
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft
File: h6EudRSbPYpNJyoTCT72rJslLPM.mft (raw, json)
Hash identifier: fUzQHHvfhD2LrP4QCpUKUpRzxmX5sGfDJTDQKNrST+Y=
Subject key identifier: 28:20:4F:59:3C:3C:CF:74:1C:7B:B9:55:DB:C1:A4:D6:9E:D3:34:DB
Authority key identifier: 87:A1:2E:75:14:9B:3D:8A:4D:27:2A:13:09:3E:F6:AC:9B:25:2C:F3
Certificate issuer: /CN=A919BC76/serialNumber=87A12E75149B3D8A4D272A13093EF6AC9B252CF3
Certificate serial: 0238
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft
Manifest number: 022A
Signing time: Sun 05 Apr 2026 02:15:52 +0000
Manifest this update: Sun 05 Apr 2026 02:15:51 +0000
Manifest next update: Sun 12 Apr 2026 02:15:51 +0000
Files and hashes: 1: h6EudRSbPYpNJyoTCT72rJslLPM.crl (hash: AOvpnTzhpVhKYaw35Nu/dmgxZtSFFoYN6LvFwODmHnQ=)
2: 91A7AB90D79F11EE8DB3B465C4F9AE02.roa (hash: ToEnCszQwNdTGww6ZHqC+yX3aTtWgwuiMVQnb8/Owd4=)
3: 62DD62F6D09111EE87557671C4F9AE02.roa (hash: ndfijSnrkILmrNzPlTpwUcd30vwNHnOLpG8xHvPtyn4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.crl
rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:15:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BC76, serialNumber=87A12E75149B3D8A4D272A13093EF6AC9B252CF3
Validity
Not Before: Apr 5 02:15:51 2026 GMT
Not After : Apr 12 02:15:51 2026 GMT
Subject: CN=69d1c5d8-04b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:e0:c5:7b:e3:0b:63:4e:65:b3:0c:b6:76:
52:9e:5b:41:d4:70:5d:0b:8c:c7:17:c7:84:4c:54:
29:8c:f3:44:d7:07:2b:be:96:44:6f:37:6a:8c:26:
87:10:6a:b5:a2:86:90:4d:fc:33:08:c3:1e:3e:3f:
bc:cd:f6:c1:af:e5:ab:fe:76:78:9c:5a:5f:e8:09:
2d:bc:a3:63:66:6a:e2:ac:44:90:35:b9:97:4c:c1:
b0:16:1c:63:8a:7a:c5:93:0a:f6:69:95:5f:5d:2c:
bf:31:6e:35:bb:8b:23:88:d6:b6:5b:50:a9:9a:1e:
0a:42:6d:4b:7b:7e:84:63:3c:80:f9:55:7f:89:c5:
6b:21:75:90:80:6c:88:1f:d9:f8:3b:2c:59:4a:35:
2d:f3:e4:0d:aa:43:a8:69:cf:ab:2d:f5:64:bd:3b:
47:d1:db:0c:71:e8:ec:b1:59:87:17:2a:26:81:8d:
b1:da:35:fd:2a:d6:38:1f:a8:6d:86:8f:c1:01:9e:
c9:9a:40:b4:03:24:6f:1f:96:6d:d3:1f:22:65:66:
a6:96:be:e8:4a:86:ee:0f:d2:cc:30:5a:21:60:ba:
0b:89:28:fa:90:2b:3b:82:de:73:c0:c7:43:7f:5a:
99:c9:a0:3f:ef:36:0a:50:96:3c:61:e4:f5:6b:82:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:20:4F:59:3C:3C:CF:74:1C:7B:B9:55:DB:C1:A4:D6:9E:D3:34:DB
X509v3 Authority Key Identifier:
keyid:87:A1:2E:75:14:9B:3D:8A:4D:27:2A:13:09:3E:F6:AC:9B:25:2C:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:73:02:55:ac:b5:50:16:91:b7:01:94:46:79:b0:c2:ae:95:
