
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
File: Hte4fPVriwDuFD5GlnhQOBTl-lM.mft (raw, json)
Hash identifier: TfJIq4alz8yuDrU4m/rDAtqLCrt1r8qe2apnS1kNkp8=
Subject key identifier: D0:90:B4:2B:0A:F4:CD:A9:EB:D3:47:42:89:72:92:2E:D8:6F:DC:7B
Authority key identifier: 1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53
Certificate issuer: /CN=A914C0F5/serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53
Certificate serial: 068B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
Manifest number: 067C
Signing time: Thu 16 Apr 2026 22:29:18 +0000
Manifest this update: Thu 16 Apr 2026 22:29:18 +0000
Manifest next update: Thu 23 Apr 2026 22:29:18 +0000
Files and hashes: 1: Hte4fPVriwDuFD5GlnhQOBTl-lM.crl (hash: U8tzmZusfoc2INkVVjrcMUBg3b7SjTXv8Cha5MuKpM0=)
2: 694F9F9CBE2811EBBB48FF52C4F9AE02.roa (hash: 1mi94uLEkRDVwmv/sPwzG05IO6gK3xnOgPXRSCc/xws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl
rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675 (0x68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C0F5, serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53
Validity
Not Before: Apr 16 22:29:18 2026 GMT
Not After : Apr 23 22:29:18 2026 GMT
Subject: CN=69e162be-3074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f0:96:1b:4d:0e:b4:b1:1f:04:8d:94:da:c8:
94:ab:e4:fa:20:11:91:76:aa:a5:9b:84:2d:6d:f4:
3f:bc:f1:54:d4:96:4a:1d:4b:96:73:f7:5c:9f:de:
7a:28:54:ad:79:cd:5e:d4:63:73:ea:22:98:32:e4:
61:a8:4b:59:ad:f7:61:25:d0:5b:cf:31:00:35:ca:
48:3e:99:69:45:4a:cf:5b:d9:a5:e8:11:3b:b2:a1:
c7:0c:74:3b:28:34:87:c7:17:91:08:10:53:6f:cb:
b5:24:28:81:40:2b:80:d4:2c:77:cf:10:66:59:ef:
0e:2d:db:95:45:78:af:2a:a4:94:e0:96:9d:84:fa:
e9:80:c0:87:57:c3:3e:c6:9d:3f:f2:39:10:09:c1:
5d:90:c0:36:a6:0e:9b:c9:6b:ab:e9:8b:2e:bd:fd:
e0:c1:c1:bf:0f:08:64:74:c1:dc:2d:5a:83:4d:89:
d5:cf:f1:27:8a:68:e5:17:85:c0:ab:ac:e7:e7:53:
86:de:1b:1d:bb:e4:30:1b:f5:c8:40:5e:53:ed:7a:
fd:80:05:de:05:da:df:4e:42:1b:d7:28:49:67:b1:
e8:af:f2:6f:26:a9:63:b7:c7:56:a8:c3:15:16:f0:
ef:d9:f9:f5:62:5c:c0:6d:0e:07:93:de:fa:34:d8:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:90:B4:2B:0A:F4:CD:A9:EB:D3:47:42:89:72:92:2E:D8:6F:DC:7B
X509v3 Authority Key Identifier:
keyid:1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bb:86:d4:36:ad:b0:c0:72:f0:ca:3f:59:ed:56:43:8c:26:
5b:e6:e7:95:bd:e5:4f:6e:6e:df:a5:a3:e3:1f:fd:6a:68:e2:
33:76:41:e1:f3:05:08:b2:e0:13:ed:db:01:31:f1:b5:fd:ac:
bd:4d:ca:7e:56:b4:c1:fc:e7:da:6d:87:37:a8:59:43:7e:8a:
7e:02:f1:c1:2d:57:ea:df:ae:d3:f8:72:e3:e7:cb:f9:f2:b6:
07:d3:f7:b3:39:b9:4b:6c:15:cd:6f:c3:ce:89:17:62:93:4e:
f8:48:7c:e1:a2:b0:0c:13:cd:3a:7e:d3:03:4d:98:8e:e3:a4:
fd:ca:98:3c:e3:6d:fe:38:af:11:63:eb:74:97:34:da:70:75:
58:6b:20:7b:ce:91:01:3a:9a:1a:14:fa:56:48:42:9a:f1:70:
0d:18:35:b7:0b:c9:0d:e7:50:34:d8:9c:4b:df:da:5b:09:67:
37:dc:83:68:19:15:fe:93:3d:1e:19:f2:b0:3f:c5:67:43:1a:
e6:1c:ed:da:52:69:7a:75:17:5a:9f:c3:16:1c:64:9d:83:bc:
9f:e3:1c:96:22:8e:d2:58:cb:10:3f:35:8b:7c:7b:3f:f2:ce:
87:5d:e5:d0:17:0b:41:dc:8c:e7:3d:43:f1:da:a4:40:51:d5:
fb:f1:56:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMwRjUxMTAvBgNVBAUTKDFFRDdCODdDRjU2QjhCMDBFRTE0M0U0Njk2Nzg1MDM4
MTRFNUZBNTMwHhcNMjYwNDE2MjIyOTE4WhcNMjYwNDIzMjIyOTE4WjAYMRYwFAYD
VQQDEw02OWUxNjJiZS0zMDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk/CWG00OtLEfBI2U2siUq+T6IBGRdqqlm4QtbfQ/vPFU1JZKHUuWc/dcn956
KFStec1e1GNz6iKYMuRhqEtZrfdhJdBbzzEANcpIPplpRUrPW9ml6BE7sqHHDHQ7
KDSHxxeRCBBTb8u1JCiBQCuA1Cx3zxBmWe8OLduVRXivKqSU4JadhPrpgMCHV8M+
xp0/8jkQCcFdkMA2pg6byWur6Ysuvf3gwcG/DwhkdMHcLVqDTYnVz/EnimjlF4XA
q6zn51OG3hsdu+QwG/XIQF5T7Xr9gAXeBdrfTkIb1yhJZ7Hor/JvJqljt8dWqMMV
FvDv2fn1YlzAbQ4Hk976NNgsOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCQtCsK
9M2p69NHQolyki7Yb9x7MB8GA1UdIwQYMBaAFB7XuHz1a4sA7hQ+RpZ4UDgU5fpT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzBGNS9ERjAxM0EzMkJF
MjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3RHVGRDVHbG5oUU9CVGwt
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h0ZTRmUFZyaXdEdUZENUdsbmhRT0JUbC1sTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzBGNS9ERjAxM0EzMkJFMjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3
RHVGRDVHbG5oUU9CVGwtbE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeruG1DatsMBy8Mo/We1WQ4wmW+bnlb3lT25u36Wj4x/9amjiM3ZB4fMFCLLg
E+3bATHxtf2svU3Kfla0wfzn2m2HN6hZQ36KfgLxwS1X6t+u0/hy4+fL+fK2B9P3
szm5S2wVzW/DzokXYpNO+Eh84aKwDBPNOn7TA02YjuOk/cqYPONt/jivEWPrdJc0
2nB1WGsge86RATqaGhT6VkhCmvFwDRg1twvJDedQNNicS9/aWwlnN9yDaBkV/pM9
HhnysD/FZ0Ma5hzt2lJpenUXWp/DFhxknYO8n+McliKO0ljLED81i3x7P/LOh13l
0BcLQdyM5z1D8dqkQFHV+/FWeQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:15:26 2026 by rpki-client