
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
File: -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json)
Hash identifier: Eow4ARimdHh5dqaPoKGxddYaM/oGglswX0GmeMuIHBA=
Subject key identifier: CA:36:9A:E3:EB:1C:32:9F:1D:35:3E:CC:17:58:FE:A5:FD:DC:01:D7
Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
Certificate issuer: /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Certificate serial: 0B89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
Manifest number: 0B78
Signing time: Mon 02 Mar 2026 03:14:27 +0000
Manifest this update: Mon 02 Mar 2026 03:14:26 +0000
Manifest next update: Mon 09 Mar 2026 03:14:26 +0000
Files and hashes: 1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: Hx1aHAAojD3y2K9HQ1muZg8JBS+Z6x5wjCMdimboADw=)
2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: eJeSjBWnfyztRwss0NRo6wVnGnHYGD5kAHWaTt/BWrE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2953 (0xb89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Validity
Not Before: Mar 2 03:14:26 2026 GMT
Not After : Mar 9 03:14:26 2026 GMT
Subject: CN=69a50092-0c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:20:66:64:1c:ee:51:a9:59:e7:99:ab:9a:
5a:e6:87:78:1c:4c:f4:15:59:35:fc:1e:16:9b:e3:
60:3f:9c:e3:59:ca:9f:86:2e:06:e7:66:88:fb:ff:
dd:e4:a9:05:f0:0b:45:70:36:64:c7:9d:c8:79:81:
4d:1e:1f:13:8a:b1:4b:0e:d5:b0:e1:61:ad:8c:20:
4b:d0:8f:e0:04:4a:54:8c:a0:6c:f2:59:44:fb:aa:
75:86:8b:c1:26:1f:0a:90:47:ef:96:e2:e4:ad:f6:
16:8a:51:a1:c5:4f:24:e1:56:22:64:81:89:a9:5e:
bf:9a:a6:26:4e:b8:e8:19:82:a3:b0:a6:17:a7:de:
f4:75:f7:6d:58:c2:df:d5:6d:61:53:7d:37:4a:96:
11:e5:2a:a2:c1:79:e6:14:8e:17:af:d0:f7:fb:9a:
6f:06:e5:15:1b:8f:7a:ed:19:5d:f3:61:5d:10:b5:
31:bf:95:31:5a:18:3c:e1:d4:c1:7f:e2:69:5f:ec:
fd:a7:f6:16:58:cf:ea:f0:8a:38:df:42:17:bc:07:
3d:35:15:7f:e4:2b:97:10:40:56:77:52:49:d1:b4:
85:6b:a5:ac:da:74:52:a1:4d:a9:c1:d5:20:d6:5c:
eb:0f:58:9f:49:a5:c5:56:86:6d:54:e6:65:17:c6:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:36:9A:E3:EB:1C:32:9F:1D:35:3E:CC:17:58:FE:A5:FD:DC:01:D7
X509v3 Authority Key Identifier:
keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:8e:8e:56:39:64:ec:5c:7c:f9:91:72:da:d3:38:50:50:c4:
38:e3:68:95:41:c0:c8:4b:7d:19:98:fe:d0:65:93:31:f9:47:
f3:13:fb:41:bb:a5:f4:d1:b8:2e:76:42:a3:c0:ac:95:3a:de:
2e:b9:15:dc:43:43:ff:2f:86:38:e1:6c:de:8a:25:a5:8d:38:
20:53:a4:7d:f4:73:24:54:db:f5:79:bb:54:42:46:88:e2:9b:
8a:48:dc:7f:e9:65:72:c1:57:a0:db:2e:91:6a:8e:5a:a1:4e:
71:91:4d:f8:be:ec:dc:bc:9e:9c:b9:2f:ae:c0:97:6a:38:13:
a0:68:db:24:44:53:51:8c:58:cc:5d:50:b4:e7:6f:3d:11:a7:
24:90:dd:78:e5:22:4d:c5:31:c5:f9:0e:6e:d2:de:b3:c1:a8:
e4:d7:37:23:aa:09:63:c8:43:7a:c2:2b:ef:5d:88:e7:5e:25:
42:b0:74:f2:8b:a7:38:29:eb:27:1d:54:55:85:25:60:c8:6f:
8a:fb:30:d3:45:ce:57:8d:89:f0:33:08:eb:f3:38:ae:23:39:
b7:c3:44:9a:87:63:94:49:5f:9f:10:71:20:8e:d3:fa:8e:3e:
4a:05:71:1a:32:be:9b:60:ee:ff:72:ff:62:40:c3:17:bb:47:
f8:4b:d5:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQyM0ExMTAvBgNVBAUTKEY4NzIyN0M2NjUzRDY5QkFFRTJFOTk0ODg0MkNFQjBC
NDA0OUU3ODYwHhcNMjYwMzAyMDMxNDI2WhcNMjYwMzA5MDMxNDI2WjAYMRYwFAYD
VQQDEw02OWE1MDA5Mi0wYzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtwwgZmQc7lGpWeeZq5pa5od4HEz0FVk1/B4Wm+NgP5zjWcqfhi4G52aI+//d
5KkF8AtFcDZkx53IeYFNHh8TirFLDtWw4WGtjCBL0I/gBEpUjKBs8llE+6p1hovB
Jh8KkEfvluLkrfYWilGhxU8k4VYiZIGJqV6/mqYmTrjoGYKjsKYXp970dfdtWMLf
1W1hU303SpYR5SqiwXnmFI4Xr9D3+5pvBuUVG4967Rld82FdELUxv5UxWhg84dTB
f+JpX+z9p/YWWM/q8Io430IXvAc9NRV/5CuXEEBWd1JJ0bSFa6Ws2nRSoU2pwdUg
1lzrD1ifSaXFVoZtVOZlF8ZWLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMo2muPr
HDKfHTU+zBdY/qX93AHXMB8GA1UdIwQYMBaAFPhyJ8ZlPWm67i6ZSIQs6wtASeeG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDIzQS84RTNDMTIxRTQ4
RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8tSElueG1VOWFicnVMcGxJaEN6ckMwQko1
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1ISW54bVU5YWJydUxwbEloQ3pyQzBCSjU0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDIzQS84RTNDMTIxRTQ4RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8tSElueG1VOWFi
cnVMcGxJaEN6ckMwQko1NFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUo6OVjlk7Fx8+ZFy2tM4UFDEOONolUHAyEt9GZj+0GWTMflH8xP7Qbul9NG4
LnZCo8CslTreLrkV3END/y+GOOFs3oolpY04IFOkffRzJFTb9Xm7VEJGiOKbikjc
f+llcsFXoNsukWqOWqFOcZFN+L7s3LyenLkvrsCXajgToGjbJERTUYxYzF1QtOdv
PRGnJJDdeOUiTcUxxfkObtLes8Go5Nc3I6oJY8hDesIr712I514lQrB08ounOCnr
Jx1UVYUlYMhvivsw00XOV42J8DMI6/M4riM5t8NEmodjlElfnxBxII7T+o4+SgVx
GjK+m2Du/3L/YkDDF7tH+EvVpA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:29 2026 by rpki-client