
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
File: hNKQTEi_9V2argiHuCwzDxubKaw.mft (raw, json)
Hash identifier: fuioBIxIj7hnu3KNnXNJiOa5lIDg/60dDMiygyHM0Ow=
Subject key identifier: 55:98:64:64:CF:33:E3:05:DF:A9:3D:89:00:96:9E:2B:E7:AB:45:A5
Authority key identifier: 84:D2:90:4C:48:BF:F5:5D:9A:AE:08:87:B8:2C:33:0F:1B:9B:29:AC
Certificate issuer: /CN=A913A0F3/serialNumber=84D2904C48BFF55D9AAE0887B82C330F1B9B29AC
Certificate serial: 1721
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
Manifest number: 1715
Signing time: Tue 24 Mar 2026 16:32:09 +0000
Manifest this update: Tue 24 Mar 2026 16:32:09 +0000
Manifest next update: Tue 31 Mar 2026 16:32:09 +0000
Files and hashes: 1: hNKQTEi_9V2argiHuCwzDxubKaw.crl (hash: kB3bjqKLT3oUQzDoAmZnCPuRg3ujK+B80ea/fzwdYGs=)
2: 0682A6A03DC411EBBFE0EA13C4F9AE02.roa (hash: efogen/tC+/AdiBRhX2upxGF7tJEq1IHdI05AOF10sQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.crl
rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5921 (0x1721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A0F3, serialNumber=84D2904C48BFF55D9AAE0887B82C330F1B9B29AC
Validity
Not Before: Mar 24 16:32:09 2026 GMT
Not After : Mar 31 16:32:09 2026 GMT
Subject: CN=69c2bc89-5742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:97:31:4d:d9:77:2e:6c:26:65:74:b8:ea:
d6:4e:01:d8:d0:51:ce:2a:c8:57:f8:a2:39:63:69:
68:e5:5c:9f:c0:16:fa:45:6b:19:71:ff:2c:01:e3:
13:02:5a:c5:67:16:18:57:59:e0:02:ef:e1:f7:7b:
2e:74:93:ba:0b:30:12:9f:bd:fb:00:47:7b:67:95:
d9:25:13:ef:25:70:56:3b:e0:f0:1c:17:2f:3c:09:
34:ef:7d:4c:6c:35:c7:41:06:27:4f:40:ae:25:09:
2b:b7:76:d6:9d:2f:23:e8:2d:86:b0:4d:5c:21:a9:
13:81:3c:8a:ee:8d:a9:00:ba:82:ae:3f:d8:d6:1b:
48:29:d6:10:5f:c6:a1:d4:c2:b3:ab:83:2e:be:53:
28:85:3d:0f:9b:4e:6f:93:b8:e7:94:01:7d:0d:14:
71:f2:2d:a7:2b:1e:3e:88:a2:23:5a:64:9f:4c:c7:
d7:2b:a5:b0:1e:0a:13:b9:b6:32:80:b8:c5:07:68:
f2:71:57:24:9d:42:5f:c1:17:cb:2e:21:d3:57:08:
ca:3b:30:2b:70:d3:91:86:4f:2a:7c:e1:2c:d9:c1:
ab:4d:07:08:24:e4:2f:39:34:58:a1:50:f2:01:36:
4a:25:95:15:45:be:44:d6:11:fd:9f:18:9c:6d:d0:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:98:64:64:CF:33:E3:05:DF:A9:3D:89:00:96:9E:2B:E7:AB:45:A5
X509v3 Authority Key Identifier:
keyid:84:D2:90:4C:48:BF:F5:5D:9A:AE:08:87:B8:2C:33:0F:1B:9B:29:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:80:a1:a3:e4:9d:95:4b:d8:64:b3:4d:d0:ca:c9:95:a0:22:
