
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier: v91zEzmlEGCpPOPtMNLftxwuWbpg3/N2wqKMopf/ErY=
Subject key identifier: 44:93:94:5D:FB:FE:29:0E:50:88:AE:AA:83:FA:6D:88:70:F9:56:60
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 046D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number: 03BF
Signing time: Wed 29 Apr 2026 01:23:58 +0000
Manifest this update: Wed 29 Apr 2026 01:23:57 +0000
Manifest next update: Wed 06 May 2026 01:23:57 +0000
Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: 9sHTDmLf1aOvcDuvsSETxywdnFMeL3OBOEg2FPoqiu0=)
2: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: Ev/s13A6k/DcIm1OffodSAjmHH7SzOfcmso4hb44RXg=)
3: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: BF86pvfpbRBo9qXutEzgqO61bS2nTEWr+T+kabrPp1I=)
4: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: brYkxZidojowoYQIqbU0aCNgQ49H7mQPg5jz4K3RIX0=)
5: 218211CA68F911EF986C8281C4F9AE02.roa (hash: MwIf35XYCZODKT46sKZ+J1cz+B+fnbUAXj0j3RbLFN4=)
6: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: grW6xPxdsNkObgmvC9oU5U7FXXHibN8xdWW4iVbsRa4=)
7: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: 4S3t2dvowIG/EeUUH9BW/CIG4gP34ZZohoWk2j8rwOk=)
8: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: xClDM8EpPeO91j0Mezn/P780Xmby1QeCDq53lVbawmM=)
9: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: PuC0DdgiggYtIjLvoalRRhkL/oLZu3l1qbEXfv11uZQ=)
10: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: O2/KxKIdSE2v482JbxbnQ0getoqbnZqZ+/nYKo7sZyY=)
11: B35D540E68F611EFB785D145C4F9AE02.roa (hash: 6jCTzKFpZAM5sRcwoj/RVhwR1AvH7Y/xHmW9G5IE69c=)
12: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: AhsLyZ6cSjsB6OxlhSMjPiIcrs1dzGaYxdwJxIKQAV0=)
13: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: MOAi7s6/6G4J+pIDkTOufzZW6KS0P8wRn9IgpgfF+kk=)
14: 3B4551B4CAA811F09DDC8D69C4F9AE02.roa (hash: hDuVof7d3QEQIcHs4zgmq/ai6KUFB43GrplnDI2UHX4=)
15: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: ylWMSBGShl92T17Vr5K5bsotQdr2G9LiHvdhhYPVrsQ=)
16: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: P/zfn2TnTP8oh0npf6LxHTRFCNPzez1h9qHSPByk2/0=)
17: BE4B3228691411EFB573C120C4F9AE02.roa (hash: ovaDzOhz8t6euzDNkjZEtSnXx9uEV3qfaxhhzdo9Nh8=)
18: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: Sy5GnEGGq49Ut4C8AZxeQpVbXW8n/TI4EHxkVNOwMUM=)
19: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: lTmSpanWfkonoLk8NmfV940KaHPkO1rnz77AY+6Xqc0=)
20: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: cxcPBGfE5CZoxeyWHWqPrl7qUEDb1w9Ivop3RXOuNy8=)
21: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: TRErWmuqP/DsNILuB+Bsg/oOXJFxA8k+YEgBWxxZqis=)
22: 058B976ECA9811F0A295B360C4F9AE02.roa (hash: lCNez/KnH3/u+GXyUNFMwTEZ8K7MJDqkA0Go5e/dS58=)
23: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: EH518Dy6MrAFwmekT0SecOdweFL+FTqCksa8EB6seaE=)
24: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: 3uU6kQ8f6IzetYcsltzYNLy8hPqbwPnaYrl6t4o4ReU=)
25: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: CxVWM785DWNfTdffR2/Yw/2Hi2LQnhqbcgLOymKnnM8=)
26: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: H8VgsGVXvOR/DsZUOIG9OsZtDhG6b/7E83e/ckfyCFk=)
27: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: wtq9PupYRV4XEewrdMqA8/4bNl2edm+HOBW3n2PpfNo=)
28: EA792108690E11EF9396CC48C4F9AE02.roa (hash: cK4Lx01JCSZW4H3YCVnodtAx/ORf7B0e7vIxfgqX3uI=)
