
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
File: hctAGQp33J5olNhX9zu3qQ4JdOQ.mft (raw, json)
Hash identifier: hlRIRpQD6GEIkiKzBFjIGLWPvExcl6bmK4/XFWLvcQs=
Subject key identifier: 0A:1D:EF:2F:DB:29:8A:D9:39:E2:82:BA:90:59:D6:BC:A2:70:A5:1F
Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
Certificate issuer: /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Certificate serial: 062B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
Manifest number: 061B
Signing time: Tue 12 May 2026 22:55:24 +0000
Manifest this update: Tue 12 May 2026 22:55:24 +0000
Manifest next update: Tue 19 May 2026 22:55:24 +0000
Files and hashes: 1: hctAGQp33J5olNhX9zu3qQ4JdOQ.crl (hash: kD8mnqbFm621suw19NmBjWuMzH6JWxOETbLLrcmq8p8=)
2: 7FCFB4745E8411EE89DF693EC4F9AE02.roa (hash: eopWrcCTKAsMxcnNdOCRso+7nTOlyhMbbG0+6DVN/mA=)
3: FD9A4AA0E53111EBAB62446EC4F9AE02.roa (hash: aXUNgdPZaRVWUWRyzVl3gVNo/2yllW0aODydzNYrLyQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl
rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:55:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1579 (0x62b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169BB4, serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Validity
Not Before: May 12 22:55:24 2026 GMT
Not After : May 19 22:55:24 2026 GMT
Subject: CN=6a03afdc-564a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:0a:5a:7b:a9:a9:b5:84:dd:2f:b8:1f:91:
ef:f3:dd:ee:a8:3c:32:c4:3a:c3:8e:f4:78:f0:16:
ab:78:9f:1a:39:34:38:a7:07:67:b6:99:cf:16:a7:
b7:e5:a6:8c:c8:36:18:3d:8c:68:ea:09:e0:75:bb:
a1:3b:4b:de:3a:06:12:6f:d4:cd:42:c7:10:b7:04:
0d:98:49:d9:7f:7e:03:20:3a:c9:06:84:fd:78:2e:
9c:21:dd:26:d5:c2:00:4e:e7:3e:45:60:38:20:40:
c3:ec:e9:46:9b:07:5c:6d:bf:03:bb:2a:cb:f9:fb:
04:5b:cf:7b:3e:28:9c:45:db:dd:3c:4f:ff:91:57:
07:84:08:e2:19:97:c0:72:98:f7:fa:25:48:41:6e:
bf:00:5f:05:c4:ae:ab:73:12:f4:8c:00:58:b1:4a:
a4:dd:e2:cd:93:27:42:c0:f9:b1:b3:bf:ac:bb:63:
71:bc:45:2e:82:cd:dc:91:62:97:7f:8d:07:cd:d3:
4a:b8:d1:b1:3d:5a:c4:c2:65:3c:86:55:5f:15:24:
a7:79:e4:1e:7e:de:09:23:33:57:28:27:74:89:55:
7c:91:bf:fb:48:31:7e:ea:23:01:65:b1:18:7b:9a:
c4:11:13:41:79:14:b6:a7:34:aa:2c:5b:d9:f1:cd:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1D:EF:2F:DB:29:8A:D9:39:E2:82:BA:90:59:D6:BC:A2:70:A5:1F
X509v3 Authority Key Identifier:
keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:c6:d1:b8:66:d1:9e:ee:0b:59:96:50:e5:f5:0f:f0:84:0f:
