
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
File: H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft (raw, json)
Hash identifier: jvWS7eO3D7UTlyxV5O3WqvX6xfRe3S+gvQKnrh71/aI=
Subject key identifier: A4:2C:33:88:32:39:4D:2F:08:49:E0:26:C2:3C:C6:86:AB:63:D8:19
Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF
Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF
Certificate serial: 29C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
Manifest number: 2941
Signing time: Tue 18 Aug 2026 15:39:44 +0000
Manifest this update: Tue 18 Aug 2026 15:39:44 +0000
Manifest next update: Tue 25 Aug 2026 15:39:44 +0000
Files and hashes: 1: H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl (hash: 7CFK3BbF/Y7mJY1a9NPBD/5wA/12blhvOFLFmGTyLW4=)
2: C6E76EEA8FCF11F1994D69236E11F970.roa (hash: eR6LdGASZNunus79hsPIR+KLu/e01tVe2TG2ul1VWOI=)
3: 10F095D08FCF11F19F5453106E11F970.roa (hash: 6NPG/krd0ZGT83+0gXuOUyMbTkne1C0+RJma+fzSUgU=)
4: 4B65B208288F11EFB3C88742C4F9AE02.roa (hash: e8QtZE9yszuYCxHhJN7AlKtSnjkZn1yLygAtwcSvRbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl
rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10691 (0x29c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF
Validity
Not Before: Aug 18 15:39:44 2026 GMT
Not After : Aug 25 15:39:44 2026 GMT
Subject: CN=6a847cc0-e02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:39:f4:fd:fd:9b:3f:2a:a2:45:42:54:c3:
c4:bb:85:07:43:89:70:40:49:0d:d6:14:6e:b1:de:
95:37:30:d3:cb:14:92:90:af:9b:91:8c:99:05:fa:
20:9a:0f:4f:7d:32:68:bf:ec:58:58:e4:10:4e:46:
2a:b8:89:df:72:f8:46:32:b3:27:da:01:f3:5c:de:
1d:a9:58:fe:a3:9b:14:f5:b9:54:14:d8:b0:9c:10:
9e:54:fb:55:f3:2c:dc:ea:0d:c5:25:45:fe:af:c2:
a2:ce:ef:8f:9b:16:29:36:49:fd:9e:b0:d9:95:cd:
c7:51:db:f1:58:4b:4b:ff:18:2b:e1:72:4c:74:e2:
ce:ac:6e:b2:b6:43:27:96:8f:8c:a2:23:b2:c1:f5:
f6:09:dc:4d:05:50:f1:8e:fa:47:7c:48:dd:37:5a:
fa:0f:fb:67:63:6a:16:a9:c8:01:ca:d6:60:de:8a:
ec:cb:cd:0e:b2:86:e3:fc:6f:71:59:a4:97:5d:be:
27:99:53:3d:53:52:ac:6c:fc:b8:a2:d1:c7:81:27:
ea:89:0f:e5:9d:01:fa:74:a0:8a:d3:c4:9f:62:06:
47:2d:e2:36:24:e9:4b:ff:31:0a:6e:11:15:8b:d7:
af:22:a3:51:af:15:7b:42:86:20:67:c6:6d:23:2d:
5e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2C:33:88:32:39:4D:2F:08:49:E0:26:C2:3C:C6:86:AB:63:D8:19
X509v3 Authority Key Identifier:
keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:9f:15:bc:44:78:9e:04:48:72:82:77:51:51:8b:00:16:b3:
cd:08:58:b6:60:e3:4e:05:07:cd:d5:d9:41:ed:1b:3f:b0:e1:
b7:92:5e:3f:16:2a:99:0f:a7:00:24:3b:a8:44:b8:d2:e9:eb:
58:1e:90:97:7e:aa:29:7c:fc:06:11:91:63:b7:48:6b:7b:5f:
4c:6c:ac:b9:c9:cc:35:4d:2b:94:3d:ac:dd:32:56:38:50:4b:
da:07:87:6a:0c:0f:06:b7:9f:8f:3b:ef:47:a8:6d:0f:8f:81:
54:67:b9:cb:ca:ae:6f:f3:5d:85:77:bf:bc:b8:b9:ad:ac:54:
5e:82:72:d9:65:69:19:17:a2:37:ce:0e:8f:fb:df:21:75:1d:
85:89:51:d6:36:63:14:68:15:b0:7d:63:0d:99:88:df:a0:a9:
66:ed:ab:70:53:e4:2d:c0:a3:ef:6c:cd:e7:83:d7:71:15:06:
08:1f:be:94:5d:bc:ae:b1:ef:fc:81:61:9a:07:a0:fd:6e:05:
58:c0:23:39:d0:57:47:5e:29:73:61:58:b0:37:94:b3:8e:d3:
69:ef:3a:a8:cf:30:75:32:3a:23:eb:8b:af:97:68:60:e8:69:
27:27:cf:7b:fc:22:95:7f:8f:1d:36:75:68:36:81:08:a5:ff:
05:d7:19:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE0NDcxMTAvBgNVBAUTKDFGNjgyNThDNTI2QzVEQkM3MTU0MzQzNTdEMzgwMDIw
MTQ2NDQwRUYwHhcNMjYwODE4MTUzOTQ0WhcNMjYwODI1MTUzOTQ0WjAYMRYwFAYD
VQQDEw02YTg0N2NjMC1lMDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm4E59P39mz8qokVCVMPEu4UHQ4lwQEkN1hRusd6VNzDTyxSSkK+bkYyZBfog
mg9PfTJov+xYWOQQTkYquInfcvhGMrMn2gHzXN4dqVj+o5sU9blUFNiwnBCeVPtV
8yzc6g3FJUX+r8Kizu+PmxYpNkn9nrDZlc3HUdvxWEtL/xgr4XJMdOLOrG6ytkMn
lo+MoiOywfX2CdxNBVDxjvpHfEjdN1r6D/tnY2oWqcgBytZg3orsy80Osobj/G9x
WaSXXb4nmVM9U1KsbPy4otHHgSfqiQ/lnQH6dKCK08SfYgZHLeI2JOlL/zEKbhEV
i9evIqNRrxV7QoYgZ8ZtIy1eNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQsM4gy
OU0vCEngJsI8xoarY9gZMB8GA1UdIwQYMBaAFB9oJYxSbF28cVQ0NX04ACAUZEDv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTQ0Ny9EMjA3NTgxNEEw
OUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hieHhWRFExZlRnQUlCUmtR
TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0gyZ2xqRkpzWGJ4eFZEUTFmVGdBSUJSa1FPOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTQ0Ny9EMjA3NTgxNEEwOUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hi
eHhWRFExZlRnQUlCUmtRTzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiZ8VvER4ngRIcoJ3UVGLABazzQhYtmDjTgUHzdXZQe0bP7Dht5JePxYqmQ+n
ACQ7qES40unrWB6Ql36qKXz8BhGRY7dIa3tfTGysucnMNU0rlD2s3TJWOFBL2geH
agwPBrefjzvvR6htD4+BVGe5y8qub/NdhXe/vLi5raxUXoJy2WVpGReiN84Oj/vf
IXUdhYlR1jZjFGgVsH1jDZmI36CpZu2rcFPkLcCj72zN54PXcRUGCB++lF28rrHv
/IFhmgeg/W4FWMAjOdBXR14pc2FYsDeUs47Tae86qM8wdTI6I+uLr5doYOhpJyfP
e/wilX+PHTZ1aDaBCKX/BdcZHQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:51 2026 by rpki-client