
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier: yhYasSXNmF6HDrAaY8GkJHnABKDrG5odi7qUEmxU68g=
Subject key identifier: 10:CC:3F:DE:81:F5:F4:6E:0B:25:E0:A4:A6:E8:41:01:BB:78:2F:7D
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 0473
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number: 03C5
Signing time: Mon 11 May 2026 00:52:12 +0000
Manifest this update: Mon 11 May 2026 00:52:12 +0000
Manifest next update: Mon 18 May 2026 00:52:12 +0000
Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: eX3zFfZ0hHSIhuFkt7ZshRA+/xd9voYzcprAxo/SKYk=)
2: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: Sy5GnEGGq49Ut4C8AZxeQpVbXW8n/TI4EHxkVNOwMUM=)
3: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: O2/KxKIdSE2v482JbxbnQ0getoqbnZqZ+/nYKo7sZyY=)
4: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: grW6xPxdsNkObgmvC9oU5U7FXXHibN8xdWW4iVbsRa4=)
5: 058B976ECA9811F0A295B360C4F9AE02.roa (hash: lCNez/KnH3/u+GXyUNFMwTEZ8K7MJDqkA0Go5e/dS58=)
6: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: lTmSpanWfkonoLk8NmfV940KaHPkO1rnz77AY+6Xqc0=)
7: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: H8VgsGVXvOR/DsZUOIG9OsZtDhG6b/7E83e/ckfyCFk=)
8: B35D540E68F611EFB785D145C4F9AE02.roa (hash: 6jCTzKFpZAM5sRcwoj/RVhwR1AvH7Y/xHmW9G5IE69c=)
9: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: cxcPBGfE5CZoxeyWHWqPrl7qUEDb1w9Ivop3RXOuNy8=)
10: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: PuC0DdgiggYtIjLvoalRRhkL/oLZu3l1qbEXfv11uZQ=)
11: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: t+cHfFMyQ8NmvDexgT+4lzg2Q83rmvnX7nYHf4IBQdE=)
12: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: CxVWM785DWNfTdffR2/Yw/2Hi2LQnhqbcgLOymKnnM8=)
13: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: Ev/s13A6k/DcIm1OffodSAjmHH7SzOfcmso4hb44RXg=)
14: 3B4551B4CAA811F09DDC8D69C4F9AE02.roa (hash: hDuVof7d3QEQIcHs4zgmq/ai6KUFB43GrplnDI2UHX4=)
15: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: 3uU6kQ8f6IzetYcsltzYNLy8hPqbwPnaYrl6t4o4ReU=)
16: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: 4S3t2dvowIG/EeUUH9BW/CIG4gP34ZZohoWk2j8rwOk=)
17: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: EH518Dy6MrAFwmekT0SecOdweFL+FTqCksa8EB6seaE=)
18: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: AhsLyZ6cSjsB6OxlhSMjPiIcrs1dzGaYxdwJxIKQAV0=)
19: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: BF86pvfpbRBo9qXutEzgqO61bS2nTEWr+T+kabrPp1I=)
20: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: MOAi7s6/6G4J+pIDkTOufzZW6KS0P8wRn9IgpgfF+kk=)
21: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: brYkxZidojowoYQIqbU0aCNgQ49H7mQPg5jz4K3RIX0=)
22: EA792108690E11EF9396CC48C4F9AE02.roa (hash: cK4Lx01JCSZW4H3YCVnodtAx/ORf7B0e7vIxfgqX3uI=)
