
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json)
Hash identifier: Qhmw9BUkc3FOUL2zTSEMt0R+Fg1LYD+EQwHuUmDrkyY=
Subject key identifier: 81:3F:96:16:25:4B:54:33:BF:74:25:BE:2E:D8:C2:8D:58:BE:D0:5D
Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99
Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299
Certificate serial: 016C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
Manifest number: 0162
Signing time: Sun 01 Mar 2026 06:00:18 +0000
Manifest this update: Sun 01 Mar 2026 06:00:17 +0000
Manifest next update: Sun 08 Mar 2026 06:00:17 +0000
Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: Yx95tOfSEkOQEQ8rNihiI0kSGye2oNI4JBhB7Nm664w=)
2: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: BWss25KwJ6L54iiEaPMsjplWvsMA0hnuvwGf8Bs1rfY=)
3: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: rMJAoxoS++kNzcCP2pW17iqc9CzolSJB2caGijczQIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl
rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299
Validity
Not Before: Mar 1 06:00:17 2026 GMT
Not After : Mar 8 06:00:17 2026 GMT
Subject: CN=69a3d5f2-e8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:42:7f:23:ca:18:96:44:c3:c9:c0:d3:08:
da:e0:e8:e5:1c:b0:38:12:5f:ed:27:b1:c9:36:c2:
df:5b:70:7b:b7:54:ce:eb:33:03:fd:c8:c9:79:3a:
36:95:82:ef:af:a5:4a:8b:69:ad:ee:00:2b:5c:1d:
c2:39:ca:79:92:94:e6:89:ca:50:a0:48:21:6e:30:
8c:85:e9:3e:3e:4c:fd:be:05:7a:52:90:fe:78:7e:
88:4a:02:73:3a:7f:21:36:d4:54:72:bb:53:35:62:
4d:db:11:b2:a0:d6:6a:a7:ff:30:3e:e5:25:7c:8f:
34:53:4b:ed:49:15:46:dc:14:9b:e3:d1:22:7a:0b:
1c:1a:36:41:60:76:01:dc:cb:fb:65:c6:bc:4e:dd:
45:74:4a:dd:ab:e2:32:0b:1a:b9:79:88:52:d2:6d:
d8:c8:2c:71:84:35:3a:f5:8a:12:e6:98:85:69:f1:
58:72:28:04:73:b8:46:7d:1b:be:12:bb:2c:8f:5b:
56:7c:73:66:0d:52:a7:6c:a4:f8:a3:4d:7e:46:06:
d9:c7:94:e5:aa:0c:24:90:f2:e0:81:60:52:64:c4:
a9:a4:e1:b0:ac:72:ac:cd:4a:49:e9:43:0c:30:5e:
67:4c:a2:4e:9c:bc:c0:b1:86:1a:71:5b:8e:5c:9b:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3F:96:16:25:4B:54:33:BF:74:25:BE:2E:D8:C2:8D:58:BE:D0:5D
X509v3 Authority Key Identifier:
keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:8e:44:8b:73:f3:e9:e6:ae:02:3c:b7:9a:64:12:92:0b:63:
2c:fc:9b:94:89:82:ad:53:62:1e:bc:a1:65:ee:a6:9c:7a:8b:
24:81:c9:1b:c1:98:3d:25:71:90:7d:2b:a8:12:fe:ac:ca:e9:
aa:16:68:9a:40:3d:36:94:c8:74:6a:fd:e6:87:8b:13:25:8f:
2b:8c:b2:a3:dd:21:19:e5:fe:4c:fa:e3:80:37:d5:5c:0e:97:
e3:dc:67:ae:8f:70:7a:b5:51:a5:cf:0c:3a:cc:11:21:40:b3:
54:8b:61:ae:78:94:d9:4a:19:0d:6f:7b:8e:3c:8e:54:f0:af:
8d:ad:40:8e:06:8c:75:63:ae:61:77:c4:c6:80:36:cc:02:08:
57:48:a4:1d:f8:dc:48:cc:ef:2e:25:54:37:68:a0:62:b4:0e:
40:8f:d2:ef:ab:0e:43:4c:f0:f1:bd:95:8e:0b:e7:1b:c6:d0:
a7:0b:b4:94:2d:88:a2:44:53:74:46:d3:52:d5:cf:11:86:d3:
0a:ce:f9:70:39:84:f9:5b:1e:d2:a4:8c:82:76:96:c3:49:fa:
8f:02:d0:30:37:63:91:be:af:a8:ee:eb:aa:b2:e9:81:c6:86:
64:ee:91:16:c8:89:e1:3e:2b:47:35:37:5f:33:a0:0c:6a:64:
84:d2:92:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY1Q0ExMTAvBgNVBAUTKDFDN0IzMDU3NkVCMTg1MDhFRjI3NzlDNEVGNUJCNTcy
NDkyREQyOTkwHhcNMjYwMzAxMDYwMDE3WhcNMjYwMzA4MDYwMDE3WjAYMRYwFAYD
VQQDEw02OWEzZDVmMi1lOGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt6JCfyPKGJZEw8nA0wja4OjlHLA4El/tJ7HJNsLfW3B7t1TO6zMD/cjJeTo2
lYLvr6VKi2mt7gArXB3COcp5kpTmicpQoEghbjCMhek+Pkz9vgV6UpD+eH6ISgJz
On8hNtRUcrtTNWJN2xGyoNZqp/8wPuUlfI80U0vtSRVG3BSb49EiegscGjZBYHYB
3Mv7Zca8Tt1FdErdq+IyCxq5eYhS0m3YyCxxhDU69YoS5piFafFYcigEc7hGfRu+
Erssj1tWfHNmDVKnbKT4o01+RgbZx5TlqgwkkPLggWBSZMSppOGwrHKszUpJ6UMM
MF5nTKJOnLzAsYYacVuOXJvRHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIE/lhYl
S1Qzv3Qlvi7Ywo1YvtBdMB8GA1UdIwQYMBaAFBx7MFdusYUI7yd5xO9btXJJLdKZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS9BNjkxNUIzNDAy
NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhRanZKM25FNzF1MWNra3Qw
cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hIc3dWMjZ4aFFqdkozbkU3MXUxY2trdDBway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjVDQS9BNjkxNUIzNDAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhR
anZKM25FNzF1MWNra3QwcGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM45Ei3Pz6eauAjy3mmQSkgtjLPyblImCrVNiHryhZe6mnHqLJIHJG8GYPSVx
kH0rqBL+rMrpqhZomkA9NpTIdGr95oeLEyWPK4yyo90hGeX+TPrjgDfVXA6X49xn
ro9werVRpc8MOswRIUCzVIthrniU2UoZDW97jjyOVPCvja1AjgaMdWOuYXfExoA2
zAIIV0ikHfjcSMzvLiVUN2igYrQOQI/S76sOQ0zw8b2VjgvnG8bQpwu0lC2IokRT
dEbTUtXPEYbTCs75cDmE+Vse0qSMgnaWw0n6jwLQMDdjkb6vqO7rqrLpgcaGZO6R
FsiJ4T4rRzU3XzOgDGpkhNKSBg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:51 2026 by rpki-client