
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
File: HmATrx-FZOqgCX2x8haHTEt4Zw4.mft (raw, json)
Hash identifier: gQ0qsfYgI5EqZ3Ct+P/9N5VGsGDsbtedZDFTre+foLU=
Subject key identifier: 5C:8B:A1:46:25:65:FF:80:1A:46:D5:1A:13:3F:00:E7:D1:E2:72:6A
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Certificate issuer: /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
Manifest number: 01EC
Signing time: Wed 25 Mar 2026 02:41:49 +0000
Manifest this update: Wed 25 Mar 2026 02:41:49 +0000
Manifest next update: Wed 01 Apr 2026 02:41:49 +0000
Files and hashes: 1: HmATrx-FZOqgCX2x8haHTEt4Zw4.crl (hash: +qosmzOucO6hgw8bd+hgNBWwMlZ3Rpe/KkUI750y3VY=)
2: F1A4DAD6403211EEB47BF84AC4F9AE02.roa (hash: FdNaF3+d7P8rDGstXuH8gApZBnIYbbzLiawSXMHrTM8=)
3: 1042D952157F11F0BA309342C4F9AE02.roa (hash: fqdoOBIiwQy8idxxM7YMLxvJT+7Eo0Bpc31Gs3WweTY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Validity
Not Before: Mar 25 02:41:49 2026 GMT
Not After : Apr 1 02:41:49 2026 GMT
Subject: CN=69c34b6d-2ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:01:68:40:f9:c0:93:4f:04:04:87:ad:4c:df:
ae:20:14:93:62:41:7d:6e:bb:b6:7a:5b:68:90:08:
32:55:86:8b:ca:ce:de:17:11:f5:da:a5:0a:f9:21:
32:47:3a:a3:c6:6f:d5:2b:9a:c4:0d:f8:49:c1:c8:
6f:9a:19:c4:c9:a7:a6:4a:3a:cf:96:ec:fb:06:94:
3a:34:50:35:d8:49:6c:55:8a:3f:42:aa:4d:b2:07:
99:3e:ab:83:36:72:49:7e:a2:05:b1:8b:28:c8:e5:
8c:6b:66:f0:43:78:c4:bf:f8:3c:41:d2:16:9f:0f:
19:fd:b7:a1:02:f8:01:cd:a8:a0:92:08:5e:a4:e4:
d2:03:34:05:59:4c:44:5d:03:fd:5e:80:ce:dc:ac:
45:87:05:92:aa:a8:ed:66:e9:1a:f4:9f:56:a2:d9:
91:c0:ef:1c:32:29:e7:92:71:f1:42:f7:01:b4:2f:
03:1d:0d:83:f7:b0:0e:72:aa:f6:9a:89:b3:67:ac:
5b:05:84:a6:6b:5f:ca:11:ba:7c:51:da:3e:36:ea:
6a:c1:97:8a:d7:71:f5:7d:f7:15:5b:41:b3:60:5c:
fe:5a:dd:4f:e2:c0:e1:28:95:75:a5:db:4a:09:88:
6c:40:cf:f4:fd:42:59:d4:d0:af:2c:1d:10:43:8b:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8B:A1:46:25:65:FF:80:1A:46:D5:1A:13:3F:00:E7:D1:E2:72:6A
X509v3 Authority Key Identifier:
keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:f7:2a:85:b1:ed:57:a2:fc:73:cd:27:69:d6:b3:f4:bf:ad:
05:fd:60:d1:bf:f7:34:91:55:76:a6:81:ca:c8:68:01:46:85:
23:3e:e6:42:ac:25:f1:f3:81:f0:40:68:25:06:24:d0:34:d2:
