
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
File: h9O9fQreBlCeuFrGullInZVAH38.mft (raw, json)
Hash identifier: wB0r+yHy6WSklFnhsFZZuJ7cRkJDrqYn2SqmNZFgniM=
Subject key identifier: F9:20:46:1D:69:06:51:05:50:2B:D5:AB:3C:05:F6:F0:6D:73:30:B9
Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Certificate serial: 05C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
Manifest number: 05A0
Signing time: Tue 12 May 2026 23:23:33 +0000
Manifest this update: Tue 12 May 2026 23:23:32 +0000
Manifest next update: Tue 19 May 2026 23:23:32 +0000
Files and hashes: 1: h9O9fQreBlCeuFrGullInZVAH38.crl (hash: Wd1xW44JK/NlK+5D1kKAve7hH32Nkwj1z8wwrf/TkL8=)
2: DFC29B9EDA3311F0AF85FF988AD3641D.roa (hash: APVAdn0V+JjNqtnYFJXrw3vnTk5N1Az4I90CmHo6gTE=)
3: FAD3BBFCDA3311F08928C2DC8AD3641D.roa (hash: aSuiDoqVGUo9FqPyHFG/YLpJ9f8pam3kOcqDIBOTLpk=)
4: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (hash: mUW7mZkRK0183V8DRL68AAx4KDMDpyr2zgUqvRvduaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:23:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1476 (0x5c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Validity
Not Before: May 12 23:23:32 2026 GMT
Not After : May 19 23:23:32 2026 GMT
Subject: CN=6a03b675-39f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:eb:34:3e:26:50:dd:59:3a:41:fc:92:49:
da:5e:33:48:22:10:6c:8b:f8:0c:24:ce:ce:21:9c:
7c:92:e4:c7:03:61:fe:81:9b:38:5f:e4:40:52:75:
3c:6e:4d:0d:e7:5d:43:46:b6:de:73:0a:0a:7c:ac:
11:fa:cd:a0:e0:cd:04:3e:84:75:b3:94:e4:d3:e8:
7b:76:63:e4:ab:1f:33:30:af:0c:08:f8:a6:73:45:
58:96:a5:a1:b8:7d:2a:59:84:ec:85:71:20:36:9b:
78:74:ac:fb:5a:50:3e:46:c8:a8:0a:40:f7:24:92:
b9:f7:63:e8:51:19:ca:da:6f:fc:12:68:a4:3e:04:
42:37:f0:ab:86:c4:5c:93:ea:ea:aa:e8:15:70:4d:
a1:f8:b4:2c:6e:31:ce:7a:61:ad:c5:77:ca:18:82:
bd:80:8e:1c:52:fa:fc:ce:34:50:75:f9:9d:d5:2e:
b8:6d:54:86:0e:07:07:cd:8b:4b:b4:38:f4:39:ee:
7a:30:8c:87:a1:90:c4:54:02:ef:4c:ff:81:ac:7e:
8f:f5:07:17:19:37:8f:3c:c0:43:dd:a4:56:0c:30:
2f:b3:d5:04:56:4e:1b:51:b1:ea:64:64:8a:95:8d:
38:97:06:65:b1:88:fd:fa:63:93:39:66:62:c8:24:
2c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:20:46:1D:69:06:51:05:50:2B:D5:AB:3C:05:F6:F0:6D:73:30:B9
X509v3 Authority Key Identifier:
keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2e:45:a0:33:b2:4d:08:a6:02:ef:03:9c:c3:c4:17:fd:3b:
47:e3:21:ed:46:9f:2e:68:12:65:dd:b1:34:a0:ba:86:70:59:
90:2d:31:8b:ae:b7:a7:e1:55:79:e6:16:73:6e:ea:70:15:99:
63:1f:fb:75:a2:f2:59:5f:94:27:dc:5a:ca:93:6f:4e:f7:a3:
3b:b7:79:db:7c:5b:e5:bf:0b:76:49:9b:ac:ac:f2:e2:d2:97:
47:f0:17:4b:c0:8c:c0:53:8a:a7:e0:02:c4:85:80:59:39:14:
7e:85:49:83:f4:df:ab:38:c5:e3:47:a5:2c:9c:ef:14:4c:2f:
f8:c8:0e:02:7f:b6:91:78:c4:e3:6c:ee:0a:19:be:b9:19:71:
f9:95:61:f9:4c:0d:0d:c4:92:13:c7:eb:3a:c8:ca:3b:09:c9:
c2:8b:5f:bb:64:61:c3:0d:8d:e6:96:0d:50:f1:61:e4:3e:57:
6d:ea:ac:81:c5:22:c9:31:da:1f:64:3d:a3:f8:bf:69:28:a9:
a1:55:d4:c5:11:a1:fa:76:18:76:55:c0:d9:dd:90:1f:4e:0f:
61:b6:6a:d1:77:e1:aa:c5:d5:dd:38:44:5c:ce:d6:70:67:93:
af:53:29:76:e1:ec:e8:4c:a9:93:f4:cb:9d:36:ee:91:30:6c:
a9:5a:04:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FFMTMxMTAvBgNVBAUTKDg3RDNCRDdEMEFERTA2NTA5RUI4NUFDNkJBNTk0ODlE
OTU0MDFGN0YwHhcNMjYwNTEyMjMyMzMyWhcNMjYwNTE5MjMyMzMyWjAYMRYwFAYD
VQQDEw02YTAzYjY3NS0zOWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0KXrND4mUN1ZOkH8kknaXjNIIhBsi/gMJM7OIZx8kuTHA2H+gZs4X+RAUnU8
bk0N511DRrbecwoKfKwR+s2g4M0EPoR1s5Tk0+h7dmPkqx8zMK8MCPimc0VYlqWh
uH0qWYTshXEgNpt4dKz7WlA+RsioCkD3JJK592PoURnK2m/8EmikPgRCN/CrhsRc
k+rqqugVcE2h+LQsbjHOemGtxXfKGIK9gI4cUvr8zjRQdfmd1S64bVSGDgcHzYtL
tDj0Oe56MIyHoZDEVALvTP+BrH6P9QcXGTePPMBD3aRWDDAvs9UEVk4bUbHqZGSK
lY04lwZlsYj9+mOTOWZiyCQsjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPkgRh1p
BlEFUCvVqzwF9vBtczC5MB8GA1UdIwQYMBaAFIfTvX0K3gZQnrhaxrpZSJ2VQB9/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUxMy84OTM2MzU3ODI2
RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJsQ2V1RnJHdWxsSW5aVkFI
MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g5TzlmUXJlQmxDZXVGckd1bGxJblpWQUgzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QUUxMy84OTM2MzU3ODI2RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJs
Q2V1RnJHdWxsSW5aVkFIMzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArC5FoDOyTQimAu8DnMPEF/07R+Mh7UafLmgSZd2xNKC6hnBZkC0xi663p+FV
eeYWc27qcBWZYx/7daLyWV+UJ9xaypNvTvejO7d523xb5b8LdkmbrKzy4tKXR/AX
S8CMwFOKp+ACxIWAWTkUfoVJg/TfqzjF40elLJzvFEwv+MgOAn+2kXjE42zuChm+
uRlx+ZVh+UwNDcSSE8frOsjKOwnJwotfu2Rhww2N5pYNUPFh5D5XbeqsgcUiyTHa
H2Q9o/i/aSipoVXUxRGh+nYYdlXA2d2QH04PYbZq0XfhqsXV3ThEXM7WcGeTr1Mp
duHs6Eypk/TLnTbukTBsqVoEtQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:05:18 2026 by rpki-client