
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
File: HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft (raw, json)
Hash identifier: KnHdMDA4xd31dnjlPU4o3T+I8WCO3dRMScsHdxRkB+U=
Subject key identifier: 50:0D:54:03:AD:D4:A4:D6:CA:88:EB:18:E9:31:F1:49:87:84:71:7D
Authority key identifier: 1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
Certificate issuer: /CN=A911D848/serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
Manifest number: 0106
Signing time: Sun 01 Mar 2026 07:18:16 +0000
Manifest this update: Sun 01 Mar 2026 07:18:15 +0000
Manifest next update: Sun 08 Mar 2026 07:18:15 +0000
Files and hashes: 1: HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl (hash: dZ9qYzzL4a4yuUdzDwYHlD73VcYpOoc4kLQHiMrtTAc=)
2: F0C8DB1CA54E11EF8592FD66C4F9AE02.roa (hash: kccqwCYzh8REyi/rrws0T2ob10DxCbKT7zFXPVaYiA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl
rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:18:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D848, serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Validity
Not Before: Mar 1 07:18:15 2026 GMT
Not After : Mar 8 07:18:15 2026 GMT
Subject: CN=69a3e838-0c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:98:b9:e1:f2:5d:01:6a:99:69:43:eb:ea:
50:fd:35:e0:a5:6e:85:b4:03:64:5c:79:72:eb:17:
2f:84:05:fa:fb:27:74:74:7b:53:fa:98:a3:58:9f:
51:80:d2:f9:f7:cd:a4:5b:7d:fb:68:fa:6f:e7:3c:
8a:e9:63:b0:ee:42:9a:4a:b8:f0:fa:a1:71:83:4d:
60:a3:5c:fa:8b:31:c0:0d:2b:8a:29:61:2f:61:ae:
05:7e:9b:09:ae:56:b1:6a:d8:db:0d:61:2d:fa:83:
4e:4e:4c:65:6b:dc:45:02:bb:cc:9b:3a:99:b9:4f:
09:ce:60:32:6a:78:b4:30:2a:2f:32:0f:bf:54:42:
70:4e:d2:b8:3a:0b:c0:24:cd:65:0c:aa:20:bf:95:
1d:33:2f:f4:b4:7e:00:b7:46:40:b8:b9:d0:4d:68:
92:09:0e:50:57:5c:9a:1c:a6:2b:f5:20:22:21:c7:
d8:7c:54:3a:25:cc:78:b4:5e:17:3d:d3:df:f3:af:
b6:e8:aa:db:73:b9:53:d6:4a:0f:34:be:a5:95:85:
2a:04:f7:d8:7e:16:e3:4c:bc:bf:69:ef:b0:c0:2c:
c1:8b:52:22:ae:bb:d9:28:d8:d4:cd:b7:16:28:32:
64:da:e7:35:7e:33:75:9e:68:39:5a:e1:a1:1a:94:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0D:54:03:AD:D4:A4:D6:CA:88:EB:18:E9:31:F1:49:87:84:71:7D
X509v3 Authority Key Identifier:
keyid:1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:9a:25:30:fd:aa:fe:38:7a:a6:6c:67:27:b2:6e:98:54:b8:
88:61:34:c3:f8:c9:6b:37:a4:e8:43:a5:f4:e3:ac:5b:d8:1a:
2b:bb:cb:7d:b8:42:39:b9:1c:9e:cf:69:fd:bd:c6:60:7a:86:
c6:16:39:81:82:79:f6:6c:ec:7b:b1:84:f3:0f:fb:8e:1d:09:
ef:75:12:04:b5:a5:e2:f1:29:f6:44:8c:7a:de:09:13:46:cf:
4a:aa:87:40:7d:71:8f:26:00:91:99:27:30:6e:90:9b:6c:dc:
20:86:c9:67:8d:ba:ef:36:4b:93:89:e7:d8:e1:74:be:c0:f7:
ae:12:ed:4e:d6:ba:5a:fb:9a:ef:fb:21:7d:94:69:45:fa:e7:
ac:af:55:1a:00:c7:0a:a6:63:f2:c9:ac:68:2d:b5:e5:77:98:
f7:a0:f3:b9:d2:06:63:48:59:02:0f:0e:69:e1:9e:25:08:0f:
a4:16:b0:a8:03:fc:f9:1f:21:1a:a3:29:2e:bc:0b:89:92:18:
80:c3:2c:84:55:72:78:97:cb:76:27:e2:77:67:7b:4e:c3:6c:
4d:b1:00:77:59:70:c1:95:4c:13:ca:8d:aa:7c:34:d1:63:a4:
f0:53:fa:86:72:d1:49:59:7e:20:c9:0c:ff:c3:8d:f9:45:15:
da:ba:8b:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUQ4NDgxMTAvBgNVBAUTKDFERDFCODY4Nzg4NjkyNEM0NjEzMTE2MDUwRUU5MEU5
RDQ5NDI2OUUwHhcNMjYwMzAxMDcxODE1WhcNMjYwMzA4MDcxODE1WjAYMRYwFAYD
VQQDEw02OWEzZTgzOC0wYzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwvuYueHyXQFqmWlD6+pQ/TXgpW6FtANkXHly6xcvhAX6+yd0dHtT+pijWJ9R
gNL5982kW337aPpv5zyK6WOw7kKaSrjw+qFxg01go1z6izHADSuKKWEvYa4FfpsJ
rlaxatjbDWEt+oNOTkxla9xFArvMmzqZuU8JzmAyani0MCovMg+/VEJwTtK4OgvA
JM1lDKogv5UdMy/0tH4At0ZAuLnQTWiSCQ5QV1yaHKYr9SAiIcfYfFQ6Jcx4tF4X
PdPf86+26Krbc7lT1koPNL6llYUqBPfYfhbjTLy/ae+wwCzBi1IirrvZKNjUzbcW
KDJk2uc1fjN1nmg5WuGhGpSovQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFANVAOt
1KTWyojrGOkx8UmHhHF9MB8GA1UdIwQYMBaAFB3RuGh4hpJMRhMRYFDukOnUlCae
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDg0OC9DMjUxQjVCMjlC
MTAxMUVGQTcyQkEwMjBDNEY5QUUwMi9IZEc0YUhpR2treEdFeEZnVU82UTZkU1VK
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hkRzRhSGlHa2t4R0V4RmdVTzZRNmRTVUpwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RDg0OC9DMjUxQjVCMjlCMTAxMUVGQTcyQkEwMjBDNEY5QUUwMi9IZEc0YUhpR2tr
eEdFeEZnVU82UTZkU1VKcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI5olMP2q/jh6pmxnJ7JumFS4iGE0w/jJazek6EOl9OOsW9gaK7vLfbhCObkc
ns9p/b3GYHqGxhY5gYJ59mzse7GE8w/7jh0J73USBLWl4vEp9kSMet4JE0bPSqqH
QH1xjyYAkZknMG6Qm2zcIIbJZ4267zZLk4nn2OF0vsD3rhLtTta6Wvua7/shfZRp
RfrnrK9VGgDHCqZj8smsaC215XeY96DzudIGY0hZAg8OaeGeJQgPpBawqAP8+R8h
GqMpLrwLiZIYgMMshFVyeJfLdifid2d7TsNsTbEAd1lwwZVME8qNqnw00WOk8FP6
hnLRSVl+IMkM/8ON+UUV2rqLbA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:59 2026 by rpki-client