
$ rpki-client -vvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
File: htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json)
Hash identifier: hNigDgVwy8tERoOihLtzJI0UbcFtHvbxWbGZjf1O3Uw=
Subject key identifier: 27:2E:05:CC:97:FE:52:03:B8:08:9C:56:1C:AC:64:33:03:23:A6:0D
Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
Certificate issuer: /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
Manifest number: 01B6
Signing time: Wed 25 Mar 2026 03:17:16 +0000
Manifest this update: Wed 25 Mar 2026 03:17:16 +0000
Manifest next update: Wed 01 Apr 2026 03:17:16 +0000
Files and hashes: 1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: Gd3wOmCQMZQLE7x0LeoYHgYaZD2ujak8DeDJMa5BraA=)
2: 1B000B60A70A11EE9D90E754C4F9AE02.roa (hash: JehbpvK4Dpb6wXVXNKOP9H34UDru94u30nPkff7PtWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:17:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911933B, serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Validity
Not Before: Mar 25 03:17:16 2026 GMT
Not After : Apr 1 03:17:16 2026 GMT
Subject: CN=69c353bc-857c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:d3:70:c9:9e:22:a4:e0:04:dd:4a:62:4c:
02:58:d4:03:38:19:95:e9:0f:5f:b9:48:54:4d:07:
a8:2c:9c:3e:49:4c:6f:30:f7:33:2a:c9:63:e8:38:
fb:3d:d8:1b:fc:56:18:76:7a:1d:ef:b4:cc:2a:92:
3b:70:a0:c3:49:24:35:d6:76:b6:95:b8:22:28:c6:
80:2b:8b:bb:89:45:8f:72:a9:bf:3b:7e:f6:bd:25:
03:60:ae:9e:69:c9:42:8b:ce:d7:3e:f6:11:43:91:
77:ea:f1:86:5d:3c:4f:b6:0f:f8:80:43:f5:86:bc:
da:e8:c4:0b:06:49:d4:97:40:db:75:13:cd:43:00:
5c:88:13:da:c0:df:bc:2e:7b:f8:fc:06:52:b6:7b:
70:1d:89:a2:5b:c1:ac:a6:ce:35:ca:48:c5:f1:d5:
0e:c1:ae:27:83:75:9d:eb:8e:59:58:ce:21:10:8a:
16:bf:55:04:9f:b9:8a:94:ac:ab:9f:56:b9:0f:6a:
f8:c1:56:08:2d:67:18:58:ac:d3:3a:e5:5c:4e:8c:
68:e1:36:aa:f4:48:e3:e9:86:6a:52:a9:35:bf:ab:
6c:3b:77:ee:ba:64:67:9a:f8:4b:54:08:24:88:da:
1c:ac:69:a2:87:f4:4a:c4:c4:7d:9d:7c:54:4c:d1:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:05:CC:97:FE:52:03:B8:08:9C:56:1C:AC:64:33:03:23:A6:0D
X509v3 Authority Key Identifier:
keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:e4:0e:e8:bb:88:48:8a:ca:de:88:80:94:b7:aa:96:54:b8:
60:2f:ee:65:a3:4b:b5:0f:f7:f2:4d:bf:cf:09:2f:ca:cf:68:
e7:90:b0:0c:17:0a:d1:f0:d0:45:ea:c2:d3:68:96:84:ec:db:
cc:8a:3a:50:b9:97:c7:54:65:d2:45:d1:60:67:96:99:13:e9:
ab:be:b1:a6:77:81:fa:56:db:b0:f2:f5:33:29:40:a9:74:66:
08:ae:ca:46:d4:37:19:e5:f6:9a:47:19:ad:61:42:d8:60:aa:
c3:3e:75:72:01:e3:ae:79:bb:e8:2f:ad:ad:b0:82:73:79:d3:
60:55:69:85:24:54:2a:18:cc:b4:22:2f:be:34:91:d5:9c:21:
d6:c3:13:ff:67:09:c5:70:41:e7:e6:21:6d:d8:b4:63:a4:a3:
76:9a:37:c4:2c:ea:05:d3:94:2e:2b:26:18:45:42:68:a8:46:
ce:0b:5a:32:54:a5:77:00:14:a4:04:f6:df:13:3c:34:50:79:
37:0f:31:d6:86:c4:9b:fe:d7:2a:c4:6a:68:2a:b7:af:ea:63:
3a:da:54:f7:34:8f:c9:c9:07:bd:3b:57:ce:22:05:32:1c:7a:
81:26:36:d0:23:4f:76:08:f6:56:68:cb:70:6d:b4:af:16:72:
0a:e6:c6:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkzM0IxMTAvBgNVBAUTKDg2REExOTAwRTYxNTBDQkQ5Q0Q4MTVBQzY3REM1M0E1
RTZEM0MwMjcwHhcNMjYwMzI1MDMxNzE2WhcNMjYwNDAxMDMxNzE2WjAYMRYwFAYD
VQQDEw02OWMzNTNiYy04NTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoIfTcMmeIqTgBN1KYkwCWNQDOBmV6Q9fuUhUTQeoLJw+SUxvMPczKslj6Dj7
Pdgb/FYYdnod77TMKpI7cKDDSSQ11na2lbgiKMaAK4u7iUWPcqm/O372vSUDYK6e
aclCi87XPvYRQ5F36vGGXTxPtg/4gEP1hrza6MQLBknUl0DbdRPNQwBciBPawN+8
Lnv4/AZStntwHYmiW8Gsps41ykjF8dUOwa4ng3Wd645ZWM4hEIoWv1UEn7mKlKyr
n1a5D2r4wVYILWcYWKzTOuVcToxo4Taq9Ejj6YZqUqk1v6tsO3fuumRnmvhLVAgk
iNocrGmih/RKxMR9nXxUTNFcswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCcuBcyX
/lIDuAicVhysZDMDI6YNMB8GA1UdIwQYMBaAFIbaGQDmFQy9nNgVrGfcU6Xm08An
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzQi9FOThBMTEzRTky
NjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRMMmMyQldzWjl4VHBlYlR3
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h0b1pBT1lWREwyYzJCV3NaOXhUcGViVHdDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTMzQi9FOThBMTEzRTkyNjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRM
MmMyQldzWjl4VHBlYlR3Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVuQO6LuISIrK3oiAlLeqllS4YC/uZaNLtQ/38k2/zwkvys9o55CwDBcK0fDQ
RerC02iWhOzbzIo6ULmXx1Rl0kXRYGeWmRPpq76xpneB+lbbsPL1MylAqXRmCK7K
RtQ3GeX2mkcZrWFC2GCqwz51cgHjrnm76C+trbCCc3nTYFVphSRUKhjMtCIvvjSR
1Zwh1sMT/2cJxXBB5+Yhbdi0Y6Sjdpo3xCzqBdOULismGEVCaKhGzgtaMlSldwAU
pAT23xM8NFB5Nw8x1obEm/7XKsRqaCq3r+pjOtpU9zSPyckHvTtXziIFMhx6gSY2
0CNPdgj2VmjLcG20rxZyCubG2A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:55 2026 by rpki-client