
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier: N/14YKZhMQgSUfq7e53wl2YbCWUgfe3Bi2k1NBf+r/4=
Subject key identifier: 0D:56:4B:C3:3F:A0:09:79:42:F1:A0:76:41:25:CA:CC:28:5D:08:72
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 04D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number: 042B
Signing time: Sun 15 Nov 2026 00:13:16 +0000
Manifest this update: Sun 15 Nov 2026 00:13:15 +0000
Manifest next update: Sun 22 Nov 2026 00:13:15 +0000
Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: SRIypQ8ZqBH6xy95ylO2nJvHjOCrh74IZ7PHucnT53c=)
2: EA792108690E11EF9396CC48C4F9AE02.roa (hash: cK4Lx01JCSZW4H3YCVnodtAx/ORf7B0e7vIxfgqX3uI=)
3: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: AhsLyZ6cSjsB6OxlhSMjPiIcrs1dzGaYxdwJxIKQAV0=)
4: 058B976ECA9811F0A295B360C4F9AE02.roa (hash: lCNez/KnH3/u+GXyUNFMwTEZ8K7MJDqkA0Go5e/dS58=)
5: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: TRErWmuqP/DsNILuB+Bsg/oOXJFxA8k+YEgBWxxZqis=)
6: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: EH518Dy6MrAFwmekT0SecOdweFL+FTqCksa8EB6seaE=)
7: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: lTmSpanWfkonoLk8NmfV940KaHPkO1rnz77AY+6Xqc0=)
8: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: grW6xPxdsNkObgmvC9oU5U7FXXHibN8xdWW4iVbsRa4=)
9: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: O2/KxKIdSE2v482JbxbnQ0getoqbnZqZ+/nYKo7sZyY=)
10: 218211CA68F911EF986C8281C4F9AE02.roa (hash: MwIf35XYCZODKT46sKZ+J1cz+B+fnbUAXj0j3RbLFN4=)
11: 3B4551B4CAA811F09DDC8D69C4F9AE02.roa (hash: hDuVof7d3QEQIcHs4zgmq/ai6KUFB43GrplnDI2UHX4=)
12: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: Ev/s13A6k/DcIm1OffodSAjmHH7SzOfcmso4hb44RXg=)
13: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: wtq9PupYRV4XEewrdMqA8/4bNl2edm+HOBW3n2PpfNo=)
14: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: P/zfn2TnTP8oh0npf6LxHTRFCNPzez1h9qHSPByk2/0=)
15: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: 4S3t2dvowIG/EeUUH9BW/CIG4gP34ZZohoWk2j8rwOk=)
16: B35D540E68F611EFB785D145C4F9AE02.roa (hash: 6jCTzKFpZAM5sRcwoj/RVhwR1AvH7Y/xHmW9G5IE69c=)
17: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: t+cHfFMyQ8NmvDexgT+4lzg2Q83rmvnX7nYHf4IBQdE=)
18: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: 3uU6kQ8f6IzetYcsltzYNLy8hPqbwPnaYrl6t4o4ReU=)
19: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: ylWMSBGShl92T17Vr5K5bsotQdr2G9LiHvdhhYPVrsQ=)
20: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: MOAi7s6/6G4J+pIDkTOufzZW6KS0P8wRn9IgpgfF+kk=)
21: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: BF86pvfpbRBo9qXutEzgqO61bS2nTEWr+T+kabrPp1I=)
22: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: brYkxZidojowoYQIqbU0aCNgQ49H7mQPg5jz4K3RIX0=)
23: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: CxVWM785DWNfTdffR2/Yw/2Hi2LQnhqbcgLOymKnnM8=)
