
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
File: H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft (raw, json)
Hash identifier: IN1VP1fEgizpEg3nFUsXq7VOvvpmqaiNZrNHr+ExHnE=
Subject key identifier: BC:14:57:E2:E1:78:28:3A:14:61:56:A7:09:CF:0B:74:1D:71:80:05
Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24
Certificate issuer: /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
Manifest number: E0
Signing time: Mon 11 May 2026 06:43:56 +0000
Manifest this update: Mon 11 May 2026 06:43:56 +0000
Manifest next update: Mon 18 May 2026 06:43:56 +0000
Files and hashes: 1: H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl (hash: +Ktjk0Lt3lBbrqLgF4tgEiafEiaJHku//ri7g1/XUgE=)
2: 0664C974FEF811EFB0C52572C4F9AE02.roa (hash: VTTmes8N3+DkLFdnT/jEg6MX9n3Ds/jhDY1DgH8WfVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl
rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8282, serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
Validity
Not Before: May 11 06:43:56 2026 GMT
Not After : May 18 06:43:56 2026 GMT
Subject: CN=6a017aac-6a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:75:31:09:7a:bd:c2:69:08:30:c7:c1:c3:
78:5d:a0:da:50:cb:07:3c:88:9e:00:be:ac:92:66:
74:4c:18:fc:5f:17:99:c5:49:32:ac:ac:4f:fc:2f:
17:b8:c8:74:e2:04:96:ca:2b:03:d7:6b:6d:01:0e:
68:74:9f:8c:2c:87:18:da:78:ec:d1:bc:70:06:bd:
a3:2d:10:8f:78:2a:f4:93:a6:8b:da:d0:78:8a:5f:
94:1f:41:a7:cd:b5:08:13:4b:c3:02:80:b2:92:f6:
79:8f:fd:d2:73:82:c2:ec:9e:68:e2:eb:c4:44:c2:
8b:7d:66:31:95:80:04:0d:97:44:db:dc:f4:a8:ab:
97:0f:cb:5b:95:63:7f:17:f5:c5:25:fc:d2:f7:b0:
f0:ad:7a:e8:c7:7f:e8:5a:77:a2:9c:f1:3c:93:75:
32:5a:4c:63:36:82:e1:26:1e:32:19:e6:1b:8f:8a:
ec:01:88:8c:e5:8c:27:b4:75:ea:e4:73:18:f1:22:
b5:b5:fc:e9:ee:9b:6b:5e:87:8e:ac:09:c5:84:14:
5c:03:d5:75:00:6b:fe:cc:d9:d0:29:fc:74:b8:90:
1a:bf:45:31:ac:ad:85:33:4c:a0:fe:2d:44:bd:fb:
6f:81:61:27:07:13:43:66:39:f4:a8:85:c3:1f:cd:
0a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:14:57:E2:E1:78:28:3A:14:61:56:A7:09:CF:0B:74:1D:71:80:05
X509v3 Authority Key Identifier:
keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:9e:bc:12:b2:f9:fa:1f:ce:b4:00:c0:81:e6:a1:88:e4:71:
eb:07:c8:21:02:66:27:0c:40:db:9f:24:42:c9:4e:a4:8c:03:
9e:7e:51:35:81:2a:cf:a8:af:03:13:bd:a2:2c:8e:8b:90:d2:
0e:7f:f9:a8:34:58:9a:48:30:c3:86:30:1a:70:62:65:6c:6f:
bd:b5:9d:83:3a:0a:d3:1f:1a:cd:bd:ba:b6:97:3c:69:ac:ab:
16:6b:f2:d5:1d:25:f2:18:54:f1:be:d3:bf:e4:46:41:0a:33:
a2:c8:2a:58:e7:36:f9:52:5f:6b:84:e4:36:62:69:f2:4b:4b:
46:26:62:3b:9a:2a:85:59:aa:c2:27:b8:a3:4a:22:f3:30:8c:
02:2c:53:87:62:46:75:98:27:f5:88:2e:07:4a:a3:ed:42:11:
f8:66:50:00:db:61:50:7b:0f:6d:c2:c6:74:f8:50:16:7e:09:
99:4e:0e:a3:f1:c1:ae:1b:82:87:6c:72:a1:89:9f:b1:20:51:
e3:9e:d1:4f:9e:e0:64:43:8b:a8:1b:8f:ea:73:86:ef:6e:c1:
bb:d7:c3:c8:60:d9:86:2e:04:76:32:88:37:13:a3:2b:51:33:
39:63:6a:ef:99:cd:e9:90:c5:ec:eb:5e:40:f1:d3:bb:6d:d2:
85:5d:b2:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgyODIxMTAvBgNVBAUTKDFGNERDRTM0MzlCMUY0MDM1RkZGOEM3MUNFMzU5RTVE
MjBFNjlBMjQwHhcNMjYwNTExMDY0MzU2WhcNMjYwNTE4MDY0MzU2WjAYMRYwFAYD
VQQDEw02YTAxN2FhYy02YThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs6t1MQl6vcJpCDDHwcN4XaDaUMsHPIieAL6skmZ0TBj8XxeZxUkyrKxP/C8X
uMh04gSWyisD12ttAQ5odJ+MLIcY2njs0bxwBr2jLRCPeCr0k6aL2tB4il+UH0Gn
zbUIE0vDAoCykvZ5j/3Sc4LC7J5o4uvERMKLfWYxlYAEDZdE29z0qKuXD8tblWN/
F/XFJfzS97DwrXrox3/oWneinPE8k3UyWkxjNoLhJh4yGeYbj4rsAYiM5YwntHXq
5HMY8SK1tfzp7ptrXoeOrAnFhBRcA9V1AGv+zNnQKfx0uJAav0UxrK2FM0yg/i1E
vftvgWEnBxNDZjn0qIXDH80KGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLwUV+Lh
eCg6FGFWpwnPC3QdcYAFMB8GA1UdIwQYMBaAFB9NzjQ5sfQDX/+Mcc41nl0g5pok
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODI4Mi8yRjI1M0MxQUZC
RkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9IMDNPTkRteDlBTmZfNHh4empXZVhTRG1t
aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0gwM09ORG14OUFOZl80eHh6aldlWFNEbW1pUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODI4Mi8yRjI1M0MxQUZCRkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9IMDNPTkRteDlB
TmZfNHh4empXZVhTRG1taVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiZ68ErL5+h/OtADAgeahiORx6wfIIQJmJwxA258kQslOpIwDnn5RNYEqz6iv
AxO9oiyOi5DSDn/5qDRYmkgww4YwGnBiZWxvvbWdgzoK0x8azb26tpc8aayrFmvy
1R0l8hhU8b7Tv+RGQQozosgqWOc2+VJfa4TkNmJp8ktLRiZiO5oqhVmqwie4o0oi
8zCMAixTh2JGdZgn9YguB0qj7UIR+GZQANthUHsPbcLGdPhQFn4JmU4Oo/HBrhuC
h2xyoYmfsSBR457RT57gZEOLqBuP6nOG727Bu9fDyGDZhi4EdjKINxOjK1EzOWNq
75nN6ZDF7OteQPHTu23ShV2ydA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:26:47 2026 by rpki-client