
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
File: -HfnZ8AkHlKW_jMylZne-j0toUE.mft (raw, json)
Hash identifier: Lijio301cOuQgKEnsmF5Qn65leyzt/fHSCo5aN9lzTA=
Subject key identifier: DD:F2:35:51:11:DE:E1:B7:B2:95:9C:EB:38:99:BD:5E:9F:FD:BA:D4
Authority key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41
Certificate issuer: /CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141
Certificate serial: 0C1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
Manifest number: 0C12
Signing time: Mon 02 Mar 2026 01:43:18 +0000
Manifest this update: Mon 02 Mar 2026 01:43:17 +0000
Manifest next update: Mon 09 Mar 2026 01:43:17 +0000
Files and hashes: 1: -HfnZ8AkHlKW_jMylZne-j0toUE.crl (hash: 1w1P2O5yQifQ/+HwhUS4f8sVLGeItb9ws+bnekLfOBg=)
2: 60875A5C2A3711EABEA9BF73C4F9AE02.roa (hash: fKNon6NCgCOGVHkPldMfFkQTkW6jIWPmLvSkFUdw9rQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl
rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3099 (0xc1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145515, serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141
Validity
Not Before: Mar 2 01:43:17 2026 GMT
Not After : Mar 9 01:43:17 2026 GMT
Subject: CN=69a4eb36-67e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5f:e0:b5:54:e2:35:24:2c:40:76:99:b2:30:
df:bc:7b:85:fd:08:25:e0:86:d1:a1:25:b9:eb:62:
5c:b6:5c:fe:db:28:97:b5:79:d5:69:8c:66:1d:3a:
51:16:34:31:47:6d:44:a1:cf:b9:b7:4d:59:04:2d:
3e:90:20:7a:cf:d5:3d:ff:e4:cd:c5:95:47:f5:05:
a6:d7:55:ac:15:3b:01:83:9b:7d:e5:f8:6d:b9:08:
0d:b0:3f:db:20:33:6a:05:5f:cf:e9:27:ab:d8:fb:
a1:3e:34:aa:38:05:fd:53:f2:a2:12:81:18:03:a1:
df:83:2c:e2:79:24:35:48:10:66:76:c5:8a:90:5c:
6b:72:a9:ce:16:16:9c:ad:62:7b:8c:63:28:4c:a0:
02:0c:c1:7b:de:cf:b4:71:52:33:2a:d1:5c:b6:ef:
87:2b:ef:5a:68:1b:79:93:3c:36:f5:4c:93:e9:e8:
a4:20:15:86:3f:f4:6b:ac:a6:08:5a:01:a0:a9:81:
74:88:b6:39:00:3f:30:d9:68:f0:cf:21:a8:97:79:
46:0c:17:ec:0e:d2:30:07:b4:db:c8:d1:6a:71:c2:
bb:00:57:b9:83:d2:3d:14:6f:66:87:eb:41:1e:23:
30:1c:60:9c:fd:8e:39:77:c9:5a:67:52:84:3d:85:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F2:35:51:11:DE:E1:B7:B2:95:9C:EB:38:99:BD:5E:9F:FD:BA:D4
X509v3 Authority Key Identifier:
keyid:F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ec:b4:3e:ce:b5:9e:7e:a1:98:55:db:59:d5:e8:dd:89:9f:
53:39:3c:b1:15:8a:86:7e:a8:04:48:83:b9:c2:9a:b1:18:bb:
26:a2:35:38:2c:1b:53:0b:aa:f7:13:d9:f1:37:b4:49:84:f9:
44:75:97:8b:57:9f:b0:f2:ea:38:38:ed:92:f4:ca:ef:ed:fb:
ff:f0:e2:5b:4b:c9:87:d9:48:ed:18:6e:37:92:ec:0b:89:71:
e8:a2:f4:14:db:29:df:72:be:da:a9:54:c6:4c:3c:74:19:27:
20:b0:c1:dc:13:39:89:64:8b:08:8a:1b:83:2e:1d:e1:a9:82:
0f:7b:87:0e:01:40:14:2f:e0:21:24:dc:2b:df:8a:57:2e:c0:
6a:d4:8f:4b:63:c1:3e:0a:cd:86:c6:7a:1f:1f:e0:74:2f:99:
46:ac:4d:1c:ed:1b:9a:fa:1a:b6:f6:92:b4:20:be:50:2d:0b:
32:b3:a9:c3:10:2d:f0:0d:ea:7a:c9:2e:be:4d:cd:d5:dd:b4:
07:e6:c7:a4:1c:f1:8c:02:d9:bf:96:87:e9:6b:f8:eb:a7:09:
f6:2c:38:eb:c9:36:49:93:57:71:28:dc:bf:7e:d8:c2:91:79:
43:1e:89:cb:ee:48:9e:0d:8c:4f:cd:28:5e:15:c9:65:57:27:
ff:12:8c:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU1MTUxMTAvBgNVBAUTKEY4NzdFNzY3QzAyNDFFNTI5NkZFMzMzMjk1OTlERUZB
M0QyREExNDEwHhcNMjYwMzAyMDE0MzE3WhcNMjYwMzA5MDE0MzE3WjAYMRYwFAYD
VQQDEw02OWE0ZWIzNi02N2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA31/gtVTiNSQsQHaZsjDfvHuF/Qgl4IbRoSW562Jctlz+2yiXtXnVaYxmHTpR
FjQxR21Eoc+5t01ZBC0+kCB6z9U9/+TNxZVH9QWm11WsFTsBg5t95fhtuQgNsD/b
IDNqBV/P6Ser2PuhPjSqOAX9U/KiEoEYA6HfgyzieSQ1SBBmdsWKkFxrcqnOFhac
rWJ7jGMoTKACDMF73s+0cVIzKtFctu+HK+9aaBt5kzw29UyT6eikIBWGP/RrrKYI
WgGgqYF0iLY5AD8w2WjwzyGol3lGDBfsDtIwB7TbyNFqccK7AFe5g9I9FG9mh+tB
HiMwHGCc/Y45d8laZ1KEPYWWkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN3yNVER
3uG3spWc6ziZvV6f/brUMB8GA1UdIwQYMBaAFPh352fAJB5Slv4zMpWZ3vo9LaFB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxNS85NDJGQzNCODJB
MzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hsS1dfak15bFpuZS1qMHRv
VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1IZm5aOEFrSGxLV19qTXlsWm5lLWowdG9VRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTUxNS85NDJGQzNCODJBMzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hs
S1dfak15bFpuZS1qMHRvVUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApOy0Ps61nn6hmFXbWdXo3YmfUzk8sRWKhn6oBEiDucKasRi7JqI1OCwbUwuq
9xPZ8Te0SYT5RHWXi1efsPLqODjtkvTK7+37//DiW0vJh9lI7RhuN5LsC4lx6KL0
FNsp33K+2qlUxkw8dBknILDB3BM5iWSLCIobgy4d4amCD3uHDgFAFC/gISTcK9+K
Vy7AatSPS2PBPgrNhsZ6Hx/gdC+ZRqxNHO0bmvoatvaStCC+UC0LMrOpwxAt8A3q
eskuvk3N1d20B+bHpBzxjALZv5aH6Wv466cJ9iw468k2SZNXcSjcv37YwpF5Qx6J
y+5Ing2MT80oXhXJZVcn/xKMow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:49 2026 by rpki-client