5e:11:44:1d:e2:ab:f6:b4:3b:43:4b:71:07:80:6c:5e:14:90:
9a:00:c6:03:d0:05:f7:99:4d:68:a4:a0:b0:6d:21:5c:90:ee:
ce:c8:4e:ca:99:a1:07:6d:6f:f7:1c:c6:30:67:ba:aa:2c:41:
8c:3d:4b:42:98:5b:02:4d:29:e1:ff:ad:52:01:8e:6d:25:5e:
e9:80:69:8e:0d:e8:a0:0c:8f:90:e2:32:0e:8f:de:30:5b:6a:
10:a2:ee:61:30:79:4e:ad:42:01:02:e3:43:50:d7:78:94:3d:
99:85:f9:42:2c:d6:54:01:4b:55:f6:be:52:43:d4:6f:ce:d3:
56:1c:95:50:fb:11:19:e1:f4:f7:02:d8:3d:8c:d1:41:22:38:
87:f4:1c:c0:01:97:38:12:92:11:a2:85:9e:5e:70:1f:41:97:
06:2e:58:cf:fe:1d:7a:e2:b0:c5:e2:94:a2:22:5b:90:f6:36:
a2:64:c0:2f:b4:be:5a:46:bf:14:71:38:ab:f8:46:19:c1:d2:
dd:22:a4:10:ae:a7:6f:fe:6b:08:2c:f6:f5:c8:86:0d:20:bf:
cb:c1:66:6b:f4:a9:51:bd:39:6e:31:f8:86:3b:bd:c1:21:47:
3d:ae:d4:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0EwRjMxMTAvBgNVBAUTKDg0RDI5MDRDNDhCRkY1NUQ5QUFFMDg4N0I4MkMzMzBG
MUI5QjI5QUMwHhcNMjYwMzI0MTYzMjA5WhcNMjYwMzMxMTYzMjA5WjAYMRYwFAYD
VQQDEw02OWMyYmM4OS01NzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+OXMU3Zdy5sJmV0uOrWTgHY0FHOKshX+KI5Y2lo5VyfwBb6RWsZcf8sAeMT
AlrFZxYYV1ngAu/h93sudJO6CzASn737AEd7Z5XZJRPvJXBWO+DwHBcvPAk0731M
bDXHQQYnT0CuJQkrt3bWnS8j6C2GsE1cIakTgTyK7o2pALqCrj/Y1htIKdYQX8ah
1MKzq4MuvlMohT0Pm05vk7jnlAF9DRRx8i2nKx4+iKIjWmSfTMfXK6WwHgoTubYy
gLjFB2jycVcknUJfwRfLLiHTVwjKOzArcNORhk8qfOEs2cGrTQcIJOQvOTRYoVDy
ATZKJZUVRb5E1hH9nxicbdAOjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFWYZGTP
M+MF36k9iQCWnivnq0WlMB8GA1UdIwQYMBaAFITSkExIv/Vdmq4Ih7gsMw8bmyms
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTBGMy80MTcxQjcwNDA0
QTgxMUU4QjIzQTlBMThDNEY5QUUwMi9oTktRVEVpXzlWMmFyZ2lIdUN3ekR4dWJL
YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hOS1FURWlfOVYyYXJnaUh1Q3d6RHh1Ykthdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTBGMy80MTcxQjcwNDA0QTgxMUU4QjIzQTlBMThDNEY5QUUwMi9oTktRVEVpXzlW
MmFyZ2lIdUN3ekR4dWJLYXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzYCho+SdlUvYZLNN0MrJlaAiXhFEHeKr9rQ7Q0txB4BsXhSQmgDGA9AF95lN
aKSgsG0hXJDuzshOypmhB21v9xzGMGe6qixBjD1LQphbAk0p4f+tUgGObSVe6YBp
jg3ooAyPkOIyDo/eMFtqEKLuYTB5Tq1CAQLjQ1DXeJQ9mYX5QizWVAFLVfa+UkPU
b87TVhyVUPsRGeH09wLYPYzRQSI4h/QcwAGXOBKSEaKFnl5wH0GXBi5Yz/4deuKw
xeKUoiJbkPY2omTAL7S+Wka/FHE4q/hGGcHS3SKkEK6nb/5rCCz29ciGDSC/y8Fm
a/SpUb05bjH4hju9wSFHPa7UDQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:48:12 2026 by rpki-client