
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
File: Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json)
Hash identifier: p+T3acPGS8yEE1F14w7D6CtQpBm7mXcBJo8H4D1OBkk=
Subject key identifier: 05:95:D4:58:F0:E8:34:0C:2B:B0:DF:CC:02:16:05:CE:00:2B:42:06
Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
Certificate issuer: /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Certificate serial: 0773
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
Manifest number: 076C
Signing time: Tue 24 Mar 2026 21:22:00 +0000
Manifest this update: Tue 24 Mar 2026 21:22:00 +0000
Manifest next update: Tue 31 Mar 2026 21:22:00 +0000
Files and hashes: 1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: pIBidbgS27I8EPXcVtiab7vb6qX2gbU2+uSuXgu7lPs=)
2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: EjQAXg2usCcTUh9gyvVBrkzQeLYgfkd976KZ0ehXsBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1907 (0x773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8D, serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Validity
Not Before: Mar 24 21:22:00 2026 GMT
Not After : Mar 31 21:22:00 2026 GMT
Subject: CN=69c30078-ad6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:11:3d:60:be:fd:a6:1a:60:34:98:20:10:
f6:c1:1f:04:0f:64:ee:57:d5:b7:ae:01:ec:d2:f0:
de:ae:42:f0:0d:89:c2:2d:86:5a:6c:f0:c8:d2:f0:
63:26:b7:e9:bd:bd:70:ac:43:8f:8c:70:d9:0c:51:
11:69:2b:3e:d9:20:db:ec:08:8e:4c:4b:80:7b:3e:
16:3f:61:bf:52:82:f8:ac:28:bb:b4:f4:f4:08:ef:
5b:8a:69:0d:df:32:d9:77:99:f3:8f:d5:08:a4:d3:
8a:5b:ed:5a:ed:d2:c5:0c:f3:96:9c:fa:4a:52:38:
e8:db:34:8e:46:01:23:e8:fd:d9:46:2f:89:df:d2:
bf:f2:6f:7f:e9:b2:ff:34:3e:6b:fd:b2:b7:8b:cd:
ec:dd:5d:64:e0:36:08:f3:aa:c2:d3:7f:3d:85:d8:
3b:27:f3:3e:74:0c:eb:f5:5c:80:7c:17:dd:49:0d:
a1:85:22:67:24:e8:50:fc:af:36:13:43:50:51:31:
70:c2:d1:fe:8d:2f:84:d9:62:09:2f:92:42:03:d7:
76:bb:96:18:6c:e8:42:42:99:71:99:aa:b2:9f:cb:
a4:c1:21:e3:7e:9c:ac:91:94:de:d5:62:da:88:b1:
fb:c1:f4:d1:61:ce:cd:fd:a2:dc:b0:68:a8:44:be:
c5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:95:D4:58:F0:E8:34:0C:2B:B0:DF:CC:02:16:05:CE:00:2B:42:06
X509v3 Authority Key Identifier:
keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:d2:cd:c5:f6:99:63:fe:97:51:dc:9a:28:b8:9e:10:1e:86:
61:bb:65:89:d7:fe:98:9a:c5:82:c8:cc:0a:f2:4a:21:e7:9a:
b9:0c:46:4c:5e:af:7d:d1:a2:3c:2d:75:03:e3:e3:7b:7d:d7:
a4:4c:99:91:cd:68:30:f4:65:f4:7e:cb:b5:44:24:77:58:22:
37:74:77:6b:f4:9e:84:09:2e:7b:93:d3:42:7e:e3:43:17:99:
08:ce:94:dd:56:9d:1f:fb:be:dc:d0:c2:e6:c8:aa:8c:75:eb:
91:6a:0b:58:2d:b6:95:cc:fc:8f:d7:2f:c6:b8:b5:a8:82:f1:
8e:b0:85:ad:1f:85:b4:74:ee:ea:22:62:fb:b7:b4:4b:8c:51:
72:c2:c7:c8:4a:4d:48:e9:9f:ec:18:a9:ea:6f:19:80:fe:f2:
b5:29:f0:97:92:dd:2b:a6:9f:1a:d1:61:59:39:12:31:ea:f0:
d0:f0:a2:3d:e3:35:2e:15:7f:91:0d:bf:f5:1b:0e:50:7c:42:
1b:55:29:8e:ae:57:e4:ba:33:aa:39:50:44:d1:60:f0:eb:3b:
c6:74:d6:ce:8c:7c:c3:e2:99:a3:53:da:c2:84:f8:ea:6e:63:
55:ef:2e:77:8b:02:ca:26:d8:f1:c2:33:f2:2e:83:fb:d4:26:
d2:59:b4:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZBOEQxMTAvBgNVBAUTKDFERUJCNzM3MUFCOTdCQjlGM0E5MDZFQjA3RDU5MUM5
Q0YzODhENUQwHhcNMjYwMzI0MjEyMjAwWhcNMjYwMzMxMjEyMjAwWjAYMRYwFAYD
VQQDEw02OWMzMDA3OC1hZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx0cRPWC+/aYaYDSYIBD2wR8ED2TuV9W3rgHs0vDerkLwDYnCLYZabPDI0vBj
Jrfpvb1wrEOPjHDZDFERaSs+2SDb7AiOTEuAez4WP2G/UoL4rCi7tPT0CO9bimkN
3zLZd5nzj9UIpNOKW+1a7dLFDPOWnPpKUjjo2zSORgEj6P3ZRi+J39K/8m9/6bL/
ND5r/bK3i83s3V1k4DYI86rC0389hdg7J/M+dAzr9VyAfBfdSQ2hhSJnJOhQ/K82
E0NQUTFwwtH+jS+E2WIJL5JCA9d2u5YYbOhCQplxmaqyn8ukwSHjfpyskZTe1WLa
iLH7wfTRYc7N/aLcsGioRL7FqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWV1Fjw
6DQMK7DfzAIWBc4AK0IGMB8GA1UdIwQYMBaAFB3rtzcauXu586kG6wfVkcnPOI1d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RC81NkZFRkY4MDU2
NEIxMUVCOEZFOUI0MjFDNEY5QUUwMi9IZXUzTnhxNWU3bnpxUWJyQjlXUnljODRq
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hldTNOeHE1ZTduenFRYnJCOVdSeWM4NGpWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkE4RC81NkZFRkY4MDU2NEIxMUVCOEZFOUI0MjFDNEY5QUUwMi9IZXUzTnhxNWU3
bnpxUWJyQjlXUnljODRqVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE9LNxfaZY/6XUdyaKLieEB6GYbtlidf+mJrFgsjMCvJKIeeauQxGTF6vfdGi
PC11A+Pje33XpEyZkc1oMPRl9H7LtUQkd1giN3R3a/SehAkue5PTQn7jQxeZCM6U
3VadH/u+3NDC5siqjHXrkWoLWC22lcz8j9cvxri1qILxjrCFrR+FtHTu6iJi+7e0
S4xRcsLHyEpNSOmf7Bip6m8ZgP7ytSnwl5LdK6afGtFhWTkSMerw0PCiPeM1LhV/
kQ2/9RsOUHxCG1Upjq5X5LozqjlQRNFg8Os7xnTWzox8w+KZo1PawoT46m5jVe8u
d4sCyibY8cIz8i6D+9Qm0lm0jw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:47:48 2026 by rpki-client