
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
File: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json)
Hash identifier: JrrdcEq7GaUsCAEyn7oT7M963/KM8fRB90blfSxu4mI=
Subject key identifier: EC:10:92:9E:75:DC:DA:DA:1B:39:96:DE:F2:FC:28:3A:6C:E8:E0:97
Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Certificate serial: 0428
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
Manifest number: 0412
Signing time: Wed 13 May 2026 00:33:00 +0000
Manifest this update: Wed 13 May 2026 00:32:59 +0000
Manifest next update: Wed 20 May 2026 00:32:59 +0000
Files and hashes: 1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: aHPga0pVdfJEoTh071H/qvWy0r9o/NHe3X7tmip6Sgw=)
2: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: 74u63+bcbtzbnwhLBuZvwYUeCNjr3rxkxpotr9+jKD4=)
3: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: J33sDWTggg1bRmPFlhAXOyKZA4abpPYfOjDAZ5CZxPI=)
4: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: mtRRZz118M4LflJ2dyF7Ey07yP1IfAmcsesHzgsjW3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1064 (0x428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Validity
Not Before: May 13 00:32:59 2026 GMT
Not After : May 20 00:32:59 2026 GMT
Subject: CN=6a03c6bc-7a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:98:86:b5:e8:43:8f:54:db:d4:ef:07:8a:02:
2d:e7:97:2c:e2:4a:97:df:e1:64:e3:df:0b:5f:5e:
e2:34:91:67:75:64:bd:70:59:3e:d6:f1:97:58:73:
3d:03:aa:7d:e0:24:47:e1:bc:5f:b1:61:d3:f8:c5:
25:07:2c:bd:ca:1c:94:e1:9e:38:a2:c3:3a:24:bb:
50:09:ec:cb:fb:d4:ae:8f:ad:9e:a2:e1:28:ab:b3:
f2:76:c8:12:14:0f:9e:87:10:58:a2:c1:8c:bb:fa:
4a:b7:c8:b9:13:e5:be:24:fc:66:e8:56:75:36:c6:
c4:20:ab:03:d8:44:93:0a:a8:8b:8d:4b:8a:92:8f:
38:4a:17:5b:a5:3e:59:a2:ac:76:47:11:51:8e:23:
72:6e:d6:1f:a6:26:99:ad:75:c1:a1:09:4f:6a:0d:
a8:c9:66:14:12:12:96:53:5c:3a:ac:cc:92:ea:47:
60:68:34:f3:36:74:c5:d8:45:67:42:b2:c2:0a:90:
9e:ff:a7:c7:10:8b:ff:76:75:a1:00:a7:76:a1:c9:
6d:e8:ad:32:66:6f:1f:75:08:71:22:84:55:32:c7:
34:22:41:40:d1:b6:3d:99:3e:f5:04:ce:68:e5:52:
00:cc:e7:b8:be:e2:c8:b1:28:a4:91:5c:51:a2:9b:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:10:92:9E:75:DC:DA:DA:1B:39:96:DE:F2:FC:28:3A:6C:E8:E0:97
X509v3 Authority Key Identifier:
keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:1b:a1:47:c4:6a:e6:96:c8:d9:58:a0:f5:11:14:1a:89:fb:
65:a9:44:01:76:84:ed:ff:47:34:a0:13:0c:e8:8a:83:3d:22:
5d:20:cc:5a:ee:c6:dd:e2:07:99:55:9a:cc:65:44:c8:c4:21:
79:d5:e0:6e:ef:4a:5b:9d:95:7c:82:3e:0c:c8:d7:5f:c1:90:
36:14:5a:78:a5:d3:55:cb:22:1f:fd:38:03:24:80:0f:a9:8c:
53:18:48:55:22:c3:51:78:44:cd:00:a7:af:55:7a:28:99:4c:
2d:de:33:e9:be:24:04:aa:e3:a8:d7:1e:46:df:56:04:32:5d:
15:84:c4:a7:9e:c4:59:bf:c1:96:cb:a7:19:1c:6c:a4:1d:2e:
11:c0:60:49:fb:46:a0:6e:71:dd:ab:88:0f:86:73:4c:09:4f:
46:19:10:3f:d7:b2:63:7f:f7:94:cc:f8:73:23:c6:46:2e:fc:
fa:f8:29:6b:bb:82:91:c5:36:e7:10:73:7f:58:9e:c8:04:fb:
c0:13:d7:19:6b:b4:4d:ee:77:2e:fb:55:27:8c:ff:61:9c:42:
f7:07:ac:fc:f4:33:6b:c4:68:4e:df:2b:61:0f:77:26:19:8f:
b0:41:e1:25:2c:1d:7c:74:16:88:52:67:2c:88:49:33:63:ae:
ae:4c:5e:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njc3NDIxMTAvBgNVBAUTKDg2M0NEMDNDRDdCMEFDQjU4OTY1OUVENkE5MUNGMUVC
MjA0MzY3NTMwHhcNMjYwNTEzMDAzMjU5WhcNMjYwNTIwMDAzMjU5WjAYMRYwFAYD
VQQDEw02YTAzYzZiYy03YTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ZiGtehDj1Tb1O8HigIt55cs4kqX3+Fk498LX17iNJFndWS9cFk+1vGXWHM9
A6p94CRH4bxfsWHT+MUlByy9yhyU4Z44osM6JLtQCezL+9Suj62eouEoq7PydsgS
FA+ehxBYosGMu/pKt8i5E+W+JPxm6FZ1NsbEIKsD2ESTCqiLjUuKko84ShdbpT5Z
oqx2RxFRjiNybtYfpiaZrXXBoQlPag2oyWYUEhKWU1w6rMyS6kdgaDTzNnTF2EVn
QrLCCpCe/6fHEIv/dnWhAKd2oclt6K0yZm8fdQhxIoRVMsc0IkFA0bY9mT71BM5o
5VIAzOe4vuLIsSikkVxRopvVKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwQkp51
3NraGzmW3vL8KDps6OCXMB8GA1UdIwQYMBaAFIY80DzXsKy1iWWe1qkc8esgQ2dT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Nzc0Mi85NEU1MDgwMEI3
RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JMV0paWjdXcVJ6eDZ5QkRa
MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hqelFQTmV3ckxXSlpaN1dxUnp4NnlCRFoxTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Nzc0Mi85NEU1MDgwMEI3RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JM
V0paWjdXcVJ6eDZ5QkRaMU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUBuhR8Rq5pbI2Vig9REUGon7ZalEAXaE7f9HNKATDOiKgz0iXSDMWu7G3eIH
mVWazGVEyMQhedXgbu9KW52VfII+DMjXX8GQNhRaeKXTVcsiH/04AySAD6mMUxhI
VSLDUXhEzQCnr1V6KJlMLd4z6b4kBKrjqNceRt9WBDJdFYTEp57EWb/BlsunGRxs
pB0uEcBgSftGoG5x3auID4ZzTAlPRhkQP9eyY3/3lMz4cyPGRi78+vgpa7uCkcU2
5xBzf1ieyAT7wBPXGWu0Te53LvtVJ4z/YZxC9wes/PQza8RoTt8rYQ93JhmPsEHh
JSwdfHQWiFJnLIhJM2OurkxeFw==
-----END CERTIFICATE-----
Generated at Wed May 13 17:51:02 2026 by rpki-client