29: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: t+cHfFMyQ8NmvDexgT+4lzg2Q83rmvnX7nYHf4IBQdE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 01:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133 (0x46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Apr 29 01:23:57 2026 GMT
Not After : May 6 01:23:57 2026 GMT
Subject: CN=69f15dae-ead6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:63:bb:e6:7b:f0:a3:1f:92:06:bd:60:f9:32:
17:51:7d:50:30:a6:2c:cf:ff:51:ee:16:23:76:86:
9a:86:b1:47:54:a8:5c:77:e7:ce:25:57:ff:f4:8b:
55:b2:ed:bf:59:0a:31:d5:62:19:f2:91:08:28:bd:
92:f1:9c:00:f7:a1:37:1f:69:92:c9:69:54:55:7d:
00:a9:6f:91:00:73:fe:9f:70:ce:75:1b:77:14:84:
5c:fd:db:b7:9c:5d:5a:5a:09:26:de:4d:dc:13:81:
69:81:fd:77:20:d3:4a:33:86:5a:f0:43:c3:63:f7:
d3:49:01:bf:4c:0c:ea:0b:87:c4:9c:5f:c8:02:2f:
f7:af:60:84:7c:40:8d:48:31:26:63:50:4f:00:9c:
77:93:d3:19:bb:6f:0d:a6:cc:eb:f7:5b:b0:d4:4c:
88:ce:97:e9:1b:e7:59:14:f4:97:98:3c:15:b6:a3:
dc:cf:9d:a7:cf:41:b0:f9:d5:fb:cb:67:70:d4:9b:
cd:de:4a:92:01:77:eb:f1:37:7c:be:16:5e:3e:c5:
73:29:ca:b5:cd:2b:76:0d:23:9b:4c:d8:df:68:1f:
b7:0a:f2:78:6e:b8:a2:c3:b8:9d:a4:2b:2e:d1:d1:
b3:93:4b:ce:e6:46:c4:de:c3:90:5e:38:cf:84:41:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:93:94:5D:FB:FE:29:0E:50:88:AE:AA:83:FA:6D:88:70:F9:56:60
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:50:62:5e:69:3d:2c:0c:d1:d6:28:b3:4b:6c:9c:cd:0a:f6:
6d:ae:fe:c2:a9:76:71:93:44:71:7d:00:af:72:77:ac:51:aa:
59:34:b9:b1:cb:1c:09:17:e8:27:7a:e5:a6:6d:76:60:e7:2d:
a6:c1:ee:d9:94:47:90:9f:e2:ab:43:b3:06:b7:83:36:45:dd:
2e:45:8c:fa:06:b6:b8:17:04:d9:92:ec:5d:b2:a1:00:85:4d:
d2:78:4e:8c:6d:7d:da:ef:6b:d1:b4:ce:24:7f:60:b2:88:88:
d2:77:23:7b:ab:dc:10:ae:c2:a4:f2:92:84:af:57:9b:db:c6:
3f:77:73:86:d0:4b:ac:63:45:14:af:3e:f7:78:a5:0f:d1:7c:
96:0e:c9:77:e1:a7:e0:ac:08:b6:92:36:c8:43:b3:75:23:28:
f6:e0:d5:a3:b6:12:e1:b4:32:6e:96:04:28:fb:94:75:d6:ff:
67:95:6a:77:18:c9:5f:4e:30:f7:2c:d0:69:cc:51:c7:ce:12:
d9:04:4d:87:5e:ea:1b:2a:2e:f9:14:6a:a7:3d:63:6d:7c:fb:
40:91:09:56:80:aa:72:32:6a:96:ae:0b:fa:78:f6:f0:3b:1c:
92:9a:7a:31:e9:86:5d:68:e9:91:8b:b2:90:f2:f0:6a:fc:e2:
5a:ba:45:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG
NUMyMDE1NzAwHhcNMjYwNDI5MDEyMzU3WhcNMjYwNTA2MDEyMzU3WjAYMRYwFAYD
VQQDEw02OWYxNWRhZS1lYWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA32O75nvwox+SBr1g+TIXUX1QMKYsz/9R7hYjdoaahrFHVKhcd+fOJVf/9ItV
su2/WQox1WIZ8pEIKL2S8ZwA96E3H2mSyWlUVX0AqW+RAHP+n3DOdRt3FIRc/du3
nF1aWgkm3k3cE4Fpgf13INNKM4Za8EPDY/fTSQG/TAzqC4fEnF/IAi/3r2CEfECN
SDEmY1BPAJx3k9MZu28Npszr91uw1EyIzpfpG+dZFPSXmDwVtqPcz52nz0Gw+dX7
y2dw1JvN3kqSAXfr8Td8vhZePsVzKcq1zSt2DSObTNjfaB+3CvJ4briiw7idpCsu
0dGzk0vO5kbE3sOQXjjPhEHInwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFESTlF37
/ikOUIiuqoP6bYhw+VZgMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC
OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDQyQS8yMEYyQ0IwMEVCOUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklT
anQ5UG1iTENxQkgxd2dGWEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeVBiXmk9LAzR1iizS2yczQr2ba7+wql2cZNEcX0Ar3J3rFGqWTS5scscCRfo
J3rlpm12YOctpsHu2ZRHkJ/iq0OzBreDNkXdLkWM+ga2uBcE2ZLsXbKhAIVN0nhO
jG192u9r0bTOJH9gsoiI0ncje6vcEK7CpPKShK9Xm9vGP3dzhtBLrGNFFK8+93il
D9F8lg7Jd+Gn4KwItpI2yEOzdSMo9uDVo7YS4bQybpYEKPuUddb/Z5VqdxjJX04w
9yzQacxRx84S2QRNh17qGyou+RRqpz1jbXz7QJEJVoCqcjJqlq4L+nj28Dsckpp6
MemGXWjpkYuykPLwavziWrpFRA==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:16:56 2026 by rpki-client