
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
File: hemZwivuAcMmTT0iZ1ghCS__0Cw.mft (raw, json)
Hash identifier: 6eIHCDXJ+841C0XmtykSchxdX3wJL1y0eswx/OX4sNo=
Subject key identifier: F0:00:1D:CE:A9:C2:7A:E2:46:56:99:8F:ED:3C:7D:0D:1E:81:5A:23
Authority key identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C
Certificate issuer: /CN=A91AC132/serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
Manifest number: 0136
Signing time: Wed 05 Aug 2026 07:00:13 +0000
Manifest this update: Wed 05 Aug 2026 07:00:12 +0000
Manifest next update: Wed 12 Aug 2026 07:00:12 +0000
Files and hashes: 1: hemZwivuAcMmTT0iZ1ghCS__0Cw.crl (hash: X5theXXzXwVpFyxw3Ty2e0aLBf6EiqsPzdfS01zLQrU=)
2: 8B91AD8CD6B811EF86FC5149C4F9AE02.roa (hash: UTKE8OB36Bwcjc1JGfweQcZlItW6iUFLSvYsOlfMWTM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl
rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Aug 2026 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC132, serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C
Validity
Not Before: Aug 5 07:00:12 2026 GMT
Not After : Aug 12 07:00:12 2026 GMT
Subject: CN=6a72df7d-737a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c5:aa:0c:fa:ba:f3:db:ff:e8:31:49:8b:42:
cd:46:ef:4c:b1:19:a1:36:82:17:74:49:44:f8:ad:
c1:b8:9a:30:e0:d2:e2:1b:79:df:99:ed:21:74:ac:
be:a8:59:66:d7:8e:70:fe:36:28:ae:36:b7:25:de:
48:83:a3:91:cd:a1:ac:01:aa:b1:e4:9c:d5:62:17:
b9:9d:41:24:a1:f2:37:93:5b:b0:31:3f:36:45:45:
cb:90:d3:57:a0:83:67:d6:56:02:f9:2a:b8:4d:d0:
15:44:11:a5:de:0d:34:f1:18:2e:a5:c5:b6:a6:75:
35:27:46:2d:8e:79:07:ce:46:99:a3:1c:4a:b4:d4:
fc:9b:da:9c:96:ca:a1:2d:df:44:80:e6:cb:af:59:
2e:84:6d:bb:32:e8:63:de:64:17:68:31:0e:c1:5c:
32:a0:1a:5a:18:e5:f1:40:c5:ad:9b:a9:57:6e:76:
11:ae:ad:de:ad:ad:38:46:c5:6a:06:44:1e:bd:9a:
e8:d8:88:45:5c:fd:8d:4c:42:f9:fd:ae:71:e4:ec:
73:76:40:1b:9d:c8:22:61:d8:d3:0a:29:79:f9:85:
89:26:ba:63:c2:b0:a7:44:2b:12:06:ea:32:f2:76:
f8:c7:54:f0:84:b4:7e:c0:64:54:06:cc:82:27:73:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:00:1D:CE:A9:C2:7A:E2:46:56:99:8F:ED:3C:7D:0D:1E:81:5A:23
X509v3 Authority Key Identifier:
keyid:85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:aa:59:81:24:41:03:aa:61:cc:92:86:93:a0:79:5d:93:6e:
7d:62:f8:4c:c7:74:92:c8:36:ec:d3:58:d6:a0:2f:37:04:3a:
a1:a1:47:4b:8b:36:07:75:bd:e6:eb:3f:b0:c3:f1:ae:f3:4c:
0e:f3:3f:84:05:5b:17:f7:e5:e3:d4:8e:74:7e:9f:fa:19:4a:
16:f6:16:25:c4:e0:31:2d:be:dc:89:bb:68:88:7a:7f:ab:bb:
52:6a:b8:6d:d9:ac:e0:47:15:ab:53:34:ce:7a:5c:de:30:f5:
35:55:03:a4:61:cc:fe:a9:ee:20:9a:53:c4:3d:3f:9b:2f:34:
aa:67:72:bc:a2:97:88:f6:60:d9:9d:23:9e:ae:9f:e2:e9:3e:
32:16:5c:df:27:09:7c:cc:1b:bc:7b:b0:33:4b:81:f4:0a:54:
75:4e:c5:5a:5e:78:8d:49:a1:f4:c8:54:eb:df:29:1a:ef:26:
c6:39:10:43:2a:d0:be:8a:14:f7:68:b3:af:5e:83:10:10:e6:
47:27:1b:1e:b6:d7:d8:3d:2c:67:de:5f:b4:13:9c:40:78:4a:
8d:87:20:ca:b1:85:48:b4:df:6b:5d:6f:18:c4:c2:a8:68:4a:
e5:45:fb:49:62:7f:e2:86:17:0e:4c:61:d7:c8:ff:0b:89:11:
46:2d:f8:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUMxMzIxMTAvBgNVBAUTKDg1RTk5OUMyMkJFRTAxQzMyNjREM0QyMjY3NTgyMTA5
MkZGRkQwMkMwHhcNMjYwODA1MDcwMDEyWhcNMjYwODEyMDcwMDEyWjAYMRYwFAYD
VQQDEw02YTcyZGY3ZC03MzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3MWqDPq689v/6DFJi0LNRu9MsRmhNoIXdElE+K3BuJow4NLiG3nfme0hdKy+
qFlm145w/jYorja3Jd5Ig6ORzaGsAaqx5JzVYhe5nUEkofI3k1uwMT82RUXLkNNX
oINn1lYC+Sq4TdAVRBGl3g008RgupcW2pnU1J0YtjnkHzkaZoxxKtNT8m9qclsqh
Ld9EgObLr1kuhG27Muhj3mQXaDEOwVwyoBpaGOXxQMWtm6lXbnYRrq3era04RsVq
BkQevZro2IhFXP2NTEL5/a5x5OxzdkAbncgiYdjTCil5+YWJJrpjwrCnRCsSBuoy
8nb4x1TwhLR+wGRUBsyCJ3OOBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPAAHc6p
wnriRlaZj+08fQ0egVojMB8GA1UdIwQYMBaAFIXpmcIr7gHDJk09ImdYIQkv/9As
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzEzMi9DNEZBMTRGOEI4
MEMxMUVGODRGQTNFMzVDNEY5QUUwMi9oZW1ad2l2dUFjTW1UVDBpWjFnaENTX18w
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hlbVp3aXZ1QWNNbVRUMGlaMWdoQ1NfXzBDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QzEzMi9DNEZBMTRGOEI4MEMxMUVGODRGQTNFMzVDNEY5QUUwMi9oZW1ad2l2dUFj
TW1UVDBpWjFnaENTX18wQ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEapZgSRBA6phzJKGk6B5XZNufWL4TMd0ksg27NNY1qAvNwQ6oaFHS4s2B3W9
5us/sMPxrvNMDvM/hAVbF/fl49SOdH6f+hlKFvYWJcTgMS2+3Im7aIh6f6u7Umq4
bdms4EcVq1M0znpc3jD1NVUDpGHM/qnuIJpTxD0/my80qmdyvKKXiPZg2Z0jnq6f
4uk+MhZc3ycJfMwbvHuwM0uB9ApUdU7FWl54jUmh9MhU698pGu8mxjkQQyrQvooU
92izr16DEBDmRycbHrbX2D0sZ95ftBOcQHhKjYcgyrGFSLTfa11vGMTCqGhK5UX7
SWJ/4oYXDkxh18j/C4kRRi34rw==
-----END CERTIFICATE-----
Generated at Wed Aug 5 22:12:12 2026 by rpki-client