
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json)
Hash identifier: ZvHC4uMZooGddZBEYfugaUaH5Vtk5goHonYU4JW3QOY=
Subject key identifier: B7:E2:75:FF:12:AC:E6:AC:F9:42:93:7E:13:3B:6F:FD:B2:2A:BF:AB
Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86
Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986
Certificate serial: 07D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
Manifest number: 07AD
Signing time: Fri 14 Aug 2026 21:34:44 +0000
Manifest this update: Fri 14 Aug 2026 21:34:43 +0000
Manifest next update: Fri 21 Aug 2026 21:34:43 +0000
Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: fKvymoN4Iscx8ou3lSnWWwNAwRjJDZ/cZq2mmJCTWjk=)
2: 457C2AF8210811F092050034C4F9AE02.roa (hash: WEX6LWR0ej6+sm6Apo4GxC3XFf/K0Ijx563V6zRrBlM=)
3: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: dTHGef/qaPXq5V6Jr39TXLuUIZibSjAipj9MsBmIQ2Y=)
4: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: 7S73h8W2HxXiTwsYOnuyv1jT9DvXmbAVM1IlpZiwrbQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl
rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Aug 2026 21:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000 (0x7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986
Validity
Not Before: Aug 14 21:34:43 2026 GMT
Not After : Aug 21 21:34:43 2026 GMT
Subject: CN=6a7f89f4-e650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:35:9b:b4:f1:fa:12:88:1f:b9:f0:38:31:
aa:a2:c9:43:e4:61:82:ff:1a:95:c9:23:ee:69:0b:
92:ef:8f:e9:1f:f5:16:7a:02:1f:4e:e4:77:ff:d4:
16:ac:4c:db:d0:85:56:ce:9e:dd:d1:41:a6:89:ff:
d0:f8:02:a8:d3:f0:be:88:07:e5:28:de:6b:a8:02:
44:8c:e5:a2:e5:49:c0:af:86:2b:22:7e:cf:69:a1:
ac:46:3d:1e:c5:71:73:ed:98:48:3d:ab:07:55:21:
b2:bb:8a:e8:f7:be:32:02:d2:e7:1f:66:6f:d4:a9:
e6:98:e2:65:4b:dd:06:f7:ad:d4:f4:c3:66:4d:a6:
cc:be:4d:45:66:41:76:72:86:50:83:dc:36:b3:f4:
60:ae:2f:23:d5:35:13:19:91:b0:f7:9b:5a:df:7a:
2a:4d:48:60:db:9d:f4:1e:31:ae:2a:f2:ca:b4:bd:
b4:cd:85:64:56:03:0e:36:03:2a:2c:30:3c:58:79:
83:df:a3:7a:0b:dc:83:e3:2c:7c:d8:ff:90:75:38:
12:ac:d2:e2:ba:29:7b:1b:f4:40:cc:dd:67:17:c3:
f8:b5:f7:0a:22:67:ff:be:f0:0b:8c:41:86:47:40:
b7:9f:57:d7:44:bf:30:a6:87:93:83:c7:7d:82:5b:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E2:75:FF:12:AC:E6:AC:F9:42:93:7E:13:3B:6F:FD:B2:2A:BF:AB
X509v3 Authority Key Identifier:
keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b3:88:be:99:be:f0:a6:e2:56:15:c6:8a:25:9e:ac:1b:fd:
a5:38:15:6d:65:c6:d1:c5:e7:ae:ae:e2:5d:c8:8d:f4:5d:c8:
50:c8:a9:26:62:a0:25:b8:69:43:5d:36:65:5f:81:29:70:48:
8e:69:54:a5:b9:b9:2f:28:09:a9:91:4f:aa:f2:c3:8b:1b:c4:
17:d2:cc:d5:5b:1a:35:cb:93:d6:5d:7a:4b:46:ce:8a:ad:02:
06:fb:24:38:e9:6a:9b:f2:75:a4:68:b1:69:84:c8:b3:91:ac:
5b:72:57:c1:b2:b4:a2:e8:e1:16:8e:b0:44:e7:4c:5f:93:81:
7e:82:df:2c:93:c2:74:59:f0:b2:3c:2c:25:a4:de:34:7d:f6:
c6:ef:d4:51:e4:8f:2c:59:89:5d:ac:99:ef:f4:b6:48:85:a4:
ff:37:e6:6c:8c:f8:03:ad:64:6e:69:3b:1a:ba:8c:cc:06:b4:
3d:41:79:49:3d:ea:d4:48:6a:ef:00:be:eb:24:d2:1c:2e:d0:
18:dc:31:b1:55:12:52:4a:06:a6:f6:ed:74:4f:2c:6c:4d:0a:
75:4f:e2:f0:43:99:5f:fb:95:97:28:41:83:57:7d:92:50:f0:
02:1b:2f:05:97:1e:7a:fa:79:28:e5:9d:cf:44:72:92:40:d9:
87:54:80:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG
NjAzREI5ODYwHhcNMjYwODE0MjEzNDQzWhcNMjYwODIxMjEzNDQzWjAYMRYwFAYD
VQQDEw02YTdmODlmNC1lNjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtes1m7Tx+hKIH7nwODGqoslD5GGC/xqVySPuaQuS74/pH/UWegIfTuR3/9QW
rEzb0IVWzp7d0UGmif/Q+AKo0/C+iAflKN5rqAJEjOWi5UnAr4YrIn7PaaGsRj0e
xXFz7ZhIPasHVSGyu4ro974yAtLnH2Zv1KnmmOJlS90G963U9MNmTabMvk1FZkF2
coZQg9w2s/Rgri8j1TUTGZGw95ta33oqTUhg2530HjGuKvLKtL20zYVkVgMONgMq
LDA8WHmD36N6C9yD4yx82P+QdTgSrNLiuil7G/RAzN1nF8P4tfcKImf/vvALjEGG
R0C3n1fXRL8wpoeTg8d9glsYdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLfidf8S
rOas+UKTfhM7b/2yKr+rMB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0
MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6
SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb7OIvpm+8KbiVhXGiiWerBv9pTgVbWXG0cXnrq7iXciN9F3IUMipJmKgJbhp
Q102ZV+BKXBIjmlUpbm5LygJqZFPqvLDixvEF9LM1VsaNcuT1l16S0bOiq0CBvsk
OOlqm/J1pGixaYTIs5GsW3JXwbK0oujhFo6wROdMX5OBfoLfLJPCdFnwsjwsJaTe
NH32xu/UUeSPLFmJXayZ7/S2SIWk/zfmbIz4A61kbmk7GrqMzAa0PUF5ST3q1Ehq
7wC+6yTSHC7QGNwxsVUSUkoGpvbtdE8sbE0KdU/i8EOZX/uVlyhBg1d9klDwAhsv
BZceevp5KOWdz0RykkDZh1SAMQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:53:52 2026 by rpki-client