fb:d6:60:ea:c6:b5:0b:67:9c:84:fa:c2:8a:a4:42:ce:e6:34:
7f:86:8e:de:c7:09:55:0c:f7:79:fe:a3:09:e0:76:6d:5a:6b:
f8:b0:e1:9b:d6:a7:2f:f8:cd:1e:b2:15:89:d6:9b:3a:2f:49:
a5:67:ed:eb:69:4d:8b:80:4a:13:b6:be:c5:c4:4e:5c:41:da:
40:f4:21:6a:9a:26:21:1b:cd:8e:2e:52:4b:81:52:16:77:22:
a3:35:28:2e:5e:fb:38:71:58:9b:da:ac:fd:32:42:16:04:5b:
a8:06:0c:6f:44:9b:2e:64:65:93:6f:ab:72:41:03:1b:b9:75:
9f:f0:c1:d5:c0:7e:65:73:50:e0:e3:ad:5c:4c:36:30:3e:ef:
2e:20:4a:33:70:ed:8f:9e:bf:1c:c9:c8:00:2a:e8:c2:55:c7:
de:59:60:49:99:04:f5:3d:df:d1:4b:a6:cc:a1:34:7a:57:51:
cf:46:cb:b8:2b:74:ca:6a:29:d7:59:6f:a2:20:23:11:af:22:
cd:e5:79:55:93:b5:84:a1:a9:41:a1:9f:e6:35:d0:e6:24:9f:
18:b5:51:fd:06:e9:2a:50:60:0a:0e:8f:6a:c5:38:33:f6:b6:
0b:b4:b8:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUJDNzYxMTAvBgNVBAUTKDg3QTEyRTc1MTQ5QjNEOEE0RDI3MkExMzA5M0VGNkFD
OUIyNTJDRjMwHhcNMjYwNDA1MDIxNTUxWhcNMjYwNDEyMDIxNTUxWjAYMRYwFAYD
VQQDEw02OWQxYzVkOC0wNGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx7HgxXvjC2NOZbMMtnZSnltB1HBdC4zHF8eETFQpjPNE1wcrvpZEbzdqjCaH
EGq1ooaQTfwzCMMePj+8zfbBr+Wr/nZ4nFpf6AktvKNjZmrirESQNbmXTMGwFhxj
inrFkwr2aZVfXSy/MW41u4sjiNa2W1Cpmh4KQm1Le36EYzyA+VV/icVrIXWQgGyI
H9n4OyxZSjUt8+QNqkOoac+rLfVkvTtH0dsMcejssVmHFyomgY2x2jX9KtY4H6ht
ho/BAZ7JmkC0AyRvH5Zt0x8iZWamlr7oSobuD9LMMFohYLoLiSj6kCs7gt5zwMdD
f1qZyaA/7zYKUJY8YeT1a4JrNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCggT1k8
PM90HHu5VdvBpNae0zTbMB8GA1UdIwQYMBaAFIehLnUUmz2KTScqEwk+9qybJSzz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkM3Ni9GMUFEM0UzRUU4
QkIxMUVEODUzOERBMUZDNEY5QUUwMi9oNkV1ZFJTYlBZcE5KeW9UQ1Q3MnJKc2xM
UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g2RXVkUlNiUFlwTkp5b1RDVDcyckpzbExQTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QkM3Ni9GMUFEM0UzRUU4QkIxMUVEODUzOERBMUZDNEY5QUUwMi9oNkV1ZFJTYlBZ
cE5KeW9UQ1Q3MnJKc2xMUE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZHMCVay1UBaRtwGURnmwwq6V+9Zg6sa1C2echPrCiqRCzuY0f4aO3scJVQz3
ef6jCeB2bVpr+LDhm9anL/jNHrIVidabOi9JpWft62lNi4BKE7a+xcROXEHaQPQh
apomIRvNji5SS4FSFnciozUoLl77OHFYm9qs/TJCFgRbqAYMb0SbLmRlk2+rckED
G7l1n/DB1cB+ZXNQ4OOtXEw2MD7vLiBKM3Dtj56/HMnIACrowlXH3llgSZkE9T3f
0UumzKE0eldRz0bLuCt0ymop11lvoiAjEa8izeV5VZO1hKGpQaGf5jXQ5iSfGLVR
/QbpKlBgCg6PasU4M/a2C7S47A==
-----END CERTIFICATE-----
Generated at Mon Apr 6 11:18:43 2026 by rpki-client