
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json)
Hash identifier: VQ8uswxq176dBLRLuleHs9ZwyBUV/k8QaeMCJI5UGSc=
Subject key identifier: D2:73:52:43:BD:57:9D:0F:35:99:8F:7D:A3:AD:05:90:E3:DB:49:9B
Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
Manifest number: F7
Signing time: Fri 17 Apr 2026 06:04:00 +0000
Manifest this update: Fri 17 Apr 2026 06:04:00 +0000
Manifest next update: Fri 24 Apr 2026 06:04:00 +0000
Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: +aPd7a2bsfQxo5+XsCWV8C7ulxPNw3ND+4nwgbTJH7A=)
2: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: x28Oj7X+ym9PTtSgpQ2J6HOcFV8oNcxzJtpKw77hGpU=)
3: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: f+4YHmGNktYVNDLxKhq1vMQrIMFjsHdCm70UHTOep/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Validity
Not Before: Apr 17 06:04:00 2026 GMT
Not After : Apr 24 06:04:00 2026 GMT
Subject: CN=69e1cd50-a953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:28:2d:07:e5:e0:fd:75:50:b6:f6:b6:d3:
af:29:56:57:e4:8b:89:0d:3e:4e:fb:15:8f:c4:6b:
47:f2:1b:07:18:a8:84:0c:ff:3e:99:1c:f0:61:01:
cf:96:5b:94:f7:02:ff:ba:5d:f1:93:4a:21:e6:46:
0e:c8:90:04:39:6b:00:e3:61:d9:a4:c0:d8:c6:99:
ed:1c:88:0f:a6:81:47:64:ed:ca:60:37:6d:d7:10:
bb:c4:46:af:6c:39:f9:57:bb:bd:7f:dc:e6:88:7d:
b5:8d:c5:1e:c8:f2:4b:10:01:76:a7:dc:de:e1:e2:
63:9c:8b:43:55:5c:ef:b0:4e:0a:3a:11:a9:e1:b6:
5d:03:d2:cd:74:9e:b5:1a:22:34:2a:15:47:81:9f:
ba:a5:4f:98:32:1c:91:79:f7:23:3c:67:43:c2:0f:
d6:df:fe:98:75:b5:6e:f1:3e:d9:5e:d5:c8:9d:18:
8b:cb:0e:f9:30:11:9b:d5:33:98:66:4f:44:05:9e:
7d:1f:e1:5a:de:b9:8a:52:7d:0b:68:c1:15:72:81:
e1:01:d4:38:b3:ec:8a:c0:09:9e:fd:d6:e7:fd:88:
cc:7b:94:91:d1:1b:d5:97:33:f3:7e:92:03:92:bd:
10:2d:55:41:88:43:09:c0:2f:f5:8d:33:e9:55:a7:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:73:52:43:BD:57:9D:0F:35:99:8F:7D:A3:AD:05:90:E3:DB:49:9B
X509v3 Authority Key Identifier:
keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:cc:05:79:e7:eb:df:92:83:a9:a6:f7:e3:df:5f:69:87:b3:
68:9f:25:22:7b:5f:47:88:30:a0:d2:b7:68:c8:d9:9b:44:b4:
d0:1e:f3:4a:2d:00:05:b8:f9:c3:c1:66:ba:fa:1e:72:3c:36:
12:f7:33:3c:5b:b3:3c:56:ca:3c:59:b5:de:9e:b2:52:a2:58:
28:aa:5a:dd:7d:51:35:7f:91:82:44:e9:f8:e8:4e:21:09:a5:
22:bc:38:25:49:01:9e:ba:b3:19:3a:89:75:e8:a8:da:96:bb:
f2:c7:cf:91:dc:a9:57:ad:f2:80:a6:6a:ad:a7:94:91:c1:6b:
1a:21:42:1c:09:54:4e:d7:81:a5:75:79:cd:37:98:4e:10:26:
a8:b6:b7:1a:4f:79:1f:74:10:21:14:b2:5a:f3:fe:be:4d:dd:
4f:a2:d7:42:ee:b0:b4:85:9e:76:eb:6e:db:27:81:27:df:ea:
96:aa:0a:99:86:29:3c:21:b7:43:e0:58:64:dc:2b:54:b5:cc:
92:ff:cf:90:29:86:e3:bf:35:ec:11:3c:44:e7:70:97:92:6b:
26:20:4a:51:d1:bd:bf:43:f7:ae:b0:f2:87:35:55:e0:bc:ff:
45:0c:74:d5:90:90:9b:e1:8f:f9:fa:47:61:b0:a0:aa:c4:39:
2f:1b:96:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:03 2026 by rpki-client