
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
File: eHZtYCpA71cBQmhKcj6KNAxv84I.mft (raw, json)
Hash identifier: mZvuHix5oz2tpfgfGpblvvuTkDwOcPEB1JBYiCtOjiE=
Subject key identifier: 23:7C:2A:74:ED:94:4B:8A:27:54:DB:02:AF:2F:83:D8:9A:E8:AC:14
Authority key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82
Certificate issuer: /CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382
Certificate serial: 04FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
Manifest number: 04F8
Signing time: Tue 12 May 2026 23:49:20 +0000
Manifest this update: Tue 12 May 2026 23:49:19 +0000
Manifest next update: Tue 19 May 2026 23:49:19 +0000
Files and hashes: 1: eHZtYCpA71cBQmhKcj6KNAxv84I.crl (hash: BoiTuvCTjKo2TDaSuGTUIDW37JClvCpf3BkeBPIpVW0=)
2: 90AE61AC595711EC8761C361C4F9AE02.roa (hash: IKkH75+WRK2fgAHZzJYi1Oy9QxIGYcWmXMPe96PnP4E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl
rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1279 (0x4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A70D, serialNumber=78766D602A40EF570142684A723E8A340C6FF382
Validity
Not Before: May 12 23:49:19 2026 GMT
Not After : May 19 23:49:19 2026 GMT
Subject: CN=6a03bc80-332b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:76:2d:a5:9c:dc:10:52:0e:4d:85:14:e8:
e0:e5:04:2f:7d:e4:f3:5e:75:b1:7a:ee:cb:b7:d7:
c3:99:a4:e6:36:09:35:e1:dc:09:5b:9c:6b:07:df:
b3:96:12:0b:37:c0:21:24:39:d6:a1:7d:7f:17:fb:
ee:06:11:f3:6a:17:40:e5:38:be:6c:54:56:4e:9f:
a7:10:ab:66:2f:8e:96:53:03:7b:9b:ac:c6:51:00:
48:41:0e:40:f6:d3:42:0e:71:6b:94:01:2b:0a:be:
24:5c:67:f3:6e:c5:e7:30:3e:21:f6:69:88:8b:71:
3a:f3:53:a6:68:84:41:a3:6f:56:a2:aa:42:dd:73:
37:f2:92:c8:07:a7:51:a6:1c:27:74:64:ae:7d:97:
c7:82:7b:91:96:e7:e3:ae:25:cd:12:6f:8f:63:91:
60:df:12:5a:ec:70:55:40:86:fb:53:8b:38:83:9a:
a5:30:79:a1:72:f4:0a:f8:5c:82:81:37:54:b5:ae:
64:7e:9b:49:de:7f:6e:a1:ad:2a:e6:2a:6b:c8:93:
2d:45:de:f4:41:b9:b6:b5:07:80:a6:ed:d7:53:09:
bc:2d:cb:a9:3a:2b:b1:5e:c9:dd:6e:48:02:75:fe:
7b:8f:b6:1c:4f:f9:8c:ed:5d:58:2b:89:28:33:28:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:2A:74:ED:94:4B:8A:27:54:DB:02:AF:2F:83:D8:9A:E8:AC:14
X509v3 Authority Key Identifier:
keyid:78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:06:6b:a0:2f:9a:86:74:2b:ea:91:72:dc:dd:1e:ac:da:a5:
3e:90:58:54:c0:7c:c4:2a:a5:c1:5f:e8:a9:f7:ef:35:63:5f:
12:83:8a:05:11:aa:4a:d0:98:34:f0:79:36:b2:d2:91:27:2c:
7d:fe:ec:5e:e6:cf:83:c2:06:a8:cd:fd:4e:ed:25:13:7c:1d:
66:6e:25:ec:56:60:24:d2:bf:7e:76:73:3a:a1:ee:43:cc:c3:
e7:84:c2:3c:7c:96:9e:64:f6:a6:76:d4:5a:ac:99:97:72:42:
6d:a7:e0:ed:f7:f2:80:a4:5f:db:02:d8:b1:79:f5:1d:d6:71:
55:02:54:a3:a2:69:83:96:ad:4b:32:87:49:9a:16:30:86:f1:
18:a8:5f:f4:48:15:69:a4:80:c4:81:aa:8d:30:aa:29:b4:ba:
c3:b2:20:81:bc:8c:5f:dd:a3:be:f0:bd:6a:85:0c:94:9c:2a:
72:a2:76:00:97:73:d7:f7:dd:28:bb:81:30:ee:ba:bc:d5:a7:
88:2d:46:d9:e3:3b:40:f4:85:46:0d:d3:ec:b9:52:d8:45:23:
c6:ba:4c:1d:66:07:3c:47:d0:71:4c:dd:ff:41:95:9f:21:ad:
29:1c:a4:42:c7:6c:45:39:21:2c:88:b4:8c:a9:ce:59:a5:59:
bb:70:36:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE3MEQxMTAvBgNVBAUTKDc4NzY2RDYwMkE0MEVGNTcwMTQyNjg0QTcyM0U4QTM0
MEM2RkYzODIwHhcNMjYwNTEyMjM0OTE5WhcNMjYwNTE5MjM0OTE5WjAYMRYwFAYD
VQQDEw02YTAzYmM4MC0zMzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp452LaWc3BBSDk2FFOjg5QQvfeTzXnWxeu7Lt9fDmaTmNgk14dwJW5xrB9+z
lhILN8AhJDnWoX1/F/vuBhHzahdA5Ti+bFRWTp+nEKtmL46WUwN7m6zGUQBIQQ5A
9tNCDnFrlAErCr4kXGfzbsXnMD4h9mmIi3E681OmaIRBo29WoqpC3XM38pLIB6dR
phwndGSufZfHgnuRlufjriXNEm+PY5Fg3xJa7HBVQIb7U4s4g5qlMHmhcvQK+FyC
gTdUta5kfptJ3n9uoa0q5ipryJMtRd70Qbm2tQeApu3XUwm8LcupOiuxXsndbkgC
df57j7YcT/mM7V1YK4koMygWxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCN8KnTt
lEuKJ1TbAq8vg9ia6KwUMB8GA1UdIwQYMBaAFHh2bWAqQO9XAUJoSnI+ijQMb/OC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTcwRC8xMTE0QzlCQTU5
NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcxY0JRbWhLY2o2S05BeHY4
NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VIWnRZQ3BBNzFjQlFtaEtjajZLTkF4djg0SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTcwRC8xMTE0QzlCQTU5NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcx
Y0JRbWhLY2o2S05BeHY4NEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiAZroC+ahnQr6pFy3N0erNqlPpBYVMB8xCqlwV/oqffvNWNfEoOKBRGqStCY
NPB5NrLSkScsff7sXubPg8IGqM39Tu0lE3wdZm4l7FZgJNK/fnZzOqHuQ8zD54TC
PHyWnmT2pnbUWqyZl3JCbafg7ffygKRf2wLYsXn1HdZxVQJUo6Jpg5atSzKHSZoW
MIbxGKhf9EgVaaSAxIGqjTCqKbS6w7IggbyMX92jvvC9aoUMlJwqcqJ2AJdz1/fd
KLuBMO66vNWniC1G2eM7QPSFRg3T7LlS2EUjxrpMHWYHPEfQcUzd/0GVnyGtKRyk
QsdsRTkhLIi0jKnOWaVZu3A2xw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:01:33 2026 by rpki-client