
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier: 73Ru7OKZKlzrJsRAwmQruM7Wm6CPhM0oqPwHRbBA2Cc=
Subject key identifier: 71:B4:BE:DD:A1:E1:A8:22:9D:8F:D4:D2:41:CD:D1:1E:FA:CE:03:18
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 049B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number: 03ED
Signing time: Wed 29 Jul 2026 01:24:56 +0000
Manifest this update: Wed 29 Jul 2026 01:24:56 +0000
Manifest next update: Wed 05 Aug 2026 01:24:56 +0000
Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: NZpDGcugwVHC1UU9OoErEL5LZY9aoWV7S5DUXbkapYg=)
2: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: O2/KxKIdSE2v482JbxbnQ0getoqbnZqZ+/nYKo7sZyY=)
3: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: cxcPBGfE5CZoxeyWHWqPrl7qUEDb1w9Ivop3RXOuNy8=)
4: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: BF86pvfpbRBo9qXutEzgqO61bS2nTEWr+T+kabrPp1I=)
5: 058B976ECA9811F0A295B360C4F9AE02.roa (hash: lCNez/KnH3/u+GXyUNFMwTEZ8K7MJDqkA0Go5e/dS58=)
6: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: PuC0DdgiggYtIjLvoalRRhkL/oLZu3l1qbEXfv11uZQ=)
7: 3B4551B4CAA811F09DDC8D69C4F9AE02.roa (hash: hDuVof7d3QEQIcHs4zgmq/ai6KUFB43GrplnDI2UHX4=)
8: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: CxVWM785DWNfTdffR2/Yw/2Hi2LQnhqbcgLOymKnnM8=)
9: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: brYkxZidojowoYQIqbU0aCNgQ49H7mQPg5jz4K3RIX0=)
10: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: 4S3t2dvowIG/EeUUH9BW/CIG4gP34ZZohoWk2j8rwOk=)
11: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: AhsLyZ6cSjsB6OxlhSMjPiIcrs1dzGaYxdwJxIKQAV0=)
12: B35D540E68F611EFB785D145C4F9AE02.roa (hash: 6jCTzKFpZAM5sRcwoj/RVhwR1AvH7Y/xHmW9G5IE69c=)
13: 218211CA68F911EF986C8281C4F9AE02.roa (hash: MwIf35XYCZODKT46sKZ+J1cz+B+fnbUAXj0j3RbLFN4=)
14: BE4B3228691411EFB573C120C4F9AE02.roa (hash: ovaDzOhz8t6euzDNkjZEtSnXx9uEV3qfaxhhzdo9Nh8=)
15: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: TRErWmuqP/DsNILuB+Bsg/oOXJFxA8k+YEgBWxxZqis=)
16: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: lTmSpanWfkonoLk8NmfV940KaHPkO1rnz77AY+6Xqc0=)
17: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: xClDM8EpPeO91j0Mezn/P780Xmby1QeCDq53lVbawmM=)
18: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: MOAi7s6/6G4J+pIDkTOufzZW6KS0P8wRn9IgpgfF+kk=)
19: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: t+cHfFMyQ8NmvDexgT+4lzg2Q83rmvnX7nYHf4IBQdE=)
20: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: ylWMSBGShl92T17Vr5K5bsotQdr2G9LiHvdhhYPVrsQ=)
21: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: grW6xPxdsNkObgmvC9oU5U7FXXHibN8xdWW4iVbsRa4=)
22: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: wtq9PupYRV4XEewrdMqA8/4bNl2edm+HOBW3n2PpfNo=)
23: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: 3uU6kQ8f6IzetYcsltzYNLy8hPqbwPnaYrl6t4o4ReU=)
24: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: P/zfn2TnTP8oh0npf6LxHTRFCNPzez1h9qHSPByk2/0=)
25: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: EH518Dy6MrAFwmekT0SecOdweFL+FTqCksa8EB6seaE=)
26: EA792108690E11EF9396CC48C4F9AE02.roa (hash: cK4Lx01JCSZW4H3YCVnodtAx/ORf7B0e7vIxfgqX3uI=)
27: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: H8VgsGVXvOR/DsZUOIG9OsZtDhG6b/7E83e/ckfyCFk=)
28: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: Sy5GnEGGq49Ut4C8AZxeQpVbXW8n/TI4EHxkVNOwMUM=)
