
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
File: hEd6PPADq7y8hU4_QMh8vPKhWN8.mft (raw, json)
Hash identifier: dndqEc+xWvGmAk34OUqqUCSj7261ESd/QAwv8puYR0w=
Subject key identifier: 63:D0:2F:A7:79:BF:19:BA:32:31:F7:C6:06:EB:04:BD:6B:53:43:70
Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
Certificate issuer: /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Certificate serial: 05C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
Manifest number: 05A3
Signing time: Wed 20 May 2026 23:18:08 +0000
Manifest this update: Wed 20 May 2026 23:18:07 +0000
Manifest next update: Wed 27 May 2026 23:18:07 +0000
Files and hashes: 1: hEd6PPADq7y8hU4_QMh8vPKhWN8.crl (hash: 41CwXemnjKFvubWLUcpesSKVhIykmlArCwB7iehkhbA=)
2: 8DC3F57A093D11F18DEFD893023D8C67.roa (hash: c4NkO8qrZ6UrYxmahr2FNxbzwAF6PK3ETfT+CMVkcCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1472 (0x5c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A505, serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Validity
Not Before: May 20 23:18:07 2026 GMT
Not After : May 27 23:18:07 2026 GMT
Subject: CN=6a0e4130-96f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:23:94:ee:3a:09:23:26:87:c7:74:5d:35:
ad:72:3d:e1:8e:b6:2a:b1:d1:cf:27:35:f2:c4:89:
6c:7c:43:b4:6e:f6:7d:75:f7:b7:3e:ea:9b:4b:8a:
fe:4f:27:b5:be:67:1a:7c:fc:1a:36:7b:22:5b:47:
ec:8b:14:a3:da:94:9f:17:69:b6:24:bf:7b:58:79:
98:c4:83:c0:07:5d:77:94:90:e0:97:de:c3:c9:06:
d7:25:33:ea:4e:16:1f:32:0a:dd:a9:b3:17:0b:b3:
71:45:d7:2f:86:b8:12:a2:87:04:57:18:73:b8:18:
fd:08:da:73:93:39:93:5c:63:07:6e:2c:7f:a6:90:
76:4d:19:45:c4:32:1b:80:32:97:73:bc:dc:da:2f:
9b:f1:aa:8d:91:9e:8b:c5:01:5c:d5:09:d3:ab:78:
20:55:8d:3a:db:09:c9:2c:89:d9:f9:0c:01:d7:33:
6d:71:81:81:aa:fe:19:cc:b5:7a:ee:06:6b:b8:c2:
c5:be:18:49:9a:30:ab:1c:2d:29:1d:46:32:e4:cb:
67:d1:c6:24:8e:37:d2:56:6a:37:ea:b3:06:12:ba:
31:20:cf:e3:52:29:34:1e:00:e0:69:bc:62:00:48:
98:33:58:a6:9c:ca:16:53:9a:3d:d2:72:a9:0f:10:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D0:2F:A7:79:BF:19:BA:32:31:F7:C6:06:EB:04:BD:6B:53:43:70
X509v3 Authority Key Identifier:
keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ab:32:b2:e5:7e:67:9f:e8:a3:c5:f3:b0:90:53:73:53:7b:
ef:d0:86:a6:53:ea:2d:5f:0b:46:0c:61:6d:af:83:dc:09:6d:
12:a6:e8:3b:d3:b6:2b:81:51:c9:d8:82:fd:df:04:19:06:d1:
7e:3c:aa:47:e6:89:62:f5:ee:d0:55:6b:86:d5:4e:64:f7:9b:
d9:1a:0e:8c:c6:45:10:45:0e:3c:db:f9:0c:aa:f3:df:08:0d:
7e:4a:88:61:8d:2a:2b:06:78:92:b4:7f:f6:7f:5e:26:c0:57:
b1:38:68:12:1c:9f:ff:26:38:38:f3:c0:3f:be:fe:bc:59:6e:
b2:7d:f6:20:e1:57:0e:d8:7f:5e:93:db:b1:e0:c7:e1:5b:64:
44:70:0d:bd:23:42:1c:98:3c:a0:01:c2:f0:54:0e:f8:36:6d:
45:00:23:12:79:05:00:31:82:b9:f7:c1:f0:8a:8d:f1:a2:2b:
73:b7:f3:35:51:bd:a2:99:f6:de:74:76:4e:ed:34:f8:f0:bd:
fb:4b:0b:04:f8:af:b3:51:7e:25:6b:c5:8b:74:1f:f5:97:a9:
29:30:7b:d9:80:10:15:0d:89:fd:9e:26:8e:fe:ea:2a:b5:2a:
d5:f7:54:4d:1e:e2:96:27:6c:ed:1c:68:b0:4d:4a:e0:b4:27:
e7:0b:96:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE1MDUxMTAvBgNVBAUTKDg0NDc3QTNDRjAwM0FCQkNCQzg1NEUzRjQwQzg3Q0JD
RjJBMTU4REYwHhcNMjYwNTIwMjMxODA3WhcNMjYwNTI3MjMxODA3WjAYMRYwFAYD
VQQDEw02YTBlNDEzMC05NmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtgIjlO46CSMmh8d0XTWtcj3hjrYqsdHPJzXyxIlsfEO0bvZ9dfe3PuqbS4r+
Tye1vmcafPwaNnsiW0fsixSj2pSfF2m2JL97WHmYxIPAB113lJDgl97DyQbXJTPq
ThYfMgrdqbMXC7NxRdcvhrgSoocEVxhzuBj9CNpzkzmTXGMHbix/ppB2TRlFxDIb
gDKXc7zc2i+b8aqNkZ6LxQFc1QnTq3ggVY062wnJLInZ+QwB1zNtcYGBqv4ZzLV6
7gZruMLFvhhJmjCrHC0pHUYy5Mtn0cYkjjfSVmo36rMGEroxIM/jUik0HgDgabxi
AEiYM1imnMoWU5o90nKpDxB9LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPQL6d5
vxm6MjH3xgbrBL1rU0NwMB8GA1UdIwQYMBaAFIRHejzwA6u8vIVOP0DIfLzyoVjf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTUwNS80QTg5RDU2MjIw
RTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3eThoVTRfUU1oOHZQS2hX
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hFZDZQUEFEcTd5OGhVNF9RTWg4dlBLaFdOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTUwNS80QTg5RDU2MjIwRTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3
eThoVTRfUU1oOHZQS2hXTjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi6sysuV+Z5/oo8XzsJBTc1N779CGplPqLV8LRgxhba+D3AltEqboO9O2K4FR
ydiC/d8EGQbRfjyqR+aJYvXu0FVrhtVOZPeb2RoOjMZFEEUOPNv5DKrz3wgNfkqI
YY0qKwZ4krR/9n9eJsBXsThoEhyf/yY4OPPAP77+vFlusn32IOFXDth/XpPbseDH
4VtkRHANvSNCHJg8oAHC8FQO+DZtRQAjEnkFADGCuffB8IqN8aIrc7fzNVG9opn2
3nR2Tu00+PC9+0sLBPivs1F+JWvFi3Qf9ZepKTB72YAQFQ2J/Z4mjv7qKrUq1fdU
TR7ilids7RxosE1K4LQn5wuWRQ==
-----END CERTIFICATE-----
Generated at Thu May 21 09:39:24 2026 by rpki-client