
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier: 9A1cH7aFAXgh4wews+m/ZirtyRdRHimQxfcjAy3UMNI=
Subject key identifier: 08:64:18:5A:BB:12:F0:C4:10:F9:FC:DE:85:03:C1:87:A3:3B:A8:17
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 04D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number: 0426
Signing time: Thu 05 Nov 2026 00:45:48 +0000
Manifest this update: Thu 05 Nov 2026 00:45:48 +0000
Manifest next update: Thu 12 Nov 2026 00:45:48 +0000
Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: pZkDReCx587CIhQuI2LEWTRZ09/53Icv6IrjtzWU+qY=)
2: 058B976ECA9811F0A295B360C4F9AE02.roa (hash: lCNez/KnH3/u+GXyUNFMwTEZ8K7MJDqkA0Go5e/dS58=)
3: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: PuC0DdgiggYtIjLvoalRRhkL/oLZu3l1qbEXfv11uZQ=)
4: BE4B3228691411EFB573C120C4F9AE02.roa (hash: ovaDzOhz8t6euzDNkjZEtSnXx9uEV3qfaxhhzdo9Nh8=)
5: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: t+cHfFMyQ8NmvDexgT+4lzg2Q83rmvnX7nYHf4IBQdE=)
6: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: CxVWM785DWNfTdffR2/Yw/2Hi2LQnhqbcgLOymKnnM8=)
7: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: MOAi7s6/6G4J+pIDkTOufzZW6KS0P8wRn9IgpgfF+kk=)
8: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: EH518Dy6MrAFwmekT0SecOdweFL+FTqCksa8EB6seaE=)
9: B35D540E68F611EFB785D145C4F9AE02.roa (hash: 6jCTzKFpZAM5sRcwoj/RVhwR1AvH7Y/xHmW9G5IE69c=)
10: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: P/zfn2TnTP8oh0npf6LxHTRFCNPzez1h9qHSPByk2/0=)
11: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: 4S3t2dvowIG/EeUUH9BW/CIG4gP34ZZohoWk2j8rwOk=)
12: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: 3uU6kQ8f6IzetYcsltzYNLy8hPqbwPnaYrl6t4o4ReU=)
13: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: BF86pvfpbRBo9qXutEzgqO61bS2nTEWr+T+kabrPp1I=)
14: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: ylWMSBGShl92T17Vr5K5bsotQdr2G9LiHvdhhYPVrsQ=)
15: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: grW6xPxdsNkObgmvC9oU5U7FXXHibN8xdWW4iVbsRa4=)
16: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: lTmSpanWfkonoLk8NmfV940KaHPkO1rnz77AY+6Xqc0=)
17: 3B4551B4CAA811F09DDC8D69C4F9AE02.roa (hash: hDuVof7d3QEQIcHs4zgmq/ai6KUFB43GrplnDI2UHX4=)
18: EA792108690E11EF9396CC48C4F9AE02.roa (hash: cK4Lx01JCSZW4H3YCVnodtAx/ORf7B0e7vIxfgqX3uI=)
19: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: H8VgsGVXvOR/DsZUOIG9OsZtDhG6b/7E83e/ckfyCFk=)
20: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: TRErWmuqP/DsNILuB+Bsg/oOXJFxA8k+YEgBWxxZqis=)
21: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: O2/KxKIdSE2v482JbxbnQ0getoqbnZqZ+/nYKo7sZyY=)
22: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: xClDM8EpPeO91j0Mezn/P780Xmby1QeCDq53lVbawmM=)
23: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: cxcPBGfE5CZoxeyWHWqPrl7qUEDb1w9Ivop3RXOuNy8=)
24: 218211CA68F911EF986C8281C4F9AE02.roa (hash: MwIf35XYCZODKT46sKZ+J1cz+B+fnbUAXj0j3RbLFN4=)
25: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: AhsLyZ6cSjsB6OxlhSMjPiIcrs1dzGaYxdwJxIKQAV0=)
26: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: brYkxZidojowoYQIqbU0aCNgQ49H7mQPg5jz4K3RIX0=)
27: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: Ev/s13A6k/DcIm1OffodSAjmHH7SzOfcmso4hb44RXg=)
28: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: wtq9PupYRV4XEewrdMqA8/4bNl2edm+HOBW3n2PpfNo=)
