:31:c6:1d:10:69:ba:
06:1a:47:f8:f7:48:8b:bd:f8:6c:07:d6:c1:26:33:60:af:a0:
d6:96:18:a6:21:5e:55:6d:4f:b1:9e:02:c8:7d:4d:a5:2a:81:
db:ae:4a:80:fe:b5:a2:ba:fc:e9:13:fa:80:b2:a1:9d:cf:05:
6b:d6:b3:53:22:78:38:02:70:99:79:b0:2c:e2:0a:93:76:92:
58:27:4e:b5:52:d6:b9:52:b7:ea:65:ee:4d:de:41:e1:0e:b1:
24:b3:7b:57:7f:60:60:8a:fc:81:fb:b4:d2:23:be:a5:94:59:
87:74:e3:9e:97:0e:e9:dd:37:c5:09:38:9f:53:df:db:be:ae:
9e:4b:1d:4b:69:15:7a:1a:a4:ef:1e:3d:d6:4a:35:c4:bd:0f:
17:ae:6a:a1:65:5d:3d:77:c8:6b:85:10:0f:3d:57:22:0e:98:
a9:fb:8f:9d:26:72:be:3f:e4:08:60:69:07:f0:3d:46:37:b0:
77:07:fa:42:01:e8:eb:9d:31:2c:5f:8c:34:8e:4e:f0:1e:2e:
85:e7:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:54:09 2026 by rpki-client