
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
File: HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json)
Hash identifier: MWdTJRyH3L0utCf72+ORVm8NbVHHgG/vhDGYFLcNZjg=
Subject key identifier: 00:66:8C:B6:80:CA:63:2A:7D:1E:48:F5:21:1C:A4:53:B8:E2:3A:E4
Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
Certificate serial: 0F70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
Manifest number: 0F45
Signing time: Tue 12 May 2026 17:36:18 +0000
Manifest this update: Tue 12 May 2026 17:36:18 +0000
Manifest next update: Tue 19 May 2026 17:36:18 +0000
Files and hashes: 1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: WvO82VEyOKvTesy+I1DTsfZYSSnUfLJvsW8dfyKsfEc=)
2: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: CzoXjxwwafDE/0X1/IFRvm6Y/QHPkUJqqlhM2vR6GHQ=)
3: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: HJroJ49BIbNGAuccbium1kEpSjVPB8qo4E6nRxSwoW8=)
4: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: JnEr1ULSbKqalMG/ES7bWBOgeNVDSEEFX8LfergGB94=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl
rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3952 (0xf70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
Validity
Not Before: May 12 17:36:18 2026 GMT
Not After : May 19 17:36:18 2026 GMT
Subject: CN=6a036512-b48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:83:87:c8:b6:0c:ea:7f:64:d8:08:7b:09:
63:91:6f:b7:75:30:f4:7d:1c:8d:56:73:f7:8f:dd:
de:4c:d3:20:9d:7e:3a:0f:e5:e3:46:d3:43:d4:ca:
64:60:c8:85:46:c7:7a:f4:98:db:f1:f1:c8:bc:4f:
87:c4:84:e4:1e:fa:35:e6:8f:81:1b:02:b9:df:70:
72:45:c3:7f:05:7d:5e:fb:dd:aa:4b:82:80:57:ff:
e5:1c:a9:a0:bc:9a:ee:fa:f0:75:39:de:8b:e4:c8:
9c:ea:ac:81:7d:8a:b1:2c:01:68:a9:68:d8:74:8b:
ba:03:d3:5b:e5:51:c1:ab:5a:cc:23:e0:cc:f5:73:
67:ef:95:13:8a:87:b1:21:60:a4:1b:92:1d:44:bd:
32:cd:24:78:d7:ef:e9:01:e8:1f:d9:ac:71:ac:b6:
32:37:c6:b0:43:8b:56:e2:6b:dd:d9:19:1d:bd:e9:
af:40:71:7f:e1:0a:af:78:e8:72:0f:f0:45:d5:90:
42:c4:28:34:93:47:27:a3:44:6f:37:96:bb:c0:dd:
a1:e8:ab:e0:3d:83:6c:17:72:92:0b:9f:c4:91:33:
9d:32:ff:7c:07:90:2d:e6:eb:08:d3:33:36:2d:3b:
b4:02:3d:f6:bf:a9:8b:ba:69:7a:46:ea:18:cf:b6:
db:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:66:8C:B6:80:CA:63:2A:7D:1E:48:F5:21:1C:A4:53:B8:E2:3A:E4
X509v3 Authority Key Identifier:
keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:2e:10:14:b5:49:6c:df:0b:66:fa:59:d3:3d:aa:db:da:71:
7b:f9:0b:ab:33:45:cb:42:ef:40:60:e6:2a:46:88:15:16:5c:
4a:2d:1c:2c:e0:2f:8b:18:fe:35:a6:b2:37:a9:70:94:67:78:
10:1c:74:00:c9:af:1a:d2:40:e2:58:3f:1d:0c:ed:e1:89:48:
9c:7c:6e:11:6b:d7:b8:20:82:c6:7b:b8:4a:20:54:fc:98:89:
dc:aa:06:da:1d:5a:b5:05:d2:e3:8a:74:a4:d6:f0:1e:c0:b2:
11:58:42:02:b1:be:3c:a4:84:25:c2:34:3f:3c:23:70:c4:e4:
1e:4f:be:dc:b7:37:b7:a2:83:6e:24:78:4d:0f:7f:5f:97:b2:
0f:30:26:94:7a:b2:3d:5f:14:0b:b7:44:8d:70:71:c8:7b:90:
19:5e:f8:d9:2a:e5:b9:27:b1:b2:26:ce:2d:5d:72:f6:f7:f2:
e3:ff:6f:a4:57:e5:f2:45:17:cb:18:3b:6f:d6:b2:8a:c8:ac:
9e:6b:b2:f1:b9:48:7e:3e:8e:cd:d8:3c:9f:ad:b6:f6:fd:b6:
cc:50:91:cc:d9:af:35:56:22:81:81:b0:62:86:66:72:db:fc:
dc:84:b3:b0:08:18:ea:a3:fa:1a:50:d4:e4:8e:b0:84:55:ce:
60:b8:1b:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1
NjBBRTcwODQwHhcNMjYwNTEyMTczNjE4WhcNMjYwNTE5MTczNjE4WjAYMRYwFAYD
VQQDEw02YTAzNjUxMi1iNDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqxaDh8i2DOp/ZNgIewljkW+3dTD0fRyNVnP3j93eTNMgnX46D+XjRtND1Mpk
YMiFRsd69Jjb8fHIvE+HxITkHvo15o+BGwK533ByRcN/BX1e+92qS4KAV//lHKmg
vJru+vB1Od6L5Mic6qyBfYqxLAFoqWjYdIu6A9Nb5VHBq1rMI+DM9XNn75UTioex
IWCkG5IdRL0yzSR41+/pAegf2axxrLYyN8awQ4tW4mvd2RkdvemvQHF/4QqveOhy
D/BF1ZBCxCg0k0cno0RvN5a7wN2h6KvgPYNsF3KSC5/EkTOdMv98B5At5usI0zM2
LTu0Aj32v6mLuml6RuoYz7bbswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABmjLaA
ymMqfR5I9SEcpFO44jrkMB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3
MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUI0RS9BMjg0M0MwODk3MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlS
aFVxSWVzcVdFTHhXQ3VjSVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAky4QFLVJbN8LZvpZ0z2q29pxe/kLqzNFy0LvQGDmKkaIFRZcSi0cLOAvixj+
NaayN6lwlGd4EBx0AMmvGtJA4lg/HQzt4YlInHxuEWvXuCCCxnu4SiBU/JiJ3KoG
2h1atQXS44p0pNbwHsCyEVhCArG+PKSEJcI0PzwjcMTkHk++3Lc3t6KDbiR4TQ9/
X5eyDzAmlHqyPV8UC7dEjXBxyHuQGV742SrluSexsibOLV1y9vfy4/9vpFfl8kUX
yxg7b9ayisisnmuy8blIfj6Ozdg8n6229v22zFCRzNmvNVYigYGwYoZmctv83ISz
sAgY6qP6GlDU5I6whFXOYLgbpQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:27:36 2026 by rpki-client