
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json)
Hash identifier: 6MQNfNti30mercS3P/8P2UwAdJbfaEApMT5qduqqaTk=
Subject key identifier: 6F:D7:FB:EB:FF:DB:57:A4:2C:54:59:E6:77:6E:09:70:6A:2A:5F:B7
Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Certificate serial: 0323
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
Manifest number: 031B
Signing time: Fri 17 Apr 2026 01:03:14 +0000
Manifest this update: Fri 17 Apr 2026 01:03:13 +0000
Manifest next update: Fri 24 Apr 2026 01:03:13 +0000
Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: OIvLUDzQOu6p7rbl0HcMG/NxTqPNAkmACYeSf+r1enE=)
2: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: U0yLO5Ev3zOcE/jWxDek+PewuFrsGyucjJ2jYS/L358=)
3: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: dd0CGQKg2qsZFHW0r2NsR/ySJbalRdUFAJqYcFNJaEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803 (0x323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Validity
Not Before: Apr 17 01:03:13 2026 GMT
Not After : Apr 24 01:03:13 2026 GMT
Subject: CN=69e186d1-50df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3b:2e:67:a6:37:4f:4a:46:b5:5e:4b:05:93:
9a:fc:96:10:d1:45:94:45:8c:84:5c:e7:11:5c:a6:
3c:7b:76:79:20:fa:5b:68:fa:74:89:cf:07:23:cb:
36:75:17:db:74:54:e5:94:39:9a:b8:77:87:bd:15:
25:d6:f1:e2:8c:b0:99:95:ac:ee:33:4f:c3:ff:f0:
1d:ee:4d:ad:49:5b:89:3c:78:a4:40:49:a3:4c:66:
c3:b2:67:2e:68:f2:99:bb:3f:ff:ae:3d:15:f9:a8:
ff:fc:87:bd:50:be:5d:e5:a1:61:20:aa:e2:30:3a:
32:23:b7:e7:45:64:dd:28:e9:ed:3d:1c:5c:44:67:
12:b4:b9:91:d5:78:45:46:5d:1c:20:04:fa:b1:e4:
aa:54:4b:78:72:9b:5b:12:b9:65:a5:4d:3b:20:3e:
bb:37:59:48:08:f2:18:e6:8e:b5:d7:05:ca:b2:b7:
67:e1:04:72:17:04:6e:a2:36:b9:a5:0d:ea:51:80:
7a:ac:0f:17:54:ec:82:11:64:d0:fc:98:79:a0:62:
c7:c3:71:44:46:5c:04:14:0d:b6:1e:58:77:5f:1a:
b0:c1:f9:6c:91:2d:3b:b3:2f:16:e4:65:bb:3e:e1:
24:e3:ec:34:b3:55:ed:7e:3b:11:0a:47:bb:d8:cd:
a7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D7:FB:EB:FF:DB:57:A4:2C:54:59:E6:77:6E:09:70:6A:2A:5F:B7
X509v3 Authority Key Identifier:
keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:eb:80:f2:67:f8:75:a4:72:f3:e0:7a:a6:e0:aa:be:91:9e:
a9:32:a2:a0:a3:ea:23:41:3f:3a:12:2e:69:4e:48:4a:75:3c:
e1:ac:1f:28:56:58:20:06:7c:cf:94:7b:73:c1:e9:cc:af:d4:
16:e9:a1:67:18:7b:1d:df:02:f7:05:76:a1:d2:8f:e3:f0:18:
d5:fa:fd:5c:d4:de:9b:16:78:ee:d3:4a:da:10:b5:25:97:65:
40:36:dc:e1:57:55:48:92:61:bc:d6:df:39:ee:f1:cd:e3:18:
7d:5f:41:96:dd:9b:2a:5e:e0:6e:d0:77:89:41:2f:f6:67:b1:
33:7b:43:d1:31:0c:21:3d:c1:25:c3:34:c8:ae:01:06:cd:93:
e2:b1:20:0a:83:00:75:a2:b0:21:4c:8a:af:c5:dd:2b:c0:bf:
dc:29:69:03:a2:15:b7:a7:ad:32:2c:06:4e:a0:0e:ec:b2:b3:
71:dd:75:da:dd:2d:6e:2e:c3:1f:a4:89:21:d9:a1:db:59:12:
9f:ca:60:dd:b9:6a:26:f0:61:00:a6:27:3b:0a:b1:98:6b:40:
f0:25:0a:ae:2a:30:8f:d1:2f:a9:99:5b:fd:a4:10:84:94:65:
b1:05:b0:ca:d6:ab:ee:ff:fc:eb:94:52:a9:c0:f0:7d:e2:75:
23:12:2a:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4
RjYwNDVBMzQwHhcNMjYwNDE3MDEwMzEzWhcNMjYwNDI0MDEwMzEzWjAYMRYwFAYD
VQQDEw02OWUxODZkMS01MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3jsuZ6Y3T0pGtV5LBZOa/JYQ0UWURYyEXOcRXKY8e3Z5IPpbaPp0ic8HI8s2
dRfbdFTllDmauHeHvRUl1vHijLCZlazuM0/D//Ad7k2tSVuJPHikQEmjTGbDsmcu
aPKZuz//rj0V+aj//Ie9UL5d5aFhIKriMDoyI7fnRWTdKOntPRxcRGcStLmR1XhF
Rl0cIAT6seSqVEt4cptbErllpU07ID67N1lICPIY5o611wXKsrdn4QRyFwRuoja5
pQ3qUYB6rA8XVOyCEWTQ/Jh5oGLHw3FERlwEFA22Hlh3XxqwwflskS07sy8W5GW7
PuEk4+w0s1XtfjsRCke72M2nowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/X++v/
21ekLFRZ5nduCXBqKl+3MB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF
MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NURCMS81QTQ5NkY4ODBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhk
THVLcnRBN0hQeGVQWUVXalEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAveuA8mf4daRy8+B6puCqvpGeqTKioKPqI0E/OhIuaU5ISnU84awfKFZYIAZ8
z5R7c8HpzK/UFumhZxh7Hd8C9wV2odKP4/AY1fr9XNTemxZ47tNK2hC1JZdlQDbc
4VdVSJJhvNbfOe7xzeMYfV9Blt2bKl7gbtB3iUEv9mexM3tD0TEMIT3BJcM0yK4B
Bs2T4rEgCoMAdaKwIUyKr8XdK8C/3ClpA6IVt6etMiwGTqAO7LKzcd112t0tbi7D
H6SJIdmh21kSn8pg3blqJvBhAKYnOwqxmGtA8CUKriowj9EvqZlb/aQQhJRlsQWw
ytar7v/865RSqcDwfeJ1IxIq4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:24:33 2026 by rpki-client