
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
File: HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json)
Hash identifier: 1KOx6PLm3Lqj1YZbDH4/BjOjLOgyy09l5ssYFe7O0iI=
Subject key identifier: 14:69:35:E2:A0:B6:A3:47:B4:68:DB:54:E7:62:C3:56:2F:52:84:4C
Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Certificate serial: 1E72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
Manifest number: 1E61
Signing time: Tue 24 Mar 2026 16:00:01 +0000
Manifest this update: Tue 24 Mar 2026 16:00:01 +0000
Manifest next update: Tue 31 Mar 2026 16:00:01 +0000
Files and hashes: 1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: ksa1H+ch1rFdVdIQFAssD1RjAIuCP61j5Qgr7fTQtco=)
2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: e4hMYlDnHNsGyWnAsIxka4q6i/J4idktm6GuEoIlVXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl
rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7794 (0x1e72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B01D, serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Validity
Not Before: Mar 24 16:00:01 2026 GMT
Not After : Mar 31 16:00:01 2026 GMT
Subject: CN=69c2b501-c81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:0a:16:18:0f:39:b1:2e:5c:b4:0d:5f:4e:
63:af:50:f7:49:13:42:d6:dc:32:ab:65:71:ed:28:
31:f8:37:f9:0f:f5:03:9d:f2:ae:72:76:0a:c4:f3:
da:56:60:a3:4e:d5:36:df:fc:16:bd:14:93:f4:82:
44:69:92:63:74:e6:75:65:3d:46:d2:03:42:8c:9a:
88:d2:e1:20:ac:ad:ea:21:32:5d:ec:37:ef:2d:31:
e7:72:5b:10:9a:cb:af:ef:f7:94:c9:93:05:c6:03:
00:0e:9e:fa:41:46:d0:ad:af:96:6b:11:e7:78:05:
4b:00:db:20:6d:3c:50:76:77:31:c5:71:5b:39:69:
92:32:6d:bd:55:c4:3d:48:56:d9:7d:e6:65:ee:6c:
05:6e:72:ef:65:98:d0:91:56:24:fe:4b:bb:3b:ff:
d5:7b:74:e1:38:78:5e:06:2c:f6:1f:dc:4d:d6:00:
8c:d9:7b:93:a9:60:d4:13:36:14:db:36:ef:0c:36:
65:81:63:ca:06:a5:fa:ef:91:58:a7:e8:8c:f7:c9:
ca:8f:1d:81:7d:61:5d:db:ab:96:cd:59:06:66:d5:
d8:45:d6:ce:ca:dd:9a:54:fb:55:46:d6:89:04:fa:
6b:4c:48:93:c1:58:9a:ef:eb:a0:25:16:78:f8:05:
8e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:69:35:E2:A0:B6:A3:47:B4:68:DB:54:E7:62:C3:56:2F:52:84:4C
X509v3 Authority Key Identifier:
keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:e1:60:c8:c0:2a:d7:db:51:ee:eb:b7:ec:8b:71:2b:91:6f:
82:d3:ec:ce:18:83:ec:9d:f8:b1:13:32:f5:ac:01:d6:71:ef:
7c:a5:a5:58:54:fa:5b:12:68:51:00:62:a5:f9:44:a3:b7:2b:
fc:00:eb:2d:bf:e9:51:5d:68:b1:52:c0:fd:1d:ed:eb:9e:03:
68:6f:35:a6:1c:0d:da:de:0d:c0:8e:ca:3c:44:68:3b:bf:0c:
5c:8d:a4:60:0b:8c:a3:53:9a:59:9b:50:ff:f6:09:ca:9a:6a:
a8:97:3c:e9:94:e2:54:07:5f:e1:d2:a9:a1:0a:bf:5b:2a:33:
96:85:be:7b:ab:95:ec:4d:0f:fc:56:7c:8b:6b:2e:94:5f:1f:
7c:e8:9b:b9:31:36:fa:a5:3a:e9:e2:de:b9:6b:11:dd:8f:cb:
31:c9:61:09:86:49:ae:e5:94:c7:d2:0b:ab:83:7e:02:7b:62:
88:93:b6:02:f1:c6:fc:3a:d5:82:15:f6:5e:8a:21:d9:ac:73:
29:50:c7:62:a7:df:2b:c9:8c:59:27:43:62:d1:ae:44:ab:c9:
6b:77:b0:86:b7:ff:1f:65:69:63:dd:06:22:1a:ed:e5:1b:5b:
70:57:0e:1e:8f:4a:97:9f:96:d4:7c:58:24:b8:3c:41:73:4a:
eb:17:33:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIwMUQxMTAvBgNVBAUTKDFDMkY5MENEM0Y1MUI4QUNEMDAyMTBFMzU3REU5QTgx
Q0I0NUQxNzEwHhcNMjYwMzI0MTYwMDAxWhcNMjYwMzMxMTYwMDAxWjAYMRYwFAYD
VQQDEw02OWMyYjUwMS1jODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy/oKFhgPObEuXLQNX05jr1D3SRNC1twyq2Vx7Sgx+Df5D/UDnfKucnYKxPPa
VmCjTtU23/wWvRST9IJEaZJjdOZ1ZT1G0gNCjJqI0uEgrK3qITJd7DfvLTHnclsQ
msuv7/eUyZMFxgMADp76QUbQra+WaxHneAVLANsgbTxQdncxxXFbOWmSMm29VcQ9
SFbZfeZl7mwFbnLvZZjQkVYk/ku7O//Ve3ThOHheBiz2H9xN1gCM2XuTqWDUEzYU
2zbvDDZlgWPKBqX675FYp+iM98nKjx2BfWFd26uWzVkGZtXYRdbOyt2aVPtVRtaJ
BPprTEiTwVia7+ugJRZ4+AWOQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRpNeKg
tqNHtGjbVOdiw1YvUoRMMB8GA1UdIwQYMBaAFBwvkM0/Ubis0AIQ41femoHLRdFx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjAxRC8yMTkyOTUxNjk1
QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVLelFBaERqVjk2YWdjdEYw
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hDLVF6VDlSdUt6UUFoRGpWOTZhZ2N0RjBYRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjAxRC8yMTkyOTUxNjk1QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVL
elFBaERqVjk2YWdjdEYwWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc+FgyMAq19tR7uu37ItxK5FvgtPszhiD7J34sRMy9awB1nHvfKWlWFT6WxJo
UQBipflEo7cr/ADrLb/pUV1osVLA/R3t654DaG81phwN2t4NwI7KPERoO78MXI2k
YAuMo1OaWZtQ//YJyppqqJc86ZTiVAdf4dKpoQq/WyozloW+e6uV7E0P/FZ8i2su
lF8ffOibuTE2+qU66eLeuWsR3Y/LMclhCYZJruWUx9ILq4N+AntiiJO2AvHG/DrV
ghX2Xooh2axzKVDHYqffK8mMWSdDYtGuRKvJa3ewhrf/H2VpY90GIhrt5RtbcFcO
Ho9Kl5+W1HxYJLg8QXNK6xcz6w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:25 2026 by rpki-client