24: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: xClDM8EpPeO91j0Mezn/P780Xmby1QeCDq53lVbawmM=)
25: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: cxcPBGfE5CZoxeyWHWqPrl7qUEDb1w9Ivop3RXOuNy8=)
26: BE4B3228691411EFB573C120C4F9AE02.roa (hash: ovaDzOhz8t6euzDNkjZEtSnXx9uEV3qfaxhhzdo9Nh8=)
27: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: Sy5GnEGGq49Ut4C8AZxeQpVbXW8n/TI4EHxkVNOwMUM=)
28: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: PuC0DdgiggYtIjLvoalRRhkL/oLZu3l1qbEXfv11uZQ=)
29: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: H8VgsGVXvOR/DsZUOIG9OsZtDhG6b/7E83e/ckfyCFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 00:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1241 (0x4d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Nov 15 00:13:15 2026 GMT
Not After : Nov 22 00:13:15 2026 GMT
Subject: CN=6af8f91c-1d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:47:c7:20:77:57:4d:45:ad:d9:fe:38:e1:09:
91:9b:17:12:aa:31:1d:45:99:46:33:8e:9f:70:11:
4c:ad:69:38:20:79:4b:d8:d5:02:8b:f6:49:b4:d6:
a8:f9:8b:8e:da:ca:a1:02:7a:78:49:1e:a6:33:90:
de:da:17:f9:52:d7:f5:5b:f3:19:de:fd:e7:05:91:
31:e2:c4:af:a4:d5:4b:ca:ce:20:20:10:b7:96:85:
cb:31:5a:83:b9:03:9f:b8:37:d9:be:09:92:4d:4e:
ea:c9:dd:05:6e:29:53:3c:f5:9f:44:f4:62:48:81:
6b:92:c3:b6:0f:92:84:9e:a7:dd:c1:a9:57:3e:9b:
27:57:ea:03:46:6a:03:eb:a1:fd:ae:37:6f:a3:63:
e0:55:5f:a3:90:55:41:c6:b6:fc:c4:81:1b:b8:91:
9c:d5:05:6e:af:39:a8:4c:f2:7c:11:90:eb:06:2d:
66:13:e5:30:b6:c7:66:6b:2f:78:c0:6d:6b:bd:25:
c5:e5:4b:b5:41:0b:b8:cf:9d:dd:9a:f0:6d:b0:ec:
02:cc:0f:aa:87:22:c6:d6:e3:c5:12:14:b9:b6:60:
bf:60:29:e8:fc:35:ba:dd:ce:41:f1:e9:38:15:17:
d8:d7:c5:c4:b2:52:df:f0:0d:32:c5:87:ad:96:92:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:56:4B:C3:3F:A0:09:79:42:F1:A0:76:41:25:CA:CC:28:5D:08:72
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:0e:cd:6d:1f:76:fb:4c:b3:df:ca:30:28:75:9b:6f:3e:e1:
ce:f6:09:c5:de:c1:93:17:55:a9:56:ab:84:4b:da:b6:c6:71:
a2:79:a0:c2:f5:46:3a:01:b2:58:62:e9:8e:39:e9:8f:63:fb:
56:ef:e6:2f:e3:8a:52:7e:fe:9f:3f:51:2c:2b:e2:34:71:79:
fc:0b:38:69:4d:cb:04:d1:f8:76:d1:a4:62:6a:c9:a8:bc:75:
84:27:02:d4:64:95:4f:88:c4:15:f1:c7:b9:e1:c8:27:5b:dc:
a4:2f:0e:5f:3f:c3:e5:c8:57:a1:37:02:a2:9f:17:0d:15:5f:
13:19:b6:4f:cd:42:1d:9c:cf:d1:b7:7b:04:f0:7e:e1:1e:f4:
29:47:7e:f0:ca:e3:61:52:58:9f:c2:d3:de:a6:7b:2f:aa:2c:
bc:b1:d0:62:98:dd:81:e7:38:be:9c:c7:9b:f7:b0:a4:aa:d0:
2e:10:f0:d6:40:e2:d3:07:ca:23:7d:3e:24:3a:81:c1:4b:7c:
9e:e8:0f:1b:5c:04:0d:7f:13:cb:1b:19:99:b5:34:a3:f2:dc:
d4:1e:cf:6f:1e:0d:87:68:8b:af:87:59:0e:16:46:be:ea:98:
ff:c0:2a:b6:2f:2b:a0:f5:60:a4:59:78:85:60:b6:1a:53:cf:
b0:43:2e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:45:26 2026 by rpki-client