
$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
File: hPqw1oT6rxaVCqyjjm1lOszyWLw.mft (raw, json)
Hash identifier: GLYTcgsLenm6FgYzqz1dSLVCkeIo8rImclZAqKIbxsM=
Subject key identifier: E0:86:5C:6B:2E:F9:E9:7D:9D:23:8D:79:2A:4D:F3:2C:A0:42:4C:A7
Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Certificate serial: 0BB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
Manifest number: 0BAC
Signing time: Thu 16 Apr 2026 18:57:17 +0000
Manifest this update: Thu 16 Apr 2026 18:57:16 +0000
Manifest next update: Thu 23 Apr 2026 18:57:16 +0000
Files and hashes: 1: hPqw1oT6rxaVCqyjjm1lOszyWLw.crl (hash: jllWGuw2TmsiWYN6MOTvgL5WVEyXNY4gLisb3FaQuo0=)
2: E1AB1F92430F11EAA60DB885C4F9AE02.roa (hash: HE9RcAckVDFGxlQ4u3qH1H4zDtKxUzAsKn4dFWVW/9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2997 (0xbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Validity
Not Before: Apr 16 18:57:16 2026 GMT
Not After : Apr 23 18:57:16 2026 GMT
Subject: CN=69e1310d-3053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:23:5b:ec:6a:c3:de:85:46:0c:6c:25:c4:c3:
4c:8f:7a:40:1a:91:92:cd:f6:6a:4b:37:d6:bd:52:
fa:53:d7:d3:84:fd:82:c6:94:f2:6a:cf:93:21:43:
27:7a:7c:1b:73:55:a0:e1:7f:0d:b9:e7:df:6f:84:
f7:6f:93:dd:4e:da:34:38:3a:f0:c2:8f:28:94:90:
c4:00:6a:f6:3a:a1:d1:ab:75:06:9a:27:66:9f:27:
54:ae:6e:40:f2:a0:ef:21:6c:cf:fb:66:0f:6b:fa:
1c:a2:47:92:6b:06:69:f1:11:6c:65:a1:a6:5c:dc:
e6:a6:11:ff:50:48:b1:36:4f:61:42:28:2f:b9:f7:
3e:87:2d:01:14:80:4a:7d:71:69:1d:01:65:5f:b6:
e8:b7:2d:3b:21:1b:11:46:d4:96:a9:a1:38:b5:48:
04:af:93:38:e1:c6:4a:b6:28:ac:7d:f2:f0:61:eb:
03:6b:0a:76:fb:a0:7d:0b:f1:bb:5f:5d:16:6a:31:
c7:b4:c1:a6:a5:ac:04:2b:8f:e0:ba:57:6c:d3:f9:
0e:d8:c1:75:3b:64:ff:16:93:e6:b6:9f:e3:27:9b:
74:45:54:67:c6:d0:a4:ef:dd:ef:b5:e0:20:83:0f:
9e:61:16:35:b3:aa:26:44:54:26:87:d1:57:31:5b:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:86:5C:6B:2E:F9:E9:7D:9D:23:8D:79:2A:4D:F3:2C:A0:42:4C:A7
X509v3 Authority Key Identifier:
keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:da:a1:a4:81:bf:20:b7:a9:17:46:75:27:af:0b:71:e0:d5:
dc:0e:08:47:ad:45:14:8e:76:a9:2a:96:ec:22:37:ee:c4:79:
8f:84:a3:3a:fc:be:3d:03:b1:98:0f:68:b7:57:ee:be:ae:87:
76:29:b4:c8:d5:51:09:70:49:5c:ad:78:d4:ca:ac:5e:92:fe:
82:d9:d2:67:06:ef:f2:7e:79:73:63:a9:1a:c2:25:d4:45:2c:
d6:b9:e5:f1:cf:d4:ee:14:40:0b:78:c7:b9:0d:40:10:1c:13:
79:4a:f7:74:f7:ac:74:ff:69:1d:86:28:a1:f0:30:ef:da:7b:
c7:44:e7:80:b9:a6:02:8b:cb:49:0a:5b:2e:e7:b6:aa:43:4c:
5f:c4:aa:fc:ec:0e:92:e6:6f:1c:e2:e5:b7:68:73:9b:ed:4e:
9f:c9:4b:35:3e:1c:e3:d5:1b:5f:e6:8f:78:c4:70:ae:2d:66:
f9:a3:27:44:11:0f:03:0b:f3:f1:a4:7b:8c:5e:12:e6:82:23:
25:99:9b:b9:05:c3:12:ca:5f:41:25:0d:a5:b1:51:4d:36:e5:
aa:b7:67:3e:76:b7:1d:cc:1d:4c:f1:4c:f2:32:99:66:f9:5d:
a1:69:bc:a6:b4:e9:32:7e:23:11:29:59:06:11:59:b7:fd:b8:
c5:80:f9:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI0N0MxMTAvBgNVBAUTKDg0RkFCMEQ2ODRGQUFGMTY5NTBBQUNBMzhFNkQ2NTNB
Q0NGMjU4QkMwHhcNMjYwNDE2MTg1NzE2WhcNMjYwNDIzMTg1NzE2WjAYMRYwFAYD
VQQDEw02OWUxMzEwZC0zMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnCNb7GrD3oVGDGwlxMNMj3pAGpGSzfZqSzfWvVL6U9fThP2CxpTyas+TIUMn
enwbc1Wg4X8Nueffb4T3b5PdTto0ODrwwo8olJDEAGr2OqHRq3UGmidmnydUrm5A
8qDvIWzP+2YPa/ocokeSawZp8RFsZaGmXNzmphH/UEixNk9hQigvufc+hy0BFIBK
fXFpHQFlX7boty07IRsRRtSWqaE4tUgEr5M44cZKtiisffLwYesDawp2+6B9C/G7
X10WajHHtMGmpawEK4/gulds0/kO2MF1O2T/FpPmtp/jJ5t0RVRnxtCk793vteAg
gw+eYRY1s6omRFQmh9FXMVvb7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOCGXGsu
+el9nSONeSpN8yygQkynMB8GA1UdIwQYMBaAFIT6sNaE+q8WlQqso45tZTrM8li8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy85MEY2MzJEQTQz
MEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4YVZDcXlqam0xbE9zenlX
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hQcXcxb1Q2cnhhVkNxeWpqbTFsT3N6eVdMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjQ3Qy85MEY2MzJEQTQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4
YVZDcXlqam0xbE9zenlXTHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYdqhpIG/ILepF0Z1J68LceDV3A4IR61FFI52qSqW7CI37sR5j4SjOvy+PQOx
mA9ot1fuvq6Hdim0yNVRCXBJXK141MqsXpL+gtnSZwbv8n55c2OpGsIl1EUs1rnl
8c/U7hRAC3jHuQ1AEBwTeUr3dPesdP9pHYYoofAw79p7x0TngLmmAovLSQpbLue2
qkNMX8Sq/OwOkuZvHOLlt2hzm+1On8lLNT4c49UbX+aPeMRwri1m+aMnRBEPAwvz
8aR7jF4S5oIjJZmbuQXDEspfQSUNpbFRTTblqrdnPna3HcwdTPFM8jKZZvldoWm8
prTpMn4jESlZBhFZt/24xYD5Xg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:53:20 2026 by rpki-client