
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
File: 05hHRxQle77zpal12QzQ3GW92-8.mft (raw, json)
Hash identifier: H5fGlrmI0Kg4EwAMLduEshv9BapA3r5lz1Sqw6NrF0U=
Subject key identifier: 75:08:61:8D:EF:8F:20:E3:19:35:9F:2A:81:7B:22:01:7A:86:64:9C
Authority key identifier: D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
Certificate issuer: /CN=A9197CBC/serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Certificate serial: 0150
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
Manifest number: 0149
Signing time: Mon 11 May 2026 05:20:22 +0000
Manifest this update: Mon 11 May 2026 05:20:22 +0000
Manifest next update: Mon 18 May 2026 05:20:22 +0000
Files and hashes: 1: 05hHRxQle77zpal12QzQ3GW92-8.crl (hash: vY8Rrt4bWCSt2UAPvclNrJK7jnwq1i/CmlOtgxlWRBw=)
2: 13435546ABF211F0BA77FA0DC4F9AE02.roa (hash: HIQTkqxEUw6fkREKneLxMJQ3JqOr/SLWIHkepYGIh7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197CBC, serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Validity
Not Before: May 11 05:20:22 2026 GMT
Not After : May 18 05:20:22 2026 GMT
Subject: CN=6a016716-2325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ca:25:95:6d:34:b0:3a:fb:3c:da:77:9f:d7:
04:bc:20:2e:d4:87:03:38:70:02:41:cb:f3:6b:54:
a1:d3:bc:4f:64:c3:91:60:a2:14:48:83:aa:ed:07:
49:0a:1e:16:d3:23:ca:55:22:a5:1f:8a:f8:98:23:
d3:bb:48:cf:5f:a4:fe:c5:dc:22:c0:45:f2:ed:30:
a6:d7:0e:90:e1:c7:cd:9a:04:0b:ec:f2:2b:87:c0:
9f:ad:3e:5b:82:77:22:46:66:00:a2:66:bb:7a:00:
42:09:9e:af:47:8c:20:50:c2:d9:c4:9c:c0:c1:aa:
75:67:bd:87:d4:14:18:d5:2f:cc:97:85:95:6e:46:
70:62:f8:33:d9:85:8a:a9:a4:76:7b:ea:ed:1b:d5:
ba:d1:54:a5:3e:57:17:48:26:cd:5d:8b:c8:ae:a4:
bb:fd:42:a3:88:08:a4:0c:03:0b:0c:f0:1f:ac:4b:
6d:4f:52:c5:c7:6c:ef:f2:fd:24:83:f4:b1:71:bd:
16:3c:cf:7f:30:60:d0:f5:ab:21:7f:f6:a8:bd:4c:
71:e7:0e:0f:ff:ee:68:44:e9:82:0c:cd:8c:ab:ea:
d2:48:e6:3f:76:38:27:b5:7d:a0:67:70:85:d0:ca:
b7:97:6f:cc:c1:6e:da:26:c8:ab:45:0a:17:f5:18:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:08:61:8D:EF:8F:20:E3:19:35:9F:2A:81:7B:22:01:7A:86:64:9C
X509v3 Authority Key Identifier:
keyid:D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:7a:bc:e2:22:13:c5:e6:68:1e:e9:cd:a4:99:ec:4d:7f:c6:
d4:e2:84:91:99:5d:01:16:e4:82:34:fe:43:cf:e8:98:80:f8:
8a:f4:67:e3:69:b2:43:9d:f5:88:21:a8:46:0d:0e:69:f0:1d:
c9:5b:9b:64:0c:78:a2:0c:cc:92:f6:b5:d4:30:61:71:63:82:
e5:7a:19:3e:0a:47:5b:1c:69:92:37:da:ed:24:53:a7:82:3a:
fa:27:46:1e:50:cc:87:3c:5a:d4:ca:ed:3d:a6:cb:db:0e:8a:
c6:61:0c:53:a0:fa:85:d2:1e:6b:49:49:05:8d:40:b5:c6:a9:
e4:de:eb:0a:b8:42:09:ef:4c:97:f8:99:a5:4b:f8:f6:58:4a:
4d:5b:f8:f4:19:0a:ec:96:5f:20:34:ab:87:1c:7d:48:1f:3f:
ed:a7:35:1d:16:d6:68:4e:09:79:4c:56:e0:87:06:49:bf:14:
49:3d:50:78:57:2a:7e:18:1a:05:fb:b6:b5:66:79:cf:be:f9:
a3:8c:8d:1d:5a:49:1d:34:e0:b5:76:6e:d8:9c:72:a2:94:80:
7c:ea:78:bb:61:3c:a8:f6:42:ac:09:e2:0a:b8:60:a9:34:4f:
fb:6c:74:4b:79:48:5d:33:8e:c2:75:65:d3:53:14:73:9c:a1:
55:01:19:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTdDQkMxMTAvBgNVBAUTKEQzOTg0NzQ3MTQyNTdCQkVGM0E1QTk3NUQ5MENEMERD
NjVCRERCRUYwHhcNMjYwNTExMDUyMDIyWhcNMjYwNTE4MDUyMDIyWjAYMRYwFAYD
VQQDEw02YTAxNjcxNi0yMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3sollW00sDr7PNp3n9cEvCAu1IcDOHACQcvza1Sh07xPZMORYKIUSIOq7QdJ
Ch4W0yPKVSKlH4r4mCPTu0jPX6T+xdwiwEXy7TCm1w6Q4cfNmgQL7PIrh8CfrT5b
gnciRmYAoma7egBCCZ6vR4wgUMLZxJzAwap1Z72H1BQY1S/Ml4WVbkZwYvgz2YWK
qaR2e+rtG9W60VSlPlcXSCbNXYvIrqS7/UKjiAikDAMLDPAfrEttT1LFx2zv8v0k
g/Sxcb0WPM9/MGDQ9ashf/aovUxx5w4P/+5oROmCDM2Mq+rSSOY/djgntX2gZ3CF
0Mq3l2/MwW7aJsirRQoX9RiBvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHUIYY3v
jyDjGTWfKoF7IgF6hmScMB8GA1UdIwQYMBaAFNOYR0cUJXu+86WpddkM0Nxlvdvv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCQy85NTJCQUUyRTVE
RjAxMUVGQUM3MEVEMEFDNEY5QUUwMi8wNWhIUnhRbGU3N3pwYWwxMlF6UTNHVzky
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA1aEhSeFFsZTc3enBhbDEyUXpRM0dXOTItOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
N0NCQy85NTJCQUUyRTVERjAxMUVGQUM3MEVEMEFDNEY5QUUwMi8wNWhIUnhRbGU3
N3pwYWwxMlF6UTNHVzkyLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAInq84iITxeZoHunNpJnsTX/G1OKEkZldARbkgjT+Q8/omID4ivRn42myQ531
iCGoRg0OafAdyVubZAx4ogzMkva11DBhcWOC5XoZPgpHWxxpkjfa7SRTp4I6+idG
HlDMhzxa1MrtPabL2w6KxmEMU6D6hdIea0lJBY1Atcap5N7rCrhCCe9Ml/iZpUv4
9lhKTVv49BkK7JZfIDSrhxx9SB8/7ac1HRbWaE4JeUxW4IcGSb8UST1QeFcqfhga
Bfu2tWZ5z775o4yNHVpJHTTgtXZu2JxyopSAfOp4u2E8qPZCrAniCrhgqTRP+2x0
S3lIXTOOwnVl01MUc5yhVQEZ8A==
-----END CERTIFICATE-----
Generated at Wed May 13 05:54:06 2026 by rpki-client