
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
File: hm540aRej9EmgIr_fOpPwI59kqg.mft (raw, json)
Hash identifier: QUcpFkw8EY6RNjxfkbqmHnewf8VKPK0v/e+opwH0LDk=
Subject key identifier: 92:80:D4:BE:08:46:4E:7B:A7:16:12:F0:54:09:CA:68:30:37:79:60
Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8
Certificate issuer: /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
Certificate serial: 0183
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
Manifest number: 0177
Signing time: Sun 05 Apr 2026 04:13:08 +0000
Manifest this update: Sun 05 Apr 2026 04:13:07 +0000
Manifest next update: Sun 12 Apr 2026 04:13:07 +0000
Files and hashes: 1: hm540aRej9EmgIr_fOpPwI59kqg.crl (hash: G66GW5sKPL9HN5Zht2JvQZ3XSQu+OkaCOlCbIYXbVNY=)
2: 35274C3080AF11F0BAFC1E65C4F9AE02.roa (hash: 0ku/XsSeBeCUt4xvyki7Fk/rkZJXtNB6jwP/TGLOKpQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl
rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CFCE, serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
Validity
Not Before: Apr 5 04:13:07 2026 GMT
Not After : Apr 12 04:13:07 2026 GMT
Subject: CN=69d1e153-7090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9b:fd:fe:8c:0f:e1:29:b2:ba:a7:53:1d:7d:
f3:4c:7d:d6:c0:5b:4c:6c:b8:95:be:6d:3a:07:03:
8b:04:12:b4:54:30:0f:ad:e4:ab:08:cc:bd:9c:da:
16:18:d6:ba:08:59:55:a5:22:92:cb:fd:15:eb:a9:
51:d4:fc:46:3c:97:f7:96:93:85:11:b3:45:08:f0:
46:e8:3e:54:87:94:97:d6:90:61:0a:e4:ca:b3:e0:
2c:7b:ec:3d:81:52:c2:34:05:31:26:3d:87:3c:3d:
cb:16:3d:6b:d1:cf:a4:e7:34:4c:90:36:a7:cc:52:
7b:92:37:10:6f:ff:bc:13:9e:b4:71:d6:9c:49:da:
a5:f9:c5:a1:ad:ce:97:0c:db:4f:af:21:d0:8b:01:
38:0b:95:7a:99:d4:a8:71:f6:94:93:ef:8b:77:ac:
0d:0a:63:97:5f:32:55:09:ae:24:d9:3d:f8:e4:00:
da:87:f7:2b:6e:0d:24:e9:03:d8:30:af:be:ce:2b:
86:75:6a:ac:ce:28:ba:31:99:54:70:40:d7:e1:ce:
a8:41:dd:8f:f9:69:74:bd:37:9c:b9:0a:eb:eb:62:
73:b2:6e:e3:7c:19:82:51:22:42:27:c6:75:5f:7d:
f7:07:3d:21:62:d7:cc:45:8b:ed:87:f2:1a:ee:e2:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:80:D4:BE:08:46:4E:7B:A7:16:12:F0:54:09:CA:68:30:37:79:60
X509v3 Authority Key Identifier:
keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:a5:03:e0:ff:1c:4d:92:bb:2e:3b:e3:73:e9:bf:35:da:6d:
fb:ff:7a:55:4f:99:9c:71:30:82:d7:9d:2a:4c:bb:ce:1c:df:
03:1e:1d:a6:b0:3f:3f:57:d3:c2:bb:c2:33:10:3a:e3:f2:b6:
35:70:a5:83:25:f9:b7:eb:6b:e2:fb:ea:55:63:8d:64:6d:ee:
e2:9c:bc:bc:39:70:9f:55:17:da:34:75:7f:c5:34:09:2f:ef:
4b:f1:33:06:42:76:8f:da:86:57:ae:23:ea:9b:d7:f4:54:3c:
10:2a:25:08:b3:eb:aa:62:f3:72:21:8c:c3:88:b3:3f:6b:94:
df:31:04:49:c0:36:8a:52:a9:5e:56:65:93:5c:28:31:fd:25:
12:32:01:5b:21:db:d5:5b:a4:3e:9f:d1:6b:71:b6:a9:e2:64:
9a:e9:b4:35:71:2d:85:e3:b4:b1:3a:17:2d:84:b8:13:64:1e:
2a:ac:9c:77:c8:a6:bf:df:6b:1b:a4:54:a6:40:1a:81:b2:cf:
4e:51:ea:b2:37:44:6c:e0:e8:fa:0a:fd:12:1f:6a:cc:6d:3c:
cd:37:bb:37:16:19:9b:f1:d9:46:bc:3e:07:bb:0a:1a:d7:74:
ba:34:0c:bf:f4:86:91:32:ca:f8:7d:f8:6b:2e:af:f7:ea:b9:
f8:c1:54:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNGQ0UxMTAvBgNVBAUTKDg2NkU3OEQxQTQ1RThGRDEyNjgwOEFGRjdDRUE0RkMw
OEU3RDkyQTgwHhcNMjYwNDA1MDQxMzA3WhcNMjYwNDEyMDQxMzA3WjAYMRYwFAYD
VQQDEw02OWQxZTE1My03MDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Zv9/owP4SmyuqdTHX3zTH3WwFtMbLiVvm06BwOLBBK0VDAPreSrCMy9nNoW
GNa6CFlVpSKSy/0V66lR1PxGPJf3lpOFEbNFCPBG6D5Uh5SX1pBhCuTKs+Ase+w9
gVLCNAUxJj2HPD3LFj1r0c+k5zRMkDanzFJ7kjcQb/+8E560cdacSdql+cWhrc6X
DNtPryHQiwE4C5V6mdSocfaUk++Ld6wNCmOXXzJVCa4k2T345ADah/crbg0k6QPY
MK++ziuGdWqszii6MZlUcEDX4c6oQd2P+Wl0vTecuQrr62Jzsm7jfBmCUSJCJ8Z1
X333Bz0hYtfMRYvth/Ia7uJujwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJKA1L4I
Rk57pxYS8FQJymgwN3lgMB8GA1UdIwQYMBaAFIZueNGkXo/RJoCK/3zqT8COfZKo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0ZDRS9FMEJFMzZBQzAy
M0YxMUVGOEU1QzFFNThDNEY5QUUwMi9obTU0MGFSZWo5RW1nSXJfZk9wUHdJNTlr
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2htNTQwYVJlajlFbWdJcl9mT3BQd0k1OWtxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Q0ZDRS9FMEJFMzZBQzAyM0YxMUVGOEU1QzFFNThDNEY5QUUwMi9obTU0MGFSZWo5
RW1nSXJfZk9wUHdJNTlrcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdqUD4P8cTZK7Ljvjc+m/Ndpt+/96VU+ZnHEwgtedKky7zhzfAx4dprA/P1fT
wrvCMxA64/K2NXClgyX5t+tr4vvqVWONZG3u4py8vDlwn1UX2jR1f8U0CS/vS/Ez
BkJ2j9qGV64j6pvX9FQ8EColCLPrqmLzciGMw4izP2uU3zEEScA2ilKpXlZlk1wo
Mf0lEjIBWyHb1VukPp/Ra3G2qeJkmum0NXEtheO0sToXLYS4E2QeKqycd8imv99r
G6RUpkAagbLPTlHqsjdEbODo+gr9Eh9qzG08zTe7NxYZm/HZRrw+B7sKGtd0ujQM
v/SGkTLK+H34ay6v9+q5+MFUCg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:47 2026 by rpki-client