
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
File: HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft (raw, json)
Hash identifier: Dko38tA/aCsxtc/gHPONMKV3qD5ZofihzcLFnD2olx4=
Subject key identifier: C4:D9:2F:CA:82:0C:FB:7B:E2:05:73:B6:C0:2E:0E:72:20:34:BE:C7
Authority key identifier: 1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
Certificate issuer: /CN=A911D848/serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
Manifest number: 0121
Signing time: Fri 17 Apr 2026 05:37:09 +0000
Manifest this update: Fri 17 Apr 2026 05:37:09 +0000
Manifest next update: Fri 24 Apr 2026 05:37:09 +0000
Files and hashes: 1: HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl (hash: oSPqo/lunyq4kRuDvF7TzNqlHpWpa8jdd5STi1GfqNc=)
2: F0C8DB1CA54E11EF8592FD66C4F9AE02.roa (hash: Fu99K4NOtn2+BNW4pRMbgb3TXtpkuT6kgxDZJ7yt25U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl
rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D848, serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Validity
Not Before: Apr 17 05:37:09 2026 GMT
Not After : Apr 24 05:37:09 2026 GMT
Subject: CN=69e1c705-0231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:8e:d5:22:50:27:06:22:8b:a4:91:1a:33:
d1:44:b8:49:a2:c8:f9:a0:ff:8d:47:b3:19:6c:73:
ed:98:7d:9d:77:5c:f5:82:7b:68:3a:03:6c:cf:15:
0e:3d:a3:bc:32:17:98:a6:82:d4:cc:6f:6d:39:ed:
7d:97:fd:23:67:c4:91:be:33:a5:39:8d:18:50:67:
b7:f3:7c:9e:9f:4f:02:63:03:c6:22:59:7d:9c:e6:
b8:1e:40:16:62:e4:dc:1d:ed:ab:46:cc:3e:44:e0:
97:c2:73:6f:6e:2e:b1:61:23:4e:eb:cc:26:89:58:
fa:75:f8:4d:90:24:d6:d9:c6:ff:b8:e2:fa:00:5d:
58:a3:4c:c2:c9:80:5c:17:99:79:a3:40:c4:66:19:
48:c5:7c:4b:f1:02:b9:3d:c2:06:52:8d:8a:43:94:
24:02:52:53:24:53:0e:af:da:a9:80:01:6a:1b:d2:
0d:a7:60:68:d7:11:49:d2:59:b9:9d:dc:1e:8d:c8:
93:dc:cb:c7:8c:d4:43:93:f2:69:fa:54:3f:f4:16:
2b:b6:81:8d:c3:97:3f:45:21:61:c2:6a:4a:18:aa:
07:46:41:b1:82:9d:80:89:ff:92:64:b2:42:31:30:
42:f1:2e:ea:4b:9b:22:5e:fd:d0:b8:0d:f7:08:c0:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D9:2F:CA:82:0C:FB:7B:E2:05:73:B6:C0:2E:0E:72:20:34:BE:C7
X509v3 Authority Key Identifier:
keyid:1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:53:2e:d4:df:bd:03:55:c9:36:c4:13:27:47:53:fe:78:9a:
8d:da:0e:33:cb:39:66:87:1e:d0:06:4d:55:1d:49:2b:83:d6:
0b:1d:89:8e:a8:a6:df:45:87:35:94:4b:fa:9c:80:cd:55:41:
36:50:86:47:6a:9e:8b:72:36:54:a3:c2:7e:ae:56:48:4a:a7:
5e:88:17:f3:35:2c:21:04:31:25:d2:55:6e:63:ad:f8:05:46:
f2:20:1d:2f:2d:2d:12:fc:33:01:1a:a9:51:1e:63:c3:9a:ea:
f2:a1:a5:40:ad:23:90:9d:dd:e5:fa:31:17:b7:06:b3:48:8b:
6d:a0:13:ea:00:b9:a0:16:67:13:6b:a6:ab:96:b1:03:a4:43:
bf:59:d6:f0:7d:59:3c:5e:3b:64:ed:a3:68:bc:74:89:54:6b:
d2:10:7e:14:81:ba:f9:a4:d5:ff:b1:5d:b4:5b:ff:6c:33:58:
69:97:28:ca:53:e5:7c:9b:b1:4e:30:0e:fb:ae:47:4c:09:4c:
0c:6c:ce:3c:fb:b5:6c:34:c7:8e:15:b1:0b:1b:17:1c:e9:fe:
2d:f8:fa:f5:25:f9:4c:59:1d:36:6c:f2:05:ef:c4:2c:49:49:
e7:bc:cd:6e:92:90:05:4f:5a:6f:0d:ca:e2:e6:4d:57:8b:89:
ba:63:81:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUQ4NDgxMTAvBgNVBAUTKDFERDFCODY4Nzg4NjkyNEM0NjEzMTE2MDUwRUU5MEU5
RDQ5NDI2OUUwHhcNMjYwNDE3MDUzNzA5WhcNMjYwNDI0MDUzNzA5WjAYMRYwFAYD
VQQDEw02OWUxYzcwNS0wMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuGCO1SJQJwYii6SRGjPRRLhJosj5oP+NR7MZbHPtmH2dd1z1gntoOgNszxUO
PaO8MheYpoLUzG9tOe19l/0jZ8SRvjOlOY0YUGe383yen08CYwPGIll9nOa4HkAW
YuTcHe2rRsw+ROCXwnNvbi6xYSNO68wmiVj6dfhNkCTW2cb/uOL6AF1Yo0zCyYBc
F5l5o0DEZhlIxXxL8QK5PcIGUo2KQ5QkAlJTJFMOr9qpgAFqG9INp2Bo1xFJ0lm5
ndwejciT3MvHjNRDk/Jp+lQ/9BYrtoGNw5c/RSFhwmpKGKoHRkGxgp2Aif+SZLJC
MTBC8S7qS5siXv3QuA33CMC4nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMTZL8qC
DPt74gVztsAuDnIgNL7HMB8GA1UdIwQYMBaAFB3RuGh4hpJMRhMRYFDukOnUlCae
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDg0OC9DMjUxQjVCMjlC
MTAxMUVGQTcyQkEwMjBDNEY5QUUwMi9IZEc0YUhpR2treEdFeEZnVU82UTZkU1VK
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hkRzRhSGlHa2t4R0V4RmdVTzZRNmRTVUpwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RDg0OC9DMjUxQjVCMjlCMTAxMUVGQTcyQkEwMjBDNEY5QUUwMi9IZEc0YUhpR2tr
eEdFeEZnVU82UTZkU1VKcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP1Mu1N+9A1XJNsQTJ0dT/niajdoOM8s5Zoce0AZNVR1JK4PWCx2Jjqim30WH
NZRL+pyAzVVBNlCGR2qei3I2VKPCfq5WSEqnXogX8zUsIQQxJdJVbmOt+AVG8iAd
Ly0tEvwzARqpUR5jw5rq8qGlQK0jkJ3d5foxF7cGs0iLbaAT6gC5oBZnE2umq5ax
A6RDv1nW8H1ZPF47ZO2jaLx0iVRr0hB+FIG6+aTV/7FdtFv/bDNYaZcoylPlfJux
TjAO+65HTAlMDGzOPPu1bDTHjhWxCxsXHOn+Lfj69SX5TFkdNmzyBe/ELElJ57zN
bpKQBU9abw3K4uZNV4uJumOBRg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:46 2026 by rpki-client