
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json)
Hash identifier: hvqiRNixdryvTSZVbHdJdUDhI4uLT3tQ1IzXsacFcVQ=
Subject key identifier: 00:D1:8E:E0:3A:A1:ED:A9:47:2F:E3:08:5D:E0:0F:79:D4:A5:09:FF
Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86
Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986
Certificate serial: 07B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
Manifest number: 0795
Signing time: Sun 28 Jun 2026 21:51:06 +0000
Manifest this update: Sun 28 Jun 2026 21:51:06 +0000
Manifest next update: Sun 05 Jul 2026 21:51:06 +0000
Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: x9tzbrRwNyc5qRJcEntQjDM1+va5JSJNHIQjaK8SR68=)
2: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: 7S73h8W2HxXiTwsYOnuyv1jT9DvXmbAVM1IlpZiwrbQ=)
3: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: dTHGef/qaPXq5V6Jr39TXLuUIZibSjAipj9MsBmIQ2Y=)
4: 457C2AF8210811F092050034C4F9AE02.roa (hash: WEX6LWR0ej6+sm6Apo4GxC3XFf/K0Ijx563V6zRrBlM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl
rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Jul 2026 21:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1976 (0x7b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986
Validity
Not Before: Jun 28 21:51:06 2026 GMT
Not After : Jul 5 21:51:06 2026 GMT
Subject: CN=6a41974a-02c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:4b:4d:69:bc:44:a8:1e:eb:99:02:9c:d2:
a1:77:40:ab:96:1c:2d:66:b9:43:af:cf:93:e6:05:
98:18:96:2f:70:7a:88:58:86:c5:bf:25:43:41:fe:
df:f3:6f:6f:4c:4f:1c:69:f1:6b:07:ad:b7:f5:a9:
1f:8a:6d:96:7b:87:1d:99:bc:74:e6:16:27:4e:8b:
00:13:f2:b0:e8:72:5a:13:f8:f6:00:58:6c:d8:8d:
5d:5e:0b:42:88:a6:8d:fb:22:b5:47:a5:02:ae:3b:
9c:bc:fb:97:0c:bd:65:08:74:a1:13:5e:d4:6d:78:
d1:7b:ed:bd:56:61:db:92:38:d9:3e:6f:b4:4f:c7:
b2:fd:82:8c:be:a9:da:06:a4:ea:e5:39:04:15:a4:
08:9f:50:a6:bb:18:42:7c:83:e5:61:a7:2f:74:b7:
82:11:94:e0:5a:5b:9b:f3:b5:34:a0:94:09:d1:5a:
67:47:e1:cb:27:12:e8:38:87:00:d2:24:bc:cb:d8:
91:78:e1:fd:7b:7e:a6:50:9e:c8:55:3a:24:9c:f5:
cb:ba:b4:48:bb:26:d2:5d:89:04:3f:16:6b:e2:29:
56:1c:35:06:54:04:07:43:a0:2f:90:ed:84:35:99:
2e:a1:1e:79:75:2a:fe:bb:16:99:2a:96:7e:df:f4:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D1:8E:E0:3A:A1:ED:A9:47:2F:E3:08:5D:E0:0F:79:D4:A5:09:FF
X509v3 Authority Key Identifier:
keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:9e:08:fc:06:90:1d:ac:ab:71:12:d0:f8:96:01:ca:42:6e:
6e:d9:2a:8b:c6:a4:f9:75:4a:cd:63:de:47:87:79:b8:bb:6d:
ba:70:ee:d4:72:11:c7:e1:44:55:7a:54:93:87:cb:e1:6f:c3:
b2:ff:2f:86:79:35:03:0e:c5:1a:5a:8a:af:00:86:28:75:36:
52:94:5a:ec:f3:d4:86:6c:ff:97:3d:ae:3e:77:2a:fd:3f:94:
35:d6:e9:4c:6a:f0:2f:07:02:e8:67:5e:ef:98:c6:c4:6e:03:
07:ff:44:2a:2c:2e:e7:53:18:4d:89:15:65:bd:7b:16:95:9b:
f3:fa:c3:ce:10:2d:42:37:d6:e9:69:9e:a7:ee:8a:c4:c8:70:
c0:b3:69:25:49:de:62:e5:fa:c0:81:98:40:54:72:39:21:10:
4c:22:16:b5:95:94:63:b7:b6:7c:ad:f2:8b:3c:fd:33:9b:d8:
44:87:14:86:d9:52:9b:82:ae:25:40:9b:12:f2:77:05:ba:29:
a4:52:0d:4f:99:24:71:b5:41:9a:96:4e:73:8b:99:cf:19:62:
80:0e:7c:3e:73:b4:cb:85:f9:d4:85:14:bf:26:0a:94:e3:74:
e1:3b:bc:42:e5:85:92:b6:42:01:6e:27:13:09:06:bb:5d:17:
03:87:32:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG
NjAzREI5ODYwHhcNMjYwNjI4MjE1MTA2WhcNMjYwNzA1MjE1MTA2WjAYMRYwFAYD
VQQDEw02YTQxOTc0YS0wMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn1dLTWm8RKge65kCnNKhd0CrlhwtZrlDr8+T5gWYGJYvcHqIWIbFvyVDQf7f
829vTE8cafFrB6239akfim2We4cdmbx05hYnTosAE/Kw6HJaE/j2AFhs2I1dXgtC
iKaN+yK1R6UCrjucvPuXDL1lCHShE17UbXjRe+29VmHbkjjZPm+0T8ey/YKMvqna
BqTq5TkEFaQIn1CmuxhCfIPlYacvdLeCEZTgWlub87U0oJQJ0VpnR+HLJxLoOIcA
0iS8y9iReOH9e36mUJ7IVToknPXLurRIuybSXYkEPxZr4ilWHDUGVAQHQ6AvkO2E
NZkuoR55dSr+uxaZKpZ+3/Te9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFADRjuA6
oe2pRy/jCF3gD3nUpQn/MB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0
MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6
SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOJ4I/AaQHayrcRLQ+JYBykJubtkqi8ak+XVKzWPeR4d5uLttunDu1HIRx+FE
VXpUk4fL4W/Dsv8vhnk1Aw7FGlqKrwCGKHU2UpRa7PPUhmz/lz2uPncq/T+UNdbp
TGrwLwcC6Gde75jGxG4DB/9EKiwu51MYTYkVZb17FpWb8/rDzhAtQjfW6Wmep+6K
xMhwwLNpJUneYuX6wIGYQFRyOSEQTCIWtZWUY7e2fK3yizz9M5vYRIcUhtlSm4Ku
JUCbEvJ3BboppFINT5kkcbVBmpZOc4uZzxligA58PnO0y4X51IUUvyYKlON04Tu8
QuWFkrZCAW4nEwkGu10XA4cyIw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:44 2026 by rpki-client