
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json)
Hash identifier: eAyZZHmCK2ryh2vQ4D6jZP0LqP3QqbcR6i9rB+k2Gus=
Subject key identifier: 65:4A:17:B8:9C:2D:13:F0:63:9C:9F:E7:06:18:D6:40:2E:C8:ED:AF
Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
Manifest number: 0126
Signing time: Fri 17 Jul 2026 06:58:46 +0000
Manifest this update: Fri 17 Jul 2026 06:58:46 +0000
Manifest next update: Fri 24 Jul 2026 06:58:46 +0000
Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: agOt0Y/AL1bWz9pRb8+c0wV4VZ9ajHrwD0vrZvcuTws=)
2: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: QhYXroPd+KBbNk/Tc/bCNExY+7W0cu8INv3BcwAJYmQ=)
3: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: DfxQYn473L3GRcLQOcasHyVtEcw9/bAiZQ1Qjo4k8zI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Validity
Not Before: Jul 17 06:58:46 2026 GMT
Not After : Jul 24 06:58:46 2026 GMT
Subject: CN=6a59d2a6-f22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:e7:ab:02:34:78:b6:9d:71:67:07:ff:31:
ae:07:7b:f9:be:96:5c:ca:c8:20:69:ef:8e:29:11:
b6:58:33:e6:8d:c1:d3:94:91:a7:2b:7c:3b:d6:8c:
07:54:21:62:0d:47:3f:e6:6e:e2:91:fc:9b:fb:28:
d8:87:3a:57:da:53:74:aa:de:3d:df:7c:bd:32:49:
2a:95:fb:65:1f:c2:a9:99:63:1c:d8:17:52:8e:a5:
f6:6f:c6:57:16:36:7c:49:14:99:a8:c8:ab:f1:a0:
c7:88:1f:1e:f7:98:e3:46:1a:7c:c3:1f:8d:2c:5b:
e7:54:ca:0b:eb:d0:84:59:1e:46:9f:e1:a3:ba:7f:
cd:f3:0a:56:06:fb:02:c4:5d:f4:89:0b:c1:a9:b6:
a5:0a:55:4a:54:eb:39:4e:b8:7e:5e:54:84:e1:2b:
9e:5d:49:03:b1:c3:b6:eb:0b:1e:a0:05:da:3f:ed:
f7:16:4f:55:7c:1e:a0:dc:cc:4e:c4:1e:ad:bf:67:
bf:e2:28:cc:02:12:03:b5:46:6a:e9:c3:c8:cd:02:
35:68:19:f6:8a:96:c7:f2:50:b2:a3:84:5d:78:46:
10:96:4d:cc:75:89:43:ca:46:12:c4:49:f3:69:65:
d9:c9:87:4b:39:f4:a6:7e:be:19:68:58:fc:f7:c2:
9e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4A:17:B8:9C:2D:13:F0:63:9C:9F:E7:06:18:D6:40:2E:C8:ED:AF
X509v3 Authority Key Identifier:
keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:c6:53:78:1b:cc:16:06:d4:78:36:2d:2e:e9:c5:68:ea:24:
30:29:98:e5:52:d1:1f:1d:84:fb:b8:4e:14:53:f4:15:2e:ad:
dc:6a:bc:65:65:ec:3d:30:fd:ee:59:57:42:45:e4:05:d4:ba:
e4:f1:11:eb:cf:9d:68:e3:b2:52:7a:2e:f3:83:b9:16:50:22:
37:08:69:bd:1c:57:bc:7a:c1:5a:37:68:a1:a0:30:57:7a:c0:
25:78:37:c6:17:b9:4d:21:cf:0c:38:86:1b:38:92:58:86:51:
40:c4:bb:a1:ff:5c:cb:ca:17:25:4c:4b:84:ae:d7:6e:5d:85:
56:f4:f0:41:d7:d8:2a:cf:f8:ec:0a:8d:98:9c:b7:7b:48:14:
28:76:89:e5:b7:c9:3c:78:ba:9a:d5:87:bc:40:44:f2:af:02:
c1:c6:11:f2:fe:fb:ce:76:86:5b:fe:9c:0c:60:c9:cc:0e:24:
2b:4c:6c:59:aa:1d:b2:77:bf:bd:0a:6b:74:7e:b4:a9:f6:08:
dd:8f:f9:53:4c:18:79:ef:cf:15:1a:1f:7c:1d:e4:b0:58:9f:
04:6f:69:a7:72:e7:3b:ab:64:7b:69:24:41:68:e3:3b:b1:37:
18:1c:d5:2e:af:6e:aa:fb:3d:85:d8:a1:6b:42:fa:49:d4:11:
e9:c6:e8:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA1NzgxMTAvBgNVBAUTKDFEM0RBRUY3RDI3ODgzNzNFRERGQ0IxQUQ1QzRDMjM1
NkM1N0FERUQwHhcNMjYwNzE3MDY1ODQ2WhcNMjYwNzI0MDY1ODQ2WjAYMRYwFAYD
VQQDEw02YTU5ZDJhNi1mMjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp+3nqwI0eLadcWcH/zGuB3v5vpZcysggae+OKRG2WDPmjcHTlJGnK3w71owH
VCFiDUc/5m7ikfyb+yjYhzpX2lN0qt4933y9MkkqlftlH8KpmWMc2BdSjqX2b8ZX
FjZ8SRSZqMir8aDHiB8e95jjRhp8wx+NLFvnVMoL69CEWR5Gn+Gjun/N8wpWBvsC
xF30iQvBqbalClVKVOs5Trh+XlSE4SueXUkDscO26wseoAXaP+33Fk9VfB6g3MxO
xB6tv2e/4ijMAhIDtUZq6cPIzQI1aBn2ipbH8lCyo4RdeEYQlk3MdYlDykYSxEnz
aWXZyYdLOfSmfr4ZaFj898KeDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVKF7ic
LRPwY5yf5wYY1kAuyO2vMB8GA1UdIwQYMBaAFB09rvfSeINz7d/LGtXEwjVsV63t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDU3OC8wMDNBNzlEQUNG
M0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGczUHQzOHNhMWNUQ05XeFhy
ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0hUMnU5OUo0ZzNQdDM4c2ExY1RDTld4WHJlMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDU3OC8wMDNBNzlEQUNGM0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGcz
UHQzOHNhMWNUQ05XeFhyZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA38ZTeBvMFgbUeDYtLunFaOokMCmY5VLRHx2E+7hOFFP0FS6t3Gq8ZWXsPTD9
7llXQkXkBdS65PER68+daOOyUnou84O5FlAiNwhpvRxXvHrBWjdooaAwV3rAJXg3
xhe5TSHPDDiGGziSWIZRQMS7of9cy8oXJUxLhK7Xbl2FVvTwQdfYKs/47AqNmJy3
e0gUKHaJ5bfJPHi6mtWHvEBE8q8CwcYR8v77znaGW/6cDGDJzA4kK0xsWaodsne/
vQprdH60qfYI3Y/5U0wYee/PFRoffB3ksFifBG9pp3LnO6tke2kkQWjjO7E3GBzV
Lq9uqvs9hdiha0L6SdQR6cboog==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:23 2026 by rpki-client