
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier: BPwDVr/t2bQ/rdQtPWcUS4YZ4vMBomlp307d6wMA5kw=
Subject key identifier: 3C:6A:60:58:7C:89:C8:9D:0B:70:CD:FA:96:9F:F6:F4:99:63:BA:C2
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 0486
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number: 03D8
Signing time: Wed 17 Jun 2026 00:49:07 +0000
Manifest this update: Wed 17 Jun 2026 00:49:07 +0000
Manifest next update: Wed 24 Jun 2026 00:49:07 +0000
Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: UQzSh8CHoh5rNOy9NoMKiTkbxMONI6wDHGRx32gKu3k=)
2: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: 4S3t2dvowIG/EeUUH9BW/CIG4gP34ZZohoWk2j8rwOk=)
3: 3B4551B4CAA811F09DDC8D69C4F9AE02.roa (hash: hDuVof7d3QEQIcHs4zgmq/ai6KUFB43GrplnDI2UHX4=)
4: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: AhsLyZ6cSjsB6OxlhSMjPiIcrs1dzGaYxdwJxIKQAV0=)
5: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: 3uU6kQ8f6IzetYcsltzYNLy8hPqbwPnaYrl6t4o4ReU=)
6: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: grW6xPxdsNkObgmvC9oU5U7FXXHibN8xdWW4iVbsRa4=)
7: EA792108690E11EF9396CC48C4F9AE02.roa (hash: cK4Lx01JCSZW4H3YCVnodtAx/ORf7B0e7vIxfgqX3uI=)
8: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: t+cHfFMyQ8NmvDexgT+4lzg2Q83rmvnX7nYHf4IBQdE=)
9: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: ylWMSBGShl92T17Vr5K5bsotQdr2G9LiHvdhhYPVrsQ=)
10: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: PuC0DdgiggYtIjLvoalRRhkL/oLZu3l1qbEXfv11uZQ=)
11: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: brYkxZidojowoYQIqbU0aCNgQ49H7mQPg5jz4K3RIX0=)
12: 058B976ECA9811F0A295B360C4F9AE02.roa (hash: lCNez/KnH3/u+GXyUNFMwTEZ8K7MJDqkA0Go5e/dS58=)
13: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: EH518Dy6MrAFwmekT0SecOdweFL+FTqCksa8EB6seaE=)
14: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: Ev/s13A6k/DcIm1OffodSAjmHH7SzOfcmso4hb44RXg=)
15: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: H8VgsGVXvOR/DsZUOIG9OsZtDhG6b/7E83e/ckfyCFk=)
16: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: BF86pvfpbRBo9qXutEzgqO61bS2nTEWr+T+kabrPp1I=)
17: 218211CA68F911EF986C8281C4F9AE02.roa (hash: MwIf35XYCZODKT46sKZ+J1cz+B+fnbUAXj0j3RbLFN4=)
18: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: TRErWmuqP/DsNILuB+Bsg/oOXJFxA8k+YEgBWxxZqis=)
19: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: wtq9PupYRV4XEewrdMqA8/4bNl2edm+HOBW3n2PpfNo=)
20: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: CxVWM785DWNfTdffR2/Yw/2Hi2LQnhqbcgLOymKnnM8=)
21: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: Sy5GnEGGq49Ut4C8AZxeQpVbXW8n/TI4EHxkVNOwMUM=)
22: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: P/zfn2TnTP8oh0npf6LxHTRFCNPzez1h9qHSPByk2/0=)