29: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: Sy5GnEGGq49Ut4C8AZxeQpVbXW8n/TI4EHxkVNOwMUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 00:45:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1236 (0x4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Nov 5 00:45:48 2026 GMT
Not After : Nov 12 00:45:48 2026 GMT
Subject: CN=6aebd1bc-877c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:92:d6:56:e6:ea:85:bb:f1:02:51:4a:f1:
69:f0:e0:6a:74:3e:d8:df:48:33:05:7f:a6:c9:0e:
de:df:b2:76:19:3b:5f:39:31:18:09:32:09:a1:06:
ef:96:95:9e:1d:ca:b5:e5:95:3b:a2:7e:18:15:07:
60:1e:78:32:33:5b:5f:ae:01:0e:dd:25:1b:38:1c:
16:8d:dd:dc:88:f6:e6:fa:b2:04:90:6b:ab:59:65:
f7:84:55:90:0e:11:0f:d1:68:60:36:c7:77:e9:9b:
99:6a:d4:f3:f9:b1:b9:a8:f2:e6:d1:88:89:3b:1f:
60:bf:b0:8c:5f:66:b7:75:be:a1:0e:1f:cd:8b:23:
b3:1e:15:5e:6e:e5:7a:32:1d:66:7a:73:ae:25:4e:
62:8c:b8:b9:f4:c7:20:c2:9e:12:91:9b:5a:67:ff:
61:e9:80:ac:df:5d:7d:21:30:d4:ad:ae:88:cf:a4:
99:18:ab:30:54:76:ce:1a:bb:c2:84:44:d9:4d:54:
83:48:d3:4a:32:3f:f1:a1:c4:2b:bd:f7:24:e1:8d:
09:21:36:ca:9a:40:7c:36:f5:67:c6:66:b4:b2:88:
de:3a:3c:11:3f:03:e0:92:14:09:77:27:dd:49:99:
9b:c5:0b:08:09:1c:00:66:82:04:87:4a:93:b5:9e:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:64:18:5A:BB:12:F0:C4:10:F9:FC:DE:85:03:C1:87:A3:3B:A8:17
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e3:30:54:6b:f1:f5:b8:19:93:10:2a:c7:ed:f5:0a:2d:87:
28:04:b1:19:5a:90:c0:6e:12:d2:17:30:c4:f4:80:fb:b3:19:
b6:fc:ad:57:86:95:29:de:cb:c6:97:de:4d:6e:80:c1:db:52:
3c:9f:d4:ad:ea:6c:92:f4:2d:67:22:93:69:22:d0:a3:13:2e:
e5:d2:f4:7a:54:a8:ca:87:77:af:5f:79:ae:b7:ed:4d:12:c9:
1e:9b:a0:d5:a7:b3:c6:86:6d:eb:89:7f:fb:1d:97:0b:78:f8:
e4:86:e5:c7:4e:f3:de:1c:08:2b:2d:74:d6:41:5f:84:0e:62:
c9:05:66:c4:6a:c5:f5:57:a3:1f:e6:18:69:68:35:b6:3e:f7:
47:e0:d0:b1:c9:4a:95:d3:8b:25:45:12:74:54:fd:e8:e9:de:
d7:b5:bf:b1:69:2b:05:85:a7:8f:cd:4f:8b:8b:14:f7:3f:61:
0f:08:e9:b1:92:7e:6d:8c:86:40:6f:5e:20:2c:c6:06:14:1e:
5b:fe:a5:a3:d9:2d:34:1c:d9:4c:78:ad:55:da:59:2c:e6:a5:
e8:fd:0b:92:e6:b5:ba:78:08:8b:0b:b8:46:5c:77:f6:6f:e6:
64:a6:75:78:25:ce:4c:25:df:0a:0a:84:d6:6d:28:15:1c:ab:
07:b6:e9:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG
NUMyMDE1NzAwHhcNMjYxMTA1MDA0NTQ4WhcNMjYxMTEyMDA0NTQ4WjAYMRYwFAYD
VQQDEw02YWViZDFiYy04NzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugiS1lbm6oW78QJRSvFp8OBqdD7Y30gzBX+myQ7e37J2GTtfOTEYCTIJoQbv
lpWeHcq15ZU7on4YFQdgHngyM1tfrgEO3SUbOBwWjd3ciPbm+rIEkGurWWX3hFWQ
DhEP0WhgNsd36ZuZatTz+bG5qPLm0YiJOx9gv7CMX2a3db6hDh/NiyOzHhVebuV6
Mh1menOuJU5ijLi59Mcgwp4SkZtaZ/9h6YCs3119ITDUra6Iz6SZGKswVHbOGrvC
hETZTVSDSNNKMj/xocQrvfck4Y0JITbKmkB8NvVnxma0sojeOjwRPwPgkhQJdyfd
SZmbxQsICRwAZoIEh0qTtZ51awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhkGFq7
EvDEEPn83oUDwYejO6gXMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC
OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDQyQS8yMEYyQ0IwMEVCOUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklT
anQ5UG1iTENxQkgxd2dGWEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW+MwVGvx9bgZkxAqx+31Ci2HKASxGVqQwG4S0hcwxPSA+7MZtvytV4aVKd7L
xpfeTW6AwdtSPJ/UrepskvQtZyKTaSLQoxMu5dL0elSoyod3r195rrftTRLJHpug
1aezxoZt64l/+x2XC3j45Iblx07z3hwIKy101kFfhA5iyQVmxGrF9VejH+YYaWg1
tj73R+DQsclKldOLJUUSdFT96One17W/sWkrBYWnj81Pi4sU9z9hDwjpsZJ+bYyG
QG9eICzGBhQeW/6lo9ktNBzZTHitVdpZLOal6P0Lkua1ungIiwu4Rlx39m/mZKZ1
eCXOTCXfCgqE1m0oFRyrB7bplg==
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:23:21 2026 by rpki-client