
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
File: hNqJJ83vUDOW9ScgGU65MSCdPzo.mft (raw, json)
Hash identifier: vzW1vFYEUb8Kxq4JSFZDuQsEZPqXIVjJ49a/Upb+9YQ=
Subject key identifier: E7:1F:5E:BB:88:08:B2:83:85:4D:81:3E:BC:B8:37:E8:28:EF:29:C5
Authority key identifier: 84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A
Certificate issuer: /CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
Certificate serial: 03B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
Manifest number: 03A6
Signing time: Sun 05 Apr 2026 00:30:33 +0000
Manifest this update: Sun 05 Apr 2026 00:30:32 +0000
Manifest next update: Sun 12 Apr 2026 00:30:32 +0000
Files and hashes: 1: hNqJJ83vUDOW9ScgGU65MSCdPzo.crl (hash: WpRtvf6H+aIRFoiU6doKdSH7BQK4t3NcPxm9O1DzD+4=)
2: 00F0B7EEA87411EF88F5C638C4F9AE02.roa (hash: elymg/oKLo36bQB76f3/BjLy1dUOOeqORBslgCNGm4w=)
3: 3EABAF20D8E311EC8F274181C4F9AE02.roa (hash: PpySkmXHDFAMdn8q7qJMbkbAjwFyZ6Dte8VkGbnBdUI=)
4: 6910E952A86A11EF89DA976DC4F9AE02.roa (hash: VgHpUmv5XapUWkoHMwq6CHIEaAxNeoc/taSmWAxGkC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl
rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953 (0x3b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F051, serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
Validity
Not Before: Apr 5 00:30:32 2026 GMT
Not After : Apr 12 00:30:32 2026 GMT
Subject: CN=69d1ad29-62a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:9a:d9:e3:72:e8:b3:f4:18:f3:9a:ba:fd:
1c:15:37:00:91:31:a4:8f:55:f5:eb:b1:09:49:72:
ef:67:1a:e5:b0:10:9a:36:8d:c5:1f:40:4c:48:79:
fd:09:8c:d0:24:89:16:cd:84:37:4c:62:f2:f7:c3:
a3:ee:a1:3d:34:ce:20:ec:67:23:cd:1d:5b:5a:cc:
e9:b1:2d:ad:28:3c:3b:35:61:a4:fb:88:3d:f1:a5:
6f:04:e0:f4:c6:08:ab:2f:7f:e0:cf:5d:eb:2b:8f:
cb:02:86:06:e3:95:07:d2:90:a0:29:3a:1c:9d:eb:
1f:cf:9a:51:ad:84:99:44:d7:77:2d:b4:4e:7f:03:
f6:ca:78:5c:12:a6:56:33:a8:11:e5:53:95:89:78:
b8:2d:d2:51:18:92:0e:92:c0:ca:da:70:2d:b9:5c:
ca:7b:e1:0a:df:f9:5f:8e:ad:30:2a:82:6f:13:2b:
13:ef:50:22:82:0b:ce:d1:71:17:40:11:45:b7:0a:
0a:4f:54:4f:ea:5b:16:bf:77:13:34:fb:de:99:33:
61:75:77:79:66:7c:09:00:cd:2c:2f:2d:da:71:53:
18:52:30:6f:e3:91:a3:ce:2c:6b:b9:37:9f:36:74:
b1:c8:fa:15:2d:fc:89:e8:fc:6e:a1:9e:f0:e3:ec:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1F:5E:BB:88:08:B2:83:85:4D:81:3E:BC:B8:37:E8:28:EF:29:C5
X509v3 Authority Key Identifier:
