
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
File: htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json)
Hash identifier: tttdq2NK7j7Sl9oaqvhCnslSZBxd0ZfoGXrhq4DfwTI=
Subject key identifier: EA:ED:5A:D3:A3:66:E0:8A:5F:56:31:D9:60:D8:6E:FA:40:F0:81:48
Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
Certificate issuer: /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
Manifest number: 021C
Signing time: Sat 03 Oct 2026 03:36:18 +0000
Manifest this update: Sat 03 Oct 2026 03:36:18 +0000
Manifest next update: Sat 10 Oct 2026 03:36:18 +0000
Files and hashes: 1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: REk/0VxSGudoCRUWYah0PevIyDADQ4AGh3sgJKWdkf0=)
2: 385B3E3A42EB11F187C800F790833773.roa (hash: 6c/ZfNRUFtVkneexnsNfXUm9PHRatrahA2gn++wqr0E=)
3: F9EE01A842E211F1B650BCD08E833773.roa (hash: k3W5LhVCwW7y1SCmE8HXWFyviI573wKItGciWn2x3E0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911933B, serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Validity
Not Before: Oct 3 03:36:18 2026 GMT
Not After : Oct 10 03:36:18 2026 GMT
Subject: CN=6ac07832-cebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:79:4b:50:2b:64:46:d4:bd:7d:7e:8b:7e:
eb:e8:80:ee:b9:66:fa:c7:ff:d7:43:68:87:a2:b5:
22:d2:95:83:53:22:96:fa:5f:71:85:93:64:9e:d0:
60:ab:dc:f2:0f:26:92:43:57:af:0b:2a:9b:90:8c:
b7:1a:f2:4c:e4:0e:ac:cb:72:47:02:f5:0a:a2:2a:
8b:03:a7:fd:17:d0:cd:2a:a8:cc:d4:34:c0:81:8a:
94:15:f4:7a:3e:2b:cf:aa:b1:69:d0:6c:b3:75:86:
05:7f:17:83:0c:df:76:dc:b4:b0:d1:6d:b2:d2:aa:
60:6a:7a:fd:fe:3f:59:2f:7d:b2:2b:c6:60:69:72:
6f:d6:52:ea:bf:bf:e7:f2:49:45:d4:fc:d7:2c:b8:
49:07:5b:ef:1f:0e:4b:0f:7b:bd:56:b3:43:e3:a6:
bc:1c:d0:a0:6b:ce:11:ed:d5:bb:80:78:a9:4e:82:
c0:93:cf:15:37:ac:ac:13:27:69:4d:70:a8:4a:ed:
75:b0:da:96:03:6f:f9:2a:d5:ca:d5:29:4b:1e:bb:
8b:c7:9e:3a:16:9b:4b:ea:cb:c2:50:fc:41:ac:f9:
e0:fc:70:0c:18:78:01:16:e0:fc:83:ee:df:c2:f8:
6f:14:ca:39:07:b5:24:c8:6c:b8:d8:20:4a:86:1d:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:ED:5A:D3:A3:66:E0:8A:5F:56:31:D9:60:D8:6E:FA:40:F0:81:48
X509v3 Authority Key Identifier:
keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:b0:92:ff:02:a8:7c:67:fd:06:b0:2d:16:e2:7c:d9:a5:ea:
1d:51:3b:49:b1:e6:0d:b1:a5:4c:29:3f:e0:66:5b:d2:ce:1d:
90:3f:57:c7:41:33:38:a4:1c:01:6b:60:05:25:80:26:1d:95:
26:54:61:85:25:1d:ff:2e:3d:32:ab:c5:76:92:a4:db:65:77:
81:40:b8:ed:c5:42:a7:b6:bc:d0:f7:be:aa:6f:4f:a6:cb:d9:
a1:20:60:1d:b5:d5:75:6c:99:42:81:0f:1b:78:d6:bf:9d:4d:
05:5a:0c:6c:f4:29:6c:58:9d:7b:2b:57:30:ae:03:d6:54:6a:
e8:c5:9d:78:f3:ea:6d:bd:5e:63:d6:30:b0:b3:f3:b1:56:14:
b1:f6:93:37:fb:08:e7:f2:1a:66:01:10:fa:8c:30:0e:75:1a:
e2:50:9e:54:3a:c4:8e:1e:f4:f5:f0:cf:59:01:01:e2:8b:40:
d7:3e:84:b4:85:e1:16:9b:2d:e0:8d:c4:47:e1:f5:4f:68:b8:
5b:f0:dd:f1:82:ef:93:c9:14:81:09:01:e8:43:c9:e6:52:b2:
96:17:56:52:55:08:a3:28:b6:90:c0:16:a4:d2:20:7e:e7:bc:
ca:6b:52:b4:8b:a3:cd:71:aa:89:cf:ee:dc:bc:29:ff:9a:a9:
40:73:6d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:54:30 2026 by rpki-client