
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json)
Hash identifier: jNCVhjWs0dhi+G9L/Us+EDdgSUc6CRLHxAtFvL26L5c=
Subject key identifier: C9:25:46:CE:28:C5:45:6A:94:C3:06:B1:F6:4D:11:A0:18:B6:D1:55
Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Certificate serial: 0113
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
Manifest number: 0105
Signing time: Mon 11 May 2026 06:19:11 +0000
Manifest this update: Mon 11 May 2026 06:19:10 +0000
Manifest next update: Mon 18 May 2026 06:19:10 +0000
Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: FEWZoFG/WWknfO0tSxrz1dEZI4RLNWyxiOFlz+RGyoY=)
2: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: QhYXroPd+KBbNk/Tc/bCNExY+7W0cu8INv3BcwAJYmQ=)
3: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: DfxQYn473L3GRcLQOcasHyVtEcw9/bAiZQ1Qjo4k8zI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Validity
Not Before: May 11 06:19:10 2026 GMT
Not After : May 18 06:19:10 2026 GMT
Subject: CN=6a0174df-bbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:65:d1:46:57:c4:e0:6f:4c:29:04:f3:de:
bb:c0:2b:56:2f:04:65:0c:fc:96:b7:16:cc:33:b4:
e1:d1:70:3f:b3:a5:ae:a0:e4:e4:39:d3:ac:40:62:
10:d7:c4:30:d5:3e:82:46:d7:42:2d:ec:03:38:c2:
a9:60:36:eb:e1:3a:41:4f:4b:0f:26:22:54:f2:9c:
b1:e4:6b:2b:7d:8c:5c:27:35:66:59:53:58:2d:6d:
e8:41:7d:16:35:76:8d:ab:be:dd:ab:1c:56:60:44:
29:d5:28:91:65:05:ec:06:8c:3d:69:cd:65:8b:19:
31:0e:7f:e7:9c:59:1f:fb:e4:36:4b:1e:d1:89:8d:
2b:14:2d:ab:e9:4e:2a:9a:d2:fc:2c:5a:9b:56:44:
fb:7e:a6:32:c7:87:21:5a:0f:9f:35:39:a9:9c:e2:
0c:cc:49:f3:58:e7:9e:ff:4b:f5:8a:79:4d:33:21:
40:77:21:2e:f6:b6:bc:1e:42:c8:2a:81:f0:19:38:
08:59:f9:a3:19:ca:c6:98:a2:33:a6:e7:fb:2d:e4:
e5:eb:a3:83:d8:66:d6:0c:91:41:6a:30:08:20:2f:
62:9e:58:ac:63:79:dc:67:0f:ed:3f:b7:98:69:58:
46:98:52:88:9a:2e:48:d5:ab:32:19:0b:b4:e9:44:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:25:46:CE:28:C5:45:6A:94:C3:06:B1:F6:4D:11:A0:18:B6:D1:55
X509v3 Authority Key Identifier:
keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:88:6b:fe:53:03:ed:a3:37:2b:ac:9e:c3:03:f0:3a:e3:db:
7b:db:23:cf:89:65:8e:e2:1a:d0:f3:7f:52:c8:f5:9b:72:72:
9b:04:02:b6:66:7b:10:c6:dc:41:66:b6:4e:15:a1:38:1e:48:
fa:eb:1f:35:de:07:9e:00:24:4f:91:b1:14:da:a3:89:ba:89:
bd:66:7c:51:56:49:77:ce:61:0e:88:73:fb:fd:f3:a3:76:b5:
a5:70:da:7d:70:bf:33:4f:c5:9d:01:9a:db:e9:4d:60:a2:6c:
f2:6a:a7:01:57:4e:f6:89:74:9c:24:9e:54:e5:b4:38:f8:61:
83:78:19:76:95:cf:3e:ea:41:16:7e:d9:a1:96:69:ca:1b:8d:
73:4d:21:bb:05:02:02:86:ac:ef:e3:26:1c:77:b7:4f:a8:cd:
4c:15:b9:5e:a8:66:3f:0e:c7:59:59:8b:4d:b2:37:2a:d1:66:
27:90:45:10:dc:5d:dd:f4:43:67:79:e4:84:7d:af:c1:1d:c6:
6f:26:5d:23:dd:e0:a7:90:3b:9c:71:0a:50:5a:7a:89:c1:0a:
b2:a1:a2:5c:27:12:34:f9:16:a4:44:ea:bb:7c:25:36:91:e4:
7c:6e:af:89:e6:a2:e5:c1:5c:98:40:77:56:b3:7f:f3:22:a2:
2e:80:be:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:06:45 2026 by rpki-client