
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
File: HT4YuPamfZKWztceIZJFoygFJn0.mft (raw, json)
Hash identifier: E1Rv5S/Tnr6qp/KZzLM1FaYtjTyMzQghoXIa4yqN2l8=
Subject key identifier: 6E:49:84:45:18:06:7C:93:1A:17:3C:97:73:F6:67:0E:97:68:D0:7E
Authority key identifier: 1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
Certificate issuer: /CN=A91AD5C8/serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
Manifest number: 31
Signing time: Sun 05 Apr 2026 08:00:56 +0000
Manifest this update: Sun 05 Apr 2026 08:00:55 +0000
Manifest next update: Sun 12 Apr 2026 08:00:55 +0000
Files and hashes: 1: HT4YuPamfZKWztceIZJFoygFJn0.crl (hash: INvJGXbhW2NTlpnOerMxACjzL+wUWQtCEv9e7XKFN18=)
2: 40DFA7D2EF8811F0A94034DF606F56BC.roa (hash: r01cCM8Cr1fBBAypHwZvdCaBHe7BaHRTnIOSdsNilxQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD5C8, serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Validity
Not Before: Apr 5 08:00:55 2026 GMT
Not After : Apr 12 08:00:55 2026 GMT
Subject: CN=69d216b8-afd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9b:fe:58:de:7f:64:98:a2:51:f3:23:f1:e4:
bd:c8:e1:a3:a7:fe:7d:54:4c:4d:21:92:f6:20:3e:
82:fb:5c:34:fd:60:4c:0c:ab:d7:75:2a:b1:50:b6:
8f:22:22:d4:03:09:0a:d2:2e:29:03:20:39:ac:f3:
58:5f:cd:ca:93:8c:79:3b:4e:c7:65:d9:24:90:6a:
a7:8e:2c:cd:ce:47:95:2e:50:52:4d:13:13:13:69:
c9:e4:04:8e:9f:82:3f:b5:16:a3:76:5f:f0:17:75:
c2:61:bb:ad:2b:5a:fc:b9:34:46:87:93:af:8e:bf:
77:63:af:a0:a8:71:03:5a:63:e7:a3:5d:4f:ef:6f:
42:ad:46:af:2d:02:f8:56:4b:00:79:e9:57:38:16:
8c:45:a4:54:39:f6:c7:41:a0:c2:27:80:c3:7c:3e:
26:97:a9:d4:8c:1c:87:d2:33:19:39:87:b7:99:f4:
8c:79:64:7f:d2:23:eb:61:f4:92:1a:25:5e:ed:4e:
7f:39:7a:81:ea:24:f4:2f:4b:7d:fb:6d:24:3a:0c:
04:9b:c6:bc:cd:3c:de:ff:aa:a5:81:a9:3b:83:24:
03:50:dd:5d:a0:15:50:0a:fb:6a:b1:2f:65:60:75:
2b:3f:33:10:80:ef:48:3f:59:11:1b:ae:2f:c2:40:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:49:84:45:18:06:7C:93:1A:17:3C:97:73:F6:67:0E:97:68:D0:7E
X509v3 Authority Key Identifier:
keyid:1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:7c:4f:cc:e6:8e:3d:b2:20:4e:90:7d:bf:20:77:a0:4b:eb:
87:6d:1d:79:a8:1f:f1:2d:74:c8:cb:59:40:f9:77:6d:6d:fb:
8c:92:b3:f0:bb:e2:30:e0:bb:a7:81:ac:3c:ce:32:50:6a:27:
8f:f9:55:c3:ae:1e:86:de:72:ef:13:53:55:aa:ca:fe:5b:c4:
a1:f6:f8:3c:fa:b6:41:2e:ff:f9:23:28:22:b7:99:a7:52:02:
2f:33:49:62:70:e9:98:d5:4b:b9:42:d2:82:c5:0a:8b:63:1d:
cb:c2:8c:23:01:7f:86:f6:ab:01:42:bb:4b:80:1d:fa:bb:4b:
2b:61:fe:a5:81:d4:e7:a8:f2:5c:e3:32:7f:3b:1a:01:20:c2:
5a:58:f6:ea:88:d0:1c:39:1d:9a:4a:61:da:6c:d6:7b:51:8b:
bd:b1:f7:e2:fb:21:8d:16:d5:05:91:d1:41:53:e0:61:69:c1:
e6:71:d2:88:c0:20:99:e8:8b:7d:6c:c5:10:7a:c7:e7:a5:c1:
9b:ba:d2:20:ac:43:5c:1b:07:52:37:ca:13:c8:93:03:f7:20:
bf:98:cb:dd:dd:8c:99:55:d3:cc:5f:bd:5e:b8:88:d0:3a:07:
fc:7c:35:de:c5:0a:f9:cf:50:26:66:04:b9:b5:a2:2d:34:ba:
af:fb:fb:10
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
RDVDODExMC8GA1UEBRMoMUQzRTE4QjhGNkE2N0Q5Mjk2Q0VENzFFMjE5MjQ1QTMy
ODA1MjY3RDAeFw0yNjA0MDUwODAwNTVaFw0yNjA0MTIwODAwNTVaMBgxFjAUBgNV
BAMTDTY5ZDIxNmI4LWFmZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZm/5Y3n9kmKJR8yPx5L3I4aOn/n1UTE0hkvYgPoL7XDT9YEwMq9d1KrFQto8i
ItQDCQrSLikDIDms81hfzcqTjHk7Tsdl2SSQaqeOLM3OR5UuUFJNExMTacnkBI6f
gj+1FqN2X/AXdcJhu60rWvy5NEaHk6+Ov3djr6CocQNaY+ejXU/vb0KtRq8tAvhW
SwB56Vc4FoxFpFQ59sdBoMIngMN8PiaXqdSMHIfSMxk5h7eZ9Ix5ZH/SI+th9JIa
JV7tTn85eoHqJPQvS337bSQ6DASbxrzNPN7/qqWBqTuDJANQ3V2gFVAK+2qxL2Vg
dSs/MxCA70g/WREbri/CQIBdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbkmERRgG
fJMaFzyXc/ZnDpdo0H4wHwYDVR0jBBgwFoAUHT4YuPamfZKWztceIZJFoygFJn0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFENUM4LzgwRDhCNDhBRUY4
NTExRjA5RDZERTgzMTYwNkY1NkJDL0hUNFl1UGFtZlpLV3p0Y2VJWkpGb3lnRkpu
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSFQ0WXVQYW1mWktXenRjZUlaSkZveWdGSm4wLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFE
NUM4LzgwRDhCNDhBRUY4NTExRjA5RDZERTgzMTYwNkY1NkJDL0hUNFl1UGFtZlpL
V3p0Y2VJWkpGb3lnRkpuMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBzfE/M5o49siBOkH2/IHegS+uHbR15qB/xLXTIy1lA+XdtbfuMkrPwu+Iw4Lun
gaw8zjJQaieP+VXDrh6G3nLvE1NVqsr+W8Sh9vg8+rZBLv/5Iygit5mnUgIvM0li
cOmY1Uu5QtKCxQqLYx3LwowjAX+G9qsBQrtLgB36u0srYf6lgdTnqPJc4zJ/OxoB
IMJaWPbqiNAcOR2aSmHabNZ7UYu9sffi+yGNFtUFkdFBU+BhacHmcdKIwCCZ6It9
bMUQesfnpcGbutIgrENcGwdSN8oTyJMD9yC/mMvd3YyZVdPMX71euIjQOgf8fDXe
xQr5z1AmZgS5taItNLqv+/sQ
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:40 2026 by rpki-client