29: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: Ev/s13A6k/DcIm1OffodSAjmHH7SzOfcmso4hb44RXg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1179 (0x49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Jul 29 01:24:56 2026 GMT
Not After : Aug 5 01:24:56 2026 GMT
Subject: CN=6a695668-a5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2e:12:68:ca:6b:19:50:ef:3d:be:86:ab:e4:
f4:b3:3f:79:fd:61:3f:17:e9:ae:77:40:c8:71:f5:
d8:ef:32:66:38:12:4b:1c:8b:3b:a3:94:a0:34:ba:
89:5e:51:af:d9:bb:a7:fb:8e:9e:e7:50:8c:07:cc:
74:2c:5c:7f:e7:e3:c5:bb:63:64:8e:0b:f4:7b:a9:
53:b8:5c:c9:5a:d9:bc:bc:51:09:94:b3:e2:ff:46:
96:47:e8:ca:2f:9a:84:f0:58:ec:6a:c9:99:a9:84:
cf:f8:2e:a7:7d:96:c1:76:a4:57:93:1d:f5:e3:4c:
eb:8e:35:80:46:8a:fa:46:fa:f0:12:4d:0f:6a:14:
6c:92:27:69:3f:e3:5a:8f:fa:38:eb:88:78:b6:52:
4e:12:23:fc:c8:95:33:fa:5b:b1:b0:df:1c:0a:d9:
3b:06:e6:4a:dd:10:b5:2e:e1:47:7d:55:02:0e:98:
34:a5:c6:d6:51:21:8b:65:33:e2:d6:58:f7:3d:4f:
0c:d5:31:b7:03:34:12:98:13:07:7b:68:bd:1a:a4:
c7:1a:2c:73:8a:91:1b:b7:8f:81:1d:cd:10:e0:73:
f8:27:22:ec:16:0b:57:8d:bb:16:23:5d:16:24:eb:
c9:1c:a7:69:55:ac:05:26:30:12:76:9b:8c:51:2a:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B4:BE:DD:A1:E1:A8:22:9D:8F:D4:D2:41:CD:D1:1E:FA:CE:03:18
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:63:0c:a9:89:17:f4:2b:5c:a7:6a:b8:0e:72:83:61:3b:72:
10:fd:60:d4:42:9c:d5:01:f2:b5:98:be:79:b5:34:65:c9:2d:
6b:d1:18:f6:a7:44:53:92:9d:ab:6b:c7:37:c5:95:2e:27:f1:
b7:2d:c5:33:3a:65:e6:f0:11:03:df:3c:81:e8:da:ba:b8:ee:
bd:fc:ae:be:c3:61:d4:a9:2c:7f:85:b2:92:98:05:a3:f7:09:
11:5c:b6:9a:03:1e:14:78:16:06:35:51:85:02:41:56:94:8c:
a1:5b:0f:2d:47:3d:c0:35:f1:4f:d5:05:f5:2b:de:37:d5:41:
13:a0:1d:ad:62:71:27:8b:97:3a:1f:ac:12:e6:62:4c:2f:8d:
97:6d:74:b8:d3:04:7a:40:90:b7:b7:d5:0a:3e:46:99:81:67:
22:76:c2:73:60:3b:5f:ee:35:3b:ed:32:2e:9d:ab:4c:9c:a7:
f6:6c:91:93:bd:76:8a:97:c6:5e:94:5d:0a:b2:b6:b1:58:78:
08:71:82:24:d8:e9:8c:95:a7:3c:17:67:76:14:c9:f4:02:12:
c6:df:f3:21:35:80:bf:5b:eb:5e:70:73:36:da:5f:a8:94:97:
6d:2c:f3:2c:b6:d1:8a:f3:57:f1:6a:c2:35:46:27:24:fb:ef:
df:cd:ca:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG
NUMyMDE1NzAwHhcNMjYwNzI5MDEyNDU2WhcNMjYwODA1MDEyNDU2WjAYMRYwFAYD
VQQDEw02YTY5NTY2OC1hNWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5C4SaMprGVDvPb6Gq+T0sz95/WE/F+mud0DIcfXY7zJmOBJLHIs7o5SgNLqJ
XlGv2bun+46e51CMB8x0LFx/5+PFu2Nkjgv0e6lTuFzJWtm8vFEJlLPi/0aWR+jK
L5qE8FjsasmZqYTP+C6nfZbBdqRXkx3140zrjjWARor6RvrwEk0PahRskidpP+Na
j/o464h4tlJOEiP8yJUz+luxsN8cCtk7BuZK3RC1LuFHfVUCDpg0pcbWUSGLZTPi
1lj3PU8M1TG3AzQSmBMHe2i9GqTHGixzipEbt4+BHc0Q4HP4JyLsFgtXjbsWI10W
JOvJHKdpVawFJjASdpuMUSqQ6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHG0vt2h
4aginY/U0kHN0R76zgMYMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC
OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDQyQS8yMEYyQ0IwMEVCOUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklT
anQ5UG1iTENxQkgxd2dGWEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC2MMqYkX9Ctcp2q4DnKDYTtyEP1g1EKc1QHytZi+ebU0Zckta9EY9qdEU5Kd
q2vHN8WVLifxty3FMzpl5vARA988gejaurjuvfyuvsNh1Kksf4WykpgFo/cJEVy2
mgMeFHgWBjVRhQJBVpSMoVsPLUc9wDXxT9UF9SveN9VBE6AdrWJxJ4uXOh+sEuZi
TC+Nl210uNMEekCQt7fVCj5GmYFnInbCc2A7X+41O+0yLp2rTJyn9myRk712ipfG
XpRdCrK2sVh4CHGCJNjpjJWnPBdndhTJ9AISxt/zITWAv1vrXnBzNtpfqJSXbSzz
LLbRivNX8WrCNUYnJPvv383K+w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:09:55 2026 by rpki-client