22:93:a9:65:ba:ec:a0:83:77:df:4c:4f:7c:8b:55:0a:e6:5a:
fd:32:3e:e4:b7:10:a9:5d:ae:cd:12:e5:bb:20:f6:22:38:af:
10:5f:17:b9:a0:c0:d3:9c:bb:f0:e8:83:f9:cd:d2:c6:d8:9a:
ea:d0:4f:a5:4c:cd:89:3e:57:48:34:88:5a:51:4c:8c:4d:19:
3d:c5:b6:1b:d1:ff:62:25:07:b7:d5:20:f3:86:9e:35:33:6f:
60:5a:2a:6d:51:34:d0:07:84:cc:bf:50:c3:f2:6a:12:96:df:
f5:e1:f1:ef:aa:ac:c9:24:cb:e7:34:e0:22:3c:26:e1:58:0d:
8e:58:37:04:75:fd:01:97:cf:fa:4f:ca:e3:10:35:b4:69:a6:
5e:3b:0b:5b:30:04:f0:fe:e8:09:d7:c3:44:33:28:51:1f:cf:
81:24:a6:1d:c9:ca:4d:25:f2:e3:60:45:30:f2:4e:17:dc:1e:
b9:c8:ca:1d:ac:9b:37:96:bc:2b:d4:14:65:4a:d4:90:36:32:
25:51:2f:22:25:87:40:1e:4a:41:4c:4f:9f:22:ad:18:ca:53:
c6:ce:85:bb:5b:89:90:04:40:89:07:a8:4e:5c:f3:6c:c9:93:
5d:63:7f:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlCQjQxMTAvBgNVBAUTKDg1Q0I0MDE5MEE3N0RDOUU2ODk0RDg1N0Y3M0JCN0E5
MEUwOTc0RTQwHhcNMjYwNTEyMjI1NTI0WhcNMjYwNTE5MjI1NTI0WjAYMRYwFAYD
VQQDEw02YTAzYWZkYy01NjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxWMKWnupqbWE3S+4H5Hv893uqDwyxDrDjvR48BareJ8aOTQ4pwdntpnPFqe3
5aaMyDYYPYxo6gngdbuhO0veOgYSb9TNQscQtwQNmEnZf34DIDrJBoT9eC6cId0m
1cIATuc+RWA4IEDD7OlGmwdcbb8DuyrL+fsEW897PiicRdvdPE//kVcHhAjiGZfA
cpj3+iVIQW6/AF8FxK6rcxL0jABYsUqk3eLNkydCwPmxs7+su2NxvEUugs3ckWKX
f40HzdNKuNGxPVrEwmU8hlVfFSSneeQeft4JIzNXKCd0iVV8kb/7SDF+6iMBZbEY
e5rEERNBeRS2pzSqLFvZ8c2DXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAod7y/b
KYrZOeKCupBZ1ryicKUfMB8GA1UdIwQYMBaAFIXLQBkKd9yeaJTYV/c7t6kOCXTk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJCNC9CM0U3MzA5Q0U1
MkUxMUVCOUVCMUZENjlDNEY5QUUwMi9oY3RBR1FwMzNKNW9sTmhYOXp1M3FRNEpk
T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hjdEFHUXAzM0o1b2xOaFg5enUzcVE0SmRPUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUJCNC9CM0U3MzA5Q0U1MkUxMUVCOUVCMUZENjlDNEY5QUUwMi9oY3RBR1FwMzNK
NW9sTmhYOXp1M3FRNEpkT1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFsbRuGbRnu4LWZZQ5fUP8IQPIpOpZbrsoIN330xPfItVCuZa/TI+5LcQqV2u
zRLluyD2IjivEF8XuaDA05y78OiD+c3Sxtia6tBPpUzNiT5XSDSIWlFMjE0ZPcW2
G9H/YiUHt9Ug84aeNTNvYFoqbVE00AeEzL9Qw/JqEpbf9eHx76qsySTL5zTgIjwm
4VgNjlg3BHX9AZfP+k/K4xA1tGmmXjsLWzAE8P7oCdfDRDMoUR/PgSSmHcnKTSXy
42BFMPJOF9weucjKHaybN5a8K9QUZUrUkDYyJVEvIiWHQB5KQUxPnyKtGMpTxs6F
u1uJkARAiQeoTlzzbMmTXWN/+g==
-----END CERTIFICATE-----
Generated at Wed May 13 11:37:59 2026 by rpki-client