
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
File: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft (raw, json)
Hash identifier: FaHz1tpHQzdV6gXZOWaYXVlV36KZucmSL95vG0erutA=
Subject key identifier: 16:B2:25:6C:65:AC:A8:11:8B:3A:7A:3A:8A:84:30:12:04:0F:93:D6
Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE
Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE
Certificate serial: 033D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
Manifest number: 0335
Signing time: Thu 21 May 2026 01:10:13 +0000
Manifest this update: Thu 21 May 2026 01:10:13 +0000
Manifest next update: Thu 28 May 2026 01:10:13 +0000
Files and hashes: 1: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl (hash: rf2ksi5PfLK0vC9ghjMTnNxqzz+91+O76HF6rh5yBSU=)
2: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (hash: Vot1z8JYd9uGCTzLWBuwe/Mk40hyM6dwkLe5ZR9MnAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl
rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 829 (0x33d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2A6D, serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE
Validity
Not Before: May 21 01:10:13 2026 GMT
Not After : May 28 01:10:13 2026 GMT
Subject: CN=6a0e5b75-f8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:4e:f1:da:37:fe:08:05:de:9b:67:4c:a5:
dc:55:4c:6a:09:ac:f6:32:93:f6:a5:8e:18:be:c9:
38:ba:13:80:93:fd:6f:91:54:9f:67:14:28:b8:c1:
c2:52:f0:dd:99:05:a3:e4:6f:1c:ab:ed:4c:75:e3:
6f:07:53:0c:74:51:6f:ad:7c:40:82:cd:0f:0d:8b:
e1:63:6a:b7:cd:e4:80:14:c4:e5:11:a3:e6:8d:8a:
2e:79:d5:15:47:97:c7:6d:7d:dc:2b:08:5c:28:ac:
d1:3c:e3:e5:76:88:94:07:4d:ac:c1:8b:31:6c:3f:
b4:43:23:c9:7f:8b:9f:75:38:19:a8:36:1d:68:9d:
32:9e:ec:e8:af:eb:03:b5:56:cd:48:26:54:e8:ab:
9a:48:f3:d0:58:8c:4a:1d:f0:1e:d2:ba:50:3f:13:
6a:9a:bd:be:fe:bd:ae:2c:8d:12:99:46:84:44:cf:
d2:3b:a2:7d:97:37:ce:ec:36:11:a3:ae:f1:6d:e7:
fa:9a:95:78:98:76:f3:df:67:4c:4f:cb:9d:ad:4f:
9e:ee:e0:4e:5a:a1:e2:93:25:c2:91:16:97:c4:84:
14:4f:02:6f:f8:66:2a:c3:b7:34:1f:01:0f:1f:2c:
37:96:ed:76:42:92:84:40:45:55:c1:f1:c1:ae:9f:
69:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B2:25:6C:65:AC:A8:11:8B:3A:7A:3A:8A:84:30:12:04:0F:93:D6
X509v3 Authority Key Identifier:
keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:7d:1e:8c:33:41:0a:00:3e:d3:8c:f7:f2:23:03:19:9c:51:
e9:28:c0:c2:9b:1d:37:0e:6d:51:4d:6a:f2:08:47:b7:67:da:
8b:50:0d:dd:e3:0e:f1:0c:1b:00:1b:ad:d6:fc:cf:81:5f:95:
0e:62:89:45:6a:ac:c3:eb:ed:b6:c1:0c:dd:cd:9d:dc:9b:18:
85:56:a4:4c:73:25:79:58:37:0e:48:4d:7c:5e:63:fb:31:91:
c3:fd:8a:84:71:a8:a0:7b:08:f0:d0:f0:71:6c:27:ba:9a:e1:
0d:1b:fe:c8:4c:09:18:04:b6:0e:b7:db:fc:91:a2:62:20:43:
ea:3e:d2:b8:55:b6:cb:91:e7:be:c5:72:40:dc:23:fc:7c:e7:
3f:2f:7b:ac:d8:a2:2c:06:aa:a7:e4:31:86:c9:8e:d2:22:68:
c1:a6:ec:db:43:24:31:ff:44:dd:56:c0:43:e0:36:82:0f:69:
f0:44:2c:14:26:64:e1:a1:82:8f:30:84:c2:e3:ce:9e:51:de:
80:60:78:09:0c:d4:82:77:2e:78:58:18:dd:81:01:6e:dc:ba:
a6:7c:f0:5c:df:7b:f2:f3:39:c8:20:8e:11:bc:32:10:62:ab:
0c:52:71:fc:98:9b:13:08:0a:ec:d1:99:e3:df:b9:43:86:cb:
59:84:54:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJBNkQxMTAvBgNVBAUTKEZDN0IzOTRGOEY5Q0JGOUNERDIwOTNDMjcyNkRERkU5
MTNGQUE5Q0UwHhcNMjYwNTIxMDExMDEzWhcNMjYwNTI4MDExMDEzWjAYMRYwFAYD
VQQDEw02YTBlNWI3NS1mOGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlDlO8do3/ggF3ptnTKXcVUxqCaz2MpP2pY4Yvsk4uhOAk/1vkVSfZxQouMHC
UvDdmQWj5G8cq+1MdeNvB1MMdFFvrXxAgs0PDYvhY2q3zeSAFMTlEaPmjYouedUV
R5fHbX3cKwhcKKzRPOPldoiUB02swYsxbD+0QyPJf4ufdTgZqDYdaJ0ynuzor+sD
tVbNSCZU6KuaSPPQWIxKHfAe0rpQPxNqmr2+/r2uLI0SmUaERM/SO6J9lzfO7DYR
o67xbef6mpV4mHbz32dMT8udrU+e7uBOWqHikyXCkRaXxIQUTwJv+GYqw7c0HwEP
Hyw3lu12QpKEQEVVwfHBrp9pQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBayJWxl
rKgRizp6OoqEMBIED5PWMB8GA1UdIwQYMBaAFPx7OU+PnL+c3SCTwnJt3+kT+qnO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkE2RC83RjhENjNCNDBD
Q0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1emRJSlBDY20zZjZSUDZx
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19IczVUNC1jdjV6ZElKUENjbTNmNlJQNnFjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MkE2RC83RjhENjNCNDBDQ0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1
emRJSlBDY20zZjZSUDZxYzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgH0ejDNBCgA+04z38iMDGZxR6SjAwpsdNw5tUU1q8ghHt2fai1AN3eMO8Qwb
ABut1vzPgV+VDmKJRWqsw+vttsEM3c2d3JsYhVakTHMleVg3DkhNfF5j+zGRw/2K
hHGooHsI8NDwcWwnuprhDRv+yEwJGAS2Drfb/JGiYiBD6j7SuFW2y5HnvsVyQNwj
/HznPy97rNiiLAaqp+QxhsmO0iJowabs20MkMf9E3VbAQ+A2gg9p8EQsFCZk4aGC
jzCEwuPOnlHegGB4CQzUgncueFgY3YEBbty6pnzwXN978vM5yCCOEbwyEGKrDFJx
/JibEwgK7NGZ49+5Q4bLWYRUzg==
-----END CERTIFICATE-----
Generated at Thu May 21 10:14:22 2026 by rpki-client