4a:97:eb:ef:21:44:66:03:cc:c9:84:4d:9b:69:d2:a0:2e:e5:
78:8a:43:f1:4c:1c:9a:52:75:3c:51:03:6b:5b:e7:4a:3f:5d:
4d:ca:d2:15:71:79:f4:83:bc:de:cf:86:85:7f:55:49:cf:10:
ba:c8:80:10:f5:16:f9:38:60:45:e1:da:29:19:72:fa:dc:ef:
c1:ce:69:21:dd:c2:b5:dd:43:79:5f:98:e3:5c:ff:8b:22:b4:
7e:53:c9:94:a6:0d:18:92:60:c9:12:24:dd:49:8f:b7:f9:c2:
19:f3:8e:47:b4:96:c3:dc:46:92:e3:a5:52:20:cf:53:b2:04:
54:6c:45:d6:af:94:ad:f5:11:44:73:e1:f5:eb:c3:6f:e5:3e:
d2:a7:ea:23:9f:b8:c5:1d:40:d1:dc:3c:7b:76:00:73:90:fc:
06:40:85:d6:7c:a4:e6:8c:03:7d:45:28:6d:d9:49:a7:62:52:
16:04:94:0d:b0:71:c1:b5:f1:95:c9:1b:48:00:75:84:c2:89:
14:0e:64:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkyOEQxMTAvBgNVBAUTKDFFNjAxM0FGMUY4NTY0RUFBMDA5N0RCMUYyMTY4NzRD
NEI3ODY3MEUwHhcNMjYwMzI1MDI0MTQ5WhcNMjYwNDAxMDI0MTQ5WjAYMRYwFAYD
VQQDEw02OWMzNGI2ZC0yZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmAFoQPnAk08EBIetTN+uIBSTYkF9bru2eltokAgyVYaLys7eFxH12qUK+SEy
Rzqjxm/VK5rEDfhJwchvmhnEyaemSjrPluz7BpQ6NFA12ElsVYo/QqpNsgeZPquD
NnJJfqIFsYsoyOWMa2bwQ3jEv/g8QdIWnw8Z/behAvgBzaigkghepOTSAzQFWUxE
XQP9XoDO3KxFhwWSqqjtZuka9J9WotmRwO8cMinnknHxQvcBtC8DHQ2D97AOcqr2
momzZ6xbBYSma1/KEbp8Udo+NupqwZeK13H1ffcVW0GzYFz+Wt1P4sDhKJV1pdtK
CYhsQM/0/UJZ1NCvLB0QQ4t5MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFyLoUYl
Zf+AGkbVGhM/AOfR4nJqMB8GA1UdIwQYMBaAFB5gE68fhWTqoAl9sfIWh0xLeGcO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4RC82MUExREYyRTQw
MzIxMUVFQkRBNTA5NEFDNEY5QUUwMi9IbUFUcngtRlpPcWdDWDJ4OGhhSFRFdDRa
dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0htQVRyeC1GWk9xZ0NYMng4aGFIVEV0NFp3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTI4RC82MUExREYyRTQwMzIxMUVFQkRBNTA5NEFDNEY5QUUwMi9IbUFUcngtRlpP
cWdDWDJ4OGhhSFRFdDRadzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUvcqhbHtV6L8c80nadaz9L+tBf1g0b/3NJFVdqaByshoAUaFIz7mQqwl8fOB
8EBoJQYk0DTSSpfr7yFEZgPMyYRNm2nSoC7leIpD8UwcmlJ1PFEDa1vnSj9dTcrS
FXF59IO83s+GhX9VSc8QusiAEPUW+ThgReHaKRly+tzvwc5pId3Ctd1DeV+Y41z/
iyK0flPJlKYNGJJgyRIk3UmPt/nCGfOOR7SWw9xGkuOlUiDPU7IEVGxF1q+UrfUR
RHPh9evDb+U+0qfqI5+4xR1A0dw8e3YAc5D8BkCF1nyk5owDfUUobdlJp2JSFgSU
DbBxwbXxlckbSAB1hMKJFA5kgg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:39 2026 by rpki-client