
$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
File: h-gMDkYzEKnTA4zgE88YU3SlxyI.mft (raw, json)
Hash identifier: zkDGaYJsXGRf6AGUklzX7qqaeo+gJ0g6d7/pzRl1yVM=
Subject key identifier: EB:F9:F4:DE:25:33:9D:26:35:2D:C7:59:9F:BC:CF:C3:46:A2:A9:58
Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
Certificate issuer: /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Certificate serial: 068F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
Manifest number: 0681
Signing time: Mon 04 May 2026 22:36:56 +0000
Manifest this update: Mon 04 May 2026 22:36:55 +0000
Manifest next update: Mon 11 May 2026 22:36:55 +0000
Files and hashes: 1: h-gMDkYzEKnTA4zgE88YU3SlxyI.crl (hash: lEgrhY34ZNIQpk2wcfWtP4kWI7gVWWXMYd5nKNyl+04=)
2: C49CE482BEA411EB85828650C4F9AE02.roa (hash: JOGvq1AD8Gg+4yY3ltKJTiWff0l41sfm7XWi5tngbn4=)
3: C850F3BA89A511EEB6692E43C4F9AE02.roa (hash: 5be7I0/+cwjNbyTqFfbMRK0sXrbNJNl+sPoUACjviPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl
rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1679 (0x68f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918524B, serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Validity
Not Before: May 4 22:36:55 2026 GMT
Not After : May 11 22:36:55 2026 GMT
Subject: CN=69f91f87-514e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:39:f1:6a:2a:5f:ba:37:4d:95:57:da:8c:2e:
4e:c1:a2:ae:25:80:2f:42:06:c9:c8:ea:7c:8f:77:
a6:03:f6:36:21:9d:1d:2e:9a:68:91:bd:06:67:77:
2a:31:1a:f7:67:a2:01:db:48:79:8e:d5:a0:be:ff:
f0:12:28:cd:1d:4a:ff:53:a2:f3:15:38:29:30:17:
90:64:ad:e2:7e:c9:1b:9a:ee:2e:74:b2:a9:70:65:
00:0a:36:3d:e0:c5:ee:96:ab:41:df:ae:ae:10:de:
53:be:d5:80:02:d8:49:ca:9b:2e:2a:5f:af:f6:c2:
b3:ec:e3:94:1f:b8:93:d1:db:e3:9a:d9:6d:07:58:
d9:6e:ce:28:6c:8c:a6:a8:2d:08:73:23:1f:e1:9e:
28:28:9c:fc:27:20:f8:f5:86:13:ed:85:eb:16:5b:
57:0d:8c:33:03:26:30:71:33:34:96:61:60:3a:b5:
0b:52:37:d2:a4:4d:67:fc:88:49:9c:21:5e:75:2e:
a0:71:1e:f6:00:bf:12:16:51:6c:c6:28:4f:58:af:
43:b4:8b:8e:13:29:7c:f6:34:de:e9:51:0c:12:87:
81:6b:a4:7e:b4:4e:8e:35:87:4a:b8:39:60:82:32:
66:a6:80:90:20:7f:f7:b1:91:43:2c:21:9a:de:c6:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F9:F4:DE:25:33:9D:26:35:2D:C7:59:9F:BC:CF:C3:46:A2:A9:58
X509v3 Authority Key Identifier:
keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a4:f7:9d:be:97:0f:9f:e4:32:1e:64:d6:b1:ba:89:bc:12:
d3:60:e6:17:5c:02:57:23:2c:b6:f5:06:f3:8e:7a:03:a9:cb:
62:d8:b5:14:8c:12:01:55:68:b3:8d:86:02:e1:06:bd:3a:6e:
e6:96:23:62:87:8a:ad:7e:52:c0:86:77:df:60:16:e2:0f:46:
9a:49:af:3d:09:bc:e1:f3:26:09:b7:6d:3b:14:9c:a6:e5:cc:
99:64:69:48:41:d9:46:7f:63:29:07:a0:62:73:28:55:cd:e7:
55:51:9c:9a:77:fe:fb:3f:e0:d7:b3:a5:b9:14:51:89:b4:24:
39:f6:a9:d5:de:f0:af:8a:6f:3e:d0:98:9f:6e:08:ac:1b:91:
51:1d:cb:96:af:d5:f0:38:8b:fb:90:2f:98:73:e8:3a:59:d1:
e8:41:71:49:2a:83:40:ce:7e:31:2e:85:7d:20:f0:81:c6:9e:
2b:4b:9b:57:1c:5e:84:f4:d1:dd:06:23:68:83:67:87:25:2e:
15:87:19:9d:f9:68:97:34:a7:35:46:0d:8f:08:4d:b4:52:80:
cd:8e:e5:cc:5c:8f:30:2c:64:69:d2:32:d7:9a:09:b7:69:3b:
f1:be:f9:1d:c8:91:08:41:9a:43:01:4e:44:a0:aa:51:77:98:
91:1a:ac:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUyNEIxMTAvBgNVBAUTKDg3RTgwQzBFNDYzMzEwQTlEMzAzOENFMDEzQ0YxODUz
NzRBNUM3MjIwHhcNMjYwNTA0MjIzNjU1WhcNMjYwNTExMjIzNjU1WjAYMRYwFAYD
VQQDEw02OWY5MWY4Ny01MTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjTnxaipfujdNlVfajC5OwaKuJYAvQgbJyOp8j3emA/Y2IZ0dLppokb0GZ3cq
MRr3Z6IB20h5jtWgvv/wEijNHUr/U6LzFTgpMBeQZK3ifskbmu4udLKpcGUACjY9
4MXulqtB366uEN5TvtWAAthJypsuKl+v9sKz7OOUH7iT0dvjmtltB1jZbs4obIym
qC0IcyMf4Z4oKJz8JyD49YYT7YXrFltXDYwzAyYwcTM0lmFgOrULUjfSpE1n/IhJ
nCFedS6gcR72AL8SFlFsxihPWK9DtIuOEyl89jTe6VEMEoeBa6R+tE6ONYdKuDlg
gjJmpoCQIH/3sZFDLCGa3sbEiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOv59N4l
M50mNS3HWZ+8z8NGoqlYMB8GA1UdIwQYMBaAFIfoDA5GMxCp0wOM4BPPGFN0pcci
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTI0Qi85MjQwNkEwNkJF
QTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVLblRBNHpnRTg4WVUzU2x4
eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2gtZ01Ea1l6RUtuVEE0emdFODhZVTNTbHh5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTI0Qi85MjQwNkEwNkJFQTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVL
blRBNHpnRTg4WVUzU2x4eUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGqT3nb6XD5/kMh5k1rG6ibwS02DmF1wCVyMstvUG8456A6nLYti1FIwSAVVo
s42GAuEGvTpu5pYjYoeKrX5SwIZ332AW4g9GmkmvPQm84fMmCbdtOxScpuXMmWRp
SEHZRn9jKQegYnMoVc3nVVGcmnf++z/g17OluRRRibQkOfap1d7wr4pvPtCYn24I
rBuRUR3Llq/V8DiL+5AvmHPoOlnR6EFxSSqDQM5+MS6FfSDwgcaeK0ubVxxehPTR
3QYjaINnhyUuFYcZnflolzSnNUYNjwhNtFKAzY7lzFyPMCxkadIy15oJt2k78b75
HciRCEGaQwFORKCqUXeYkRqsRw==
-----END CERTIFICATE-----
Generated at Tue May 5 05:51:14 2026 by rpki-client