keyid:84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b5:c9:e1:02:36:b2:9e:d8:76:66:e0:b3:4e:81:49:b6:79:
96:26:37:a4:47:9c:ac:06:56:82:33:56:3b:6d:1d:42:63:ba:
69:1a:24:b1:b8:a3:02:7a:b7:e9:b2:b9:b7:a7:73:91:7a:ab:
61:17:51:74:71:bc:d8:97:3d:7f:eb:d1:58:dd:aa:41:0a:6f:
24:a5:f8:0a:ba:2e:f3:ac:4f:64:1d:29:b9:f8:74:75:26:ff:
32:c8:53:28:4f:ea:aa:70:d6:5d:43:a4:5d:ac:32:91:f5:f1:
8c:ec:55:92:e0:84:c8:e2:51:18:3f:1c:13:7b:c0:9f:ae:c7:
f6:bd:18:ff:9a:1e:d6:b7:ae:4e:18:c4:19:e6:38:73:d5:ca:
8f:f9:01:c3:94:bd:dd:6e:cd:7f:2a:24:96:90:9b:12:ff:67:
55:59:52:ec:55:8f:26:b7:cd:8a:a8:67:a0:2a:b0:5a:e9:cb:
87:29:ef:21:47:29:2c:4b:52:bc:e1:2b:c7:db:93:c5:8f:94:
21:3c:a6:82:07:db:fa:a5:06:7c:7a:e1:a9:9d:31:b1:b2:1e:
60:37:16:cd:5b:40:75:fc:2c:a3:9b:2a:aa:a4:31:e3:53:10:
0b:2a:3f:ce:a8:3a:e3:71:d9:f4:ec:27:57:e4:ff:74:21:bc:
4d:cf:f2:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YwNTExMTAvBgNVBAUTKDg0REE4OTI3Q0RFRjUwMzM5NkY1MjcyMDE5NEVCOTMx
MjA5RDNGM0EwHhcNMjYwNDA1MDAzMDMyWhcNMjYwNDEyMDAzMDMyWjAYMRYwFAYD
VQQDEw02OWQxYWQyOS02MmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuMua2eNy6LP0GPOauv0cFTcAkTGkj1X167EJSXLvZxrlsBCaNo3FH0BMSHn9
CYzQJIkWzYQ3TGLy98Oj7qE9NM4g7GcjzR1bWszpsS2tKDw7NWGk+4g98aVvBOD0
xgirL3/gz13rK4/LAoYG45UH0pCgKTocnesfz5pRrYSZRNd3LbROfwP2ynhcEqZW
M6gR5VOViXi4LdJRGJIOksDK2nAtuVzKe+EK3/lfjq0wKoJvEysT71AiggvO0XEX
QBFFtwoKT1RP6lsWv3cTNPvemTNhdXd5ZnwJAM0sLy3acVMYUjBv45GjzixruTef
NnSxyPoVLfyJ6PxuoZ7w4+wa8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOcfXruI
CLKDhU2BPry4N+go7ynFMB8GA1UdIwQYMBaAFITaiSfN71AzlvUnIBlOuTEgnT86
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjA1MS81QUFEOUQ3RUQ4
REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVET1c5U2NnR1U2NU1TQ2RQ
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hOcUpKODN2VURPVzlTY2dHVTY1TVNDZFB6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjA1MS81QUFEOUQ3RUQ4REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVE
T1c5U2NnR1U2NU1TQ2RQem8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoLXJ4QI2sp7Ydmbgs06BSbZ5liY3pEecrAZWgjNWO20dQmO6aRoksbijAnq3
6bK5t6dzkXqrYRdRdHG82Jc9f+vRWN2qQQpvJKX4Crou86xPZB0pufh0dSb/MshT
KE/qqnDWXUOkXawykfXxjOxVkuCEyOJRGD8cE3vAn67H9r0Y/5oe1reuThjEGeY4
c9XKj/kBw5S93W7NfyoklpCbEv9nVVlS7FWPJrfNiqhnoCqwWunLhynvIUcpLEtS
vOErx9uTxY+UITymggfb+qUGfHrhqZ0xsbIeYDcWzVtAdfwso5sqqqQx41MQCyo/
zqg643HZ9OwnV+T/dCG8Tc/y+Q==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:26 2026 by rpki-client