
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
File: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft (raw, json)
Hash identifier: piHtNmDhcTVgbB8zaVv7OdwDqzLuYwiv7ix59KB7CDs=
Subject key identifier: 59:01:B7:A0:B5:FE:2C:80:02:1C:DA:20:E1:E7:0A:BA:CD:6E:3B:78
Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE
Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE
Certificate serial: 031D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
Manifest number: 0316
Signing time: Wed 25 Mar 2026 00:48:58 +0000
Manifest this update: Wed 25 Mar 2026 00:48:58 +0000
Manifest next update: Wed 01 Apr 2026 00:48:58 +0000
Files and hashes: 1: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl (hash: 1nmmukNMY80+Vp5omX6DDAG4dE1bnkLonGJIFnCUKTg=)
2: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (hash: tmG9UV1j6ss0SYe2VwRFR5LxDz9mwNx2QSiZOYtwbyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl
rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 797 (0x31d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2A6D, serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE
Validity
Not Before: Mar 25 00:48:58 2026 GMT
Not After : Apr 1 00:48:58 2026 GMT
Subject: CN=69c330fa-f998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:6d:76:82:ee:93:ed:0c:ff:c5:e9:ff:80:
91:c9:a2:fb:01:bf:7d:2e:40:ce:ea:c3:85:b0:7f:
93:46:ab:52:8d:89:0a:74:eb:0e:19:b2:bb:53:16:
63:b4:8f:f4:46:66:f3:d3:21:8a:c2:56:bf:8d:2a:
6c:9b:83:56:ab:e3:50:e3:39:3f:8f:da:de:c7:fd:
8d:4f:e6:f8:96:14:c8:e8:92:ea:5a:fa:c7:d3:87:
3d:e2:5f:af:c4:77:9c:9d:40:ff:f9:fb:2c:90:77:
2d:94:b3:f1:23:e2:6c:80:f2:60:0d:a2:71:eb:89:
67:97:ba:b4:58:50:ca:ac:59:d9:9b:ed:b4:cc:72:
3c:3f:f9:9c:f2:7d:b9:0e:a8:39:85:4a:e2:b4:35:
c1:76:2c:2a:76:6a:0d:a3:ba:f5:77:3f:f8:ac:a8:
85:57:b3:ba:68:9c:6a:62:0f:39:3b:d9:26:55:25:
07:88:00:a6:d4:dc:27:60:75:05:6b:9a:87:41:fe:
66:39:62:8e:e2:dd:75:50:96:8e:3d:85:86:da:b0:
b7:b4:05:07:d2:49:03:79:4f:67:79:22:96:27:c1:
40:bb:9d:16:30:37:5a:88:fd:a2:b0:5a:7f:cb:e5:
2d:91:ce:fc:89:27:e7:de:32:40:6d:14:ff:44:08:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:01:B7:A0:B5:FE:2C:80:02:1C:DA:20:E1:E7:0A:BA:CD:6E:3B:78
X509v3 Authority Key Identifier:
keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:ff:12:59:30:02:3c:ee:5f:11:0d:a3:1c:61:b3:d3:65:8d:
31:a6:2b:64:85:1a:c8:22:44:b7:6c:84:82:b1:10:22:26:15:
11:72:c0:02:4d:8e:e7:16:91:4c:08:56:29:1d:a8:51:ef:07:
50:f8:c1:ac:61:5b:79:b3:fb:d0:2c:2d:05:c5:cc:90:3f:1e:
f0:0c:37:76:74:39:61:04:46:9c:28:d8:5b:bc:ed:73:6a:14:
08:f5:89:b4:ed:5a:c3:9f:bf:aa:3c:99:10:3e:e0:6f:a3:c2:
5d:8a:96:12:19:41:82:82:87:24:c8:29:a4:49:8b:6e:a1:03:
1c:cb:49:ee:3c:4e:7f:a5:df:e3:ce:eb:25:25:f3:8f:52:c1:
7e:47:51:e1:b5:2e:76:38:a8:97:0e:ad:67:f0:21:79:61:94:
50:a5:48:75:43:c6:82:2f:e4:4e:0d:c5:41:17:95:d5:41:92:
8d:9b:9f:fb:9e:e9:b8:86:95:68:54:0d:e1:ae:2a:b2:92:47:
b8:24:d6:96:9f:95:cd:67:ac:f4:79:43:87:6c:5d:11:e1:27:
35:ae:69:52:01:e6:f7:c2:7d:6c:37:ee:a0:1d:00:5a:e8:dd:
b4:2f:50:bd:d3:0e:ad:87:f1:fa:8f:5a:3b:d5:57:d6:0c:9e:
2f:cd:45:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJBNkQxMTAvBgNVBAUTKEZDN0IzOTRGOEY5Q0JGOUNERDIwOTNDMjcyNkRERkU5
MTNGQUE5Q0UwHhcNMjYwMzI1MDA0ODU4WhcNMjYwNDAxMDA0ODU4WjAYMRYwFAYD
VQQDEw02OWMzMzBmYS1mOTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsnFtdoLuk+0M/8Xp/4CRyaL7Ab99LkDO6sOFsH+TRqtSjYkKdOsOGbK7UxZj
tI/0Rmbz0yGKwla/jSpsm4NWq+NQ4zk/j9rex/2NT+b4lhTI6JLqWvrH04c94l+v
xHecnUD/+fsskHctlLPxI+JsgPJgDaJx64lnl7q0WFDKrFnZm+20zHI8P/mc8n25
Dqg5hUritDXBdiwqdmoNo7r1dz/4rKiFV7O6aJxqYg85O9kmVSUHiACm1NwnYHUF
a5qHQf5mOWKO4t11UJaOPYWG2rC3tAUH0kkDeU9neSKWJ8FAu50WMDdaiP2isFp/
y+Utkc78iSfn3jJAbRT/RAiStQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkBt6C1
/iyAAhzaIOHnCrrNbjt4MB8GA1UdIwQYMBaAFPx7OU+PnL+c3SCTwnJt3+kT+qnO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkE2RC83RjhENjNCNDBD
Q0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1emRJSlBDY20zZjZSUDZx
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19IczVUNC1jdjV6ZElKUENjbTNmNlJQNnFjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MkE2RC83RjhENjNCNDBDQ0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1
emRJSlBDY20zZjZSUDZxYzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIP8SWTACPO5fEQ2jHGGz02WNMaYrZIUayCJEt2yEgrEQIiYVEXLAAk2O5xaR
TAhWKR2oUe8HUPjBrGFbebP70CwtBcXMkD8e8Aw3dnQ5YQRGnCjYW7ztc2oUCPWJ
tO1aw5+/qjyZED7gb6PCXYqWEhlBgoKHJMgppEmLbqEDHMtJ7jxOf6Xf487rJSXz
j1LBfkdR4bUudjiolw6tZ/AheWGUUKVIdUPGgi/kTg3FQReV1UGSjZuf+57puIaV
aFQN4a4qspJHuCTWlp+VzWes9HlDh2xdEeEnNa5pUgHm98J9bDfuoB0AWujdtC9Q
vdMOrYfx+o9aO9VX1gyeL81Fjw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:48:53 2026 by rpki-client