23: BE4B3228691411EFB573C120C4F9AE02.roa (hash: ovaDzOhz8t6euzDNkjZEtSnXx9uEV3qfaxhhzdo9Nh8=)
24: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: xClDM8EpPeO91j0Mezn/P780Xmby1QeCDq53lVbawmM=)
25: B35D540E68F611EFB785D145C4F9AE02.roa (hash: 6jCTzKFpZAM5sRcwoj/RVhwR1AvH7Y/xHmW9G5IE69c=)
26: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: cxcPBGfE5CZoxeyWHWqPrl7qUEDb1w9Ivop3RXOuNy8=)
27: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: lTmSpanWfkonoLk8NmfV940KaHPkO1rnz77AY+6Xqc0=)
28: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: O2/KxKIdSE2v482JbxbnQ0getoqbnZqZ+/nYKo7sZyY=)
29: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: MOAi7s6/6G4J+pIDkTOufzZW6KS0P8wRn9IgpgfF+kk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1158 (0x486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Jun 17 00:49:07 2026 GMT
Not After : Jun 24 00:49:07 2026 GMT
Subject: CN=6a31ef03-5997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:91:a9:ef:7b:17:d7:24:f6:c2:3d:12:b6:
81:61:2b:ed:9d:d3:ad:3a:c2:58:05:c8:02:6c:19:
67:9d:c1:ca:b9:a4:02:59:5b:66:1b:76:dd:22:bf:
fc:03:24:d4:eb:69:6f:84:ec:5e:b6:b9:14:1e:f0:
06:4c:ea:8d:7b:bc:c6:aa:e1:4f:15:9b:8e:e9:d9:
9a:61:70:d0:e1:8f:a3:63:34:e7:0f:d2:27:d9:bc:
70:db:37:80:3f:d5:0c:fb:3c:ed:29:24:85:15:d0:
67:ce:ea:51:2d:be:a3:7a:97:07:b7:74:ea:79:7f:
6a:73:14:e0:da:b0:ad:8c:d1:7d:a5:20:65:43:99:
f9:4a:56:b2:0b:a9:8f:9c:d0:05:3f:fb:1d:15:0a:
a3:a6:2c:4e:21:fe:76:20:b7:cf:ec:e0:8e:ae:c0:
af:63:55:16:09:c2:94:f1:43:5a:62:f9:2f:a8:fb:
f4:a2:59:7a:3a:ad:11:f2:cc:20:81:2d:d4:fc:e2:
07:52:b0:1c:16:07:bd:f0:1c:7c:51:3c:36:aa:c2:
c0:db:ee:1e:a5:d3:34:69:14:4f:dc:2b:5f:81:c9:
a6:06:d9:b1:a1:e1:16:03:2a:a9:48:ca:b7:8f:5b:
7f:09:65:9e:1e:31:84:15:56:42:15:c6:05:1e:e0:
9f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6A:60:58:7C:89:C8:9D:0B:70:CD:FA:96:9F:F6:F4:99:63:BA:C2
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0e:69:e6:29:ad:4d:94:57:41:d5:dc:05:e2:c8:7e:b5:89:
7f:db:2a:d0:e8:ae:df:60:ce:a2:5b:c3:ba:06:10:0e:5d:e8:
92:36:0e:45:e5:b9:8c:d5:ad:2f:89:7f:77:ec:ed:29:32:67:
b0:91:54:99:73:fd:0e:8d:2f:d5:35:88:9b:bd:0b:dd:e2:ad:
4a:69:4b:28:b6:68:ae:ff:24:5d:07:51:47:3f:04:04:eb:60:
c2:78:47:56:6c:3c:9f:e4:f1:76:ca:ad:08:d3:26:7a:c2:ca:
61:67:93:e8:e7:e4:5c:2b:3f:53:b9:be:27:a0:ad:bc:5b:a8:
59:20:57:ea:98:1c:f9:23:b4:67:71:9d:ad:8d:7d:1f:d5:a3:
b4:26:60:b1:35:bd:88:0c:7b:72:94:13:6f:6c:47:ac:9d:90:
57:69:89:a9:79:8c:b0:94:ac:b0:e8:5b:f5:62:26:53:be:88:
5f:aa:0a:99:81:27:19:90:8c:45:5d:23:1a:49:7e:3f:1a:ff:
d8:ee:7c:32:44:b2:bf:45:ad:2f:b4:1a:20:bb:7d:94:78:fb:
9f:63:23:31:17:4a:76:45:23:43:17:5c:1b:ea:41:7a:c9:a8:
41:16:bf:fe:61:f1:a4:c1:6e:d9:4a:36:d1:e0:f0:e2:b7:fc:
47:6b:cb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 19:17:43 2026 by rpki-client