
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json)
Hash identifier: 5qT5l09Izww+JM8J4IlAIYcqLIv5hy79YVIsGHWWnPM=
Subject key identifier: EE:B0:F6:EF:D4:A4:97:B3:EC:75:E4:91:4C:3A:42:0B:BA:C8:91:D2
Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
Manifest number: 014C
Signing time: Tue 29 Sep 2026 05:53:29 +0000
Manifest this update: Tue 29 Sep 2026 05:53:29 +0000
Manifest next update: Tue 06 Oct 2026 05:53:29 +0000
Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: OfL5vxZt3Mz2luRrkbM1wZ1JPftcuGPJGwS1rSnkFwg=)
2: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: QhYXroPd+KBbNk/Tc/bCNExY+7W0cu8INv3BcwAJYmQ=)
3: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: DfxQYn473L3GRcLQOcasHyVtEcw9/bAiZQ1Qjo4k8zI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 05:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Validity
Not Before: Sep 29 05:53:29 2026 GMT
Not After : Oct 6 05:53:29 2026 GMT
Subject: CN=6abb5259-f882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:a9:de:1b:06:b0:ab:2a:df:9c:33:76:61:
a7:24:e9:d3:56:20:06:03:a0:86:48:7b:fd:ac:fc:
32:e8:9f:7d:35:a4:5f:60:45:a8:75:8b:42:1b:c6:
cb:ae:db:23:f2:c1:7e:37:5d:ad:54:b6:12:cb:0a:
47:7c:ed:eb:4a:88:87:fd:68:7d:2c:4a:f0:9d:66:
13:48:ec:ac:9e:e8:66:d2:17:db:21:fb:17:1c:a9:
cc:ca:04:d4:77:93:ca:3e:47:b1:16:8e:63:f4:56:
2f:e1:92:0f:7c:4e:98:42:84:ee:87:cd:57:fb:97:
3b:c6:e8:22:44:4a:8e:83:45:f6:e4:90:e7:4a:65:
7c:30:19:68:d3:67:ee:40:a4:a3:e0:e7:10:6b:9e:
ee:11:fe:87:43:f3:03:69:94:4c:95:90:db:b2:e8:
02:2b:f0:f4:3b:9f:95:8a:f9:ed:99:04:e8:58:00:
76:c8:31:a6:00:9b:fa:fd:f8:bd:d6:3c:3b:a5:80:
23:a8:df:bc:b0:ce:f0:c5:55:1e:bd:e3:60:c9:e7:
00:d6:ba:2f:13:3c:c9:00:3f:c2:1d:77:f8:71:82:
f2:46:81:f2:f2:82:11:aa:f6:4a:af:4c:4a:4f:c6:
16:98:0a:b7:30:69:47:41:12:4d:0c:1a:de:ec:86:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B0:F6:EF:D4:A4:97:B3:EC:75:E4:91:4C:3A:42:0B:BA:C8:91:D2
X509v3 Authority Key Identifier:
keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:18:ab:35:e3:8e:80:47:3e:46:e2:6b:ca:58:2a:68:fe:58:
dd:22:8b:f5:54:d7:8b:26:d6:cd:6f:bd:69:31:f5:98:63:ed:
c4:e7:e2:45:68:9c:6e:cb:da:32:33:cb:7d:a1:62:09:3b:e1:
88:58:ca:ad:32:2c:36:cf:69:35:bf:22:7b:5b:c2:7f:26:9d:
f3:0b:eb:27:1e:cc:c2:3a:05:86:af:07:67:f0:de:7a:7e:a7:
28:d2:87:d3:cb:64:99:43:a3:c9:c1:ca:f6:d3:a4:8f:52:77:
4d:68:cd:79:dc:73:4c:11:8b:f5:37:8c:d0:5e:ad:ca:77:5a:
67:2f:39:d2:57:63:38:7a:9d:dd:ad:19:bd:9e:dc:2e:21:ca:
2b:eb:c3:9f:8a:d4:f4:44:f5:70:8c:59:f6:27:f1:9f:ec:88:
3d:2a:e5:a5:77:51:5c:f6:d8:c3:eb:db:f5:c4:fc:93:d7:cb:
a0:cb:29:34:98:6f:9d:76:30:d4:25:23:fa:33:be:13:81:54:
de:2c:5e:6f:51:fa:8d:0e:f1:6f:a8:ed:05:51:5a:35:fa:90:
16:9d:e6:72:27:f1:53:be:c3:c7:41:de:75:6e:dd:cc:10:59:
4d:4f:23:86:ab:d5:87:5a:ac:2a:60:48:e9:4f:00:e4:e1:33:
43:9f:5a:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA1NzgxMTAvBgNVBAUTKDFEM0RBRUY3RDI3ODgzNzNFRERGQ0IxQUQ1QzRDMjM1
NkM1N0FERUQwHhcNMjYwOTI5MDU1MzI5WhcNMjYxMDA2MDU1MzI5WjAYMRYwFAYD
VQQDEw02YWJiNTI1OS1mODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt0Kp3hsGsKsq35wzdmGnJOnTViAGA6CGSHv9rPwy6J99NaRfYEWodYtCG8bL
rtsj8sF+N12tVLYSywpHfO3rSoiH/Wh9LErwnWYTSOysnuhm0hfbIfsXHKnMygTU
d5PKPkexFo5j9FYv4ZIPfE6YQoTuh81X+5c7xugiREqOg0X25JDnSmV8MBlo02fu
QKSj4OcQa57uEf6HQ/MDaZRMlZDbsugCK/D0O5+VivntmQToWAB2yDGmAJv6/fi9
1jw7pYAjqN+8sM7wxVUeveNgyecA1rovEzzJAD/CHXf4cYLyRoHy8oIRqvZKr0xK
T8YWmAq3MGlHQRJNDBre7Ib45wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6w9u/U
pJez7HXkkUw6Qgu6yJHSMB8GA1UdIwQYMBaAFB09rvfSeINz7d/LGtXEwjVsV63t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDU3OC8wMDNBNzlEQUNG
M0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGczUHQzOHNhMWNUQ05XeFhy
ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0hUMnU5OUo0ZzNQdDM4c2ExY1RDTld4WHJlMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDU3OC8wMDNBNzlEQUNGM0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGcz
UHQzOHNhMWNUQ05XeFhyZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxBirNeOOgEc+RuJrylgqaP5Y3SKL9VTXiybWzW+9aTH1mGPtxOfiRWicbsva
MjPLfaFiCTvhiFjKrTIsNs9pNb8ie1vCfyad8wvrJx7MwjoFhq8HZ/Deen6nKNKH
08tkmUOjycHK9tOkj1J3TWjNedxzTBGL9TeM0F6tyndaZy850ldjOHqd3a0ZvZ7c
LiHKK+vDn4rU9ET1cIxZ9ifxn+yIPSrlpXdRXPbYw+vb9cT8k9fLoMspNJhvnXYw
1CUj+jO+E4FU3ixeb1H6jQ7xb6jtBVFaNfqQFp3mcifxU77Dx0HedW7dzBBZTU8j
hqvVh1qsKmBI6U8A5OEzQ59alw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 19:52:20 2026 by rpki-client