
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
File: -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json)
Hash identifier: kye+0o9J2XjF00os5WMOFNILD7FvIbkYXez7lZfKkBc=
Subject key identifier: 88:CA:2B:BA:CC:8A:8D:6D:65:90:B2:C1:51:1D:41:EA:89:FF:64:99
Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
Certificate issuer: /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Certificate serial: 0BFE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
Manifest number: 0BF3
Signing time: Sun 04 Oct 2026 19:01:58 +0000
Manifest this update: Sun 04 Oct 2026 19:01:58 +0000
Manifest next update: Sun 11 Oct 2026 19:01:