
$ rpki-client -vvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
File: htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json)
Hash identifier: XyBK0Lhq3O23aoF2aOPDanSXemNBWvGTovoj6Zk//cA=
Subject key identifier: A1:1C:D0:59:91:FD:DD:E9:8C:01:BD:38:6B:E4:6A:E4:8C:C0:5D:54
Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
Certificate issuer: /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
Manifest number: 01A8
Signing time: Sun 01 Mar 2026 04:55:42 +0000
Manifest this update: Sun 01 Mar 2026 04:55:42 +0000
Manifest next update: Sun 08 Mar 2026 04:55:42 +0000
Files and hashes: 1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: b4JmUTelUdR+k0VorS67RWrZP9R+5DO/j/Z4EsPjiV4=)
2: 1B000B60A70A11EE9D90E754C4F9AE02.roa (hash: 0YxUShTVwHuXxQ4B1+3Qh7vnGMMJxFNDWJ5Ekk8GYX8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911933B, serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Validity
Not Before: Mar 1 04:55:42 2026 GMT
Not After : Mar 8 04:55:42 2026 GMT
Subject: CN=69a3c6ce-4d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:af:ab:a2:c1:41:0a:0d:4a:83:72:a8:7f:
66:f4:d8:96:fe:d1:cb:8d:48:ff:0e:df:de:20:b8:
b2:80:44:a9:07:f5:5c:d5:a6:33:00:21:ac:8b:19:
55:2d:ba:bf:f1:4b:ef:e4:4e:37:51:13:20:b0:9d:
3c:78:76:60:39:9a:1b:5e:fb:78:0e:40:a0:16:9d:
d9:9d:dc:fe:90:4e:95:da:ae:b9:ab:e0:84:9e:3a:
1a:d3:07:78:72:7f:22:a9:68:4b:0a:46:13:de:d1:
cb:b9:8c:04:a7:d0:a0:e0:02:56:fe:c5:12:f5:a5:
a1:2f:e2:d4:72:f6:37:f7:85:49:ff:e5:55:4b:cc:
6f:3e:76:cb:91:e7:f3:0a:2e:e0:0c:36:ef:a8:1d:
3b:3b:9c:52:a3:98:81:99:20:94:76:c3:b0:3a:be:
4d:c8:a0:21:c9:7f:a9:fe:12:e6:6f:cc:c6:44:1f:
f9:8c:f3:df:48:f1:b4:9a:5e:cc:1d:6a:7f:c4:99:
67:c1:86:14:ea:dc:0b:94:d8:99:25:b2:58:ed:1f:
e7:75:5c:0b:b8:08:6d:a5:e5:ce:49:34:7b:d8:76:
2c:99:e9:b3:4d:2a:77:6f:e7:55:e1:fd:2c:60:d9:
e3:fe:5a:8c:b0:a6:44:98:b0:8f:dd:b4:a4:d5:f0:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1C:D0:59:91:FD:DD:E9:8C:01:BD:38:6B:E4:6A:E4:8C:C0:5D:54
X509v3 Authority Key Identifier:
keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0e:3a:8e:a1:a8:58:33:95:b2:f4:cd:4d:f3:e2:24:fd:f7:
ae:3a:01:82:c2:69:ce:53:b4:04:73:a8:8b:0c:b0:3d:c3:4c:
2c:37:ac:a1:3f:da:16:8e:d5:13:61:21:f4:24:dd:1e:f6:6f:
de:f7:ee:cb:d1:53:f3:40:f9:54:ee:08:b9:2b:d4:75:e2:e1:
0c:3f:46:89:05:8f:6d:77:fd:08:16:c8:e2:bd:5b:0a:52:c6:
93:19:6e:db:9b:45:c7:87:6a:d5:ca:86:5c:6f:91:8f:ef:e9:
38:6c:e5:2c:c6:b1:21:80:ed:a3:82:d5:be:26:63:70:a7:e5:
f8:1a:96:2c:cb:77:e5:0d:9e:36:87:2c:55:bb:b2:8a:95:f5:
5e:7d:c8:c3:19:1e:26:53:78:ff:50:69:9b:66:a0:3b:d4:72:
bf:b8:5a:60:bf:b5:44:70:a9:52:6d:a7:98:58:42:1a:82:0d:
2c:c5:92:c5:0a:67:5f:f2:bf:ca:99:48:2a:8b:94:57:a9:b9:
38:59:94:5a:cf:08:fe:3a:de:17:00:86:4d:b2:62:29:d6:d1:
02:34:76:d7:b8:f7:9f:82:29:65:33:7c:12:f6:ee:45:9c:95:
90:5c:67:21:5b:7b:94:2a:18:47:11:fe:e1:cd:0b:c3:f2:e2:
13:99:a5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:20 2026 by rpki-client