23: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: TRErWmuqP/DsNILuB+Bsg/oOXJFxA8k+YEgBWxxZqis=)
24: BE4B3228691411EFB573C120C4F9AE02.roa (hash: ovaDzOhz8t6euzDNkjZEtSnXx9uEV3qfaxhhzdo9Nh8=)
25: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: ylWMSBGShl92T17Vr5K5bsotQdr2G9LiHvdhhYPVrsQ=)
26: 218211CA68F911EF986C8281C4F9AE02.roa (hash: MwIf35XYCZODKT46sKZ+J1cz+B+fnbUAXj0j3RbLFN4=)
27: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: P/zfn2TnTP8oh0npf6LxHTRFCNPzez1h9qHSPByk2/0=)
28: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: xClDM8EpPeO91j0Mezn/P780Xmby1QeCDq53lVbawmM=)
29: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: wtq9PupYRV4XEewrdMqA8/4bNl2edm+HOBW3n2PpfNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1139 (0x473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: May 11 00:52:12 2026 GMT
Not After : May 18 00:52:12 2026 GMT
Subject: CN=6a01283c-3de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:b8:1c:cf:62:d3:b5:eb:32:dd:41:96:34:
ce:0d:f6:02:40:74:bd:da:e8:4e:33:db:d3:0d:cd:
fe:70:b4:c8:fc:ef:9a:d4:cc:7c:24:fd:4c:d0:88:
d3:51:eb:ee:40:08:fc:31:0c:d9:5b:87:90:49:9b:
0b:28:d8:8c:ea:c3:73:fa:6d:f8:93:ed:68:7e:ab:
3e:8e:6e:19:1b:bb:27:1a:6c:50:4f:ae:c3:22:55:
2e:ce:96:d8:b4:41:01:f4:21:87:1b:35:13:ee:35:
b0:23:de:09:b6:6f:3b:42:b4:84:09:2b:8c:58:b2:
c1:bd:ff:9a:c7:f2:4b:ca:84:55:79:56:92:ab:76:
59:f3:dd:c9:8b:bb:dc:e7:e7:32:3b:e6:43:14:b0:
a3:fb:20:35:9c:a7:a3:87:ef:2a:11:49:a3:4d:ea:
62:d0:e8:ab:61:b2:a1:24:e1:42:35:7d:ab:e2:cb:
3a:0e:97:3f:02:0f:e2:c8:98:2c:b1:d8:25:5a:9f:
d9:0a:f6:a0:9e:19:a8:34:d4:39:62:c5:56:c2:bb:
80:cd:34:85:e9:f0:ad:23:dc:17:5f:f1:75:20:35:
4b:cb:d4:13:cd:0d:40:77:d0:d8:20:7f:cd:11:02:
74:23:20:09:e6:d6:17:38:8d:e3:ee:b0:f0:f3:9b:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CC:3F:DE:81:F5:F4:6E:0B:25:E0:A4:A6:E8:41:01:BB:78:2F:7D
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:26:a5:1d:f8:86:52:b3:a6:a5:47:27:4b:cd:d2:4a:d3:1a:
c2:eb:19:cd:46:8a:b8:b9:11:42:da:3b:98:3c:ce:1e:c7:0c:
33:60:33:c7:b0:b8:42:58:af:09:51:fd:fa:83:1f:2d:0c:db:
2a:b5:54:1d:b8:bb:c9:5e:59:ae:a7:d5:bd:60:3e:7e:82:96:
44:5a:16:a2:25:16:ff:5e:40:1d:a6:d2:cf:4d:29:9c:ba:8e:
50:c0:9f:cc:ad:d7:ff:a0:96:8a:b8:57:e5:40:c6:4a:a4:89:
7a:cf:dc:ab:c1:f4:95:95:e9:8b:d9:2e:9e:88:b9:0f:87:d8:
b2:e7:18:79:d1:b2:99:ce:37:37:d9:e7:68:a5:44:69:6a:5b:
12:7e:ab:69:b7:07:ba:36:e0:57:3e:65:09:d7:13:46:bb:f9:
4f:6a:e3:74:e3:4c:b8:36:a7:39:fd:83:f1:1f:03:e6:cf:3c:
ae:03:67:38:13:79:cc:72:9c:aa:51:5a:5f:68:9e:af:38:7f:
40:06:66:b5:a9:35:04:fc:c5:01:d0:40:62:f9:ce:3c:c2:3a:
ac:50:07:a0:08:61:79:e4:da:3a:57:e2:57:a6:0a:31:a0:4a:
d0:57:11:0e:6b:08:54:61:80:b0:ba:9b:72:7a:9a:0a:39:22:
bf:d1:c7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:35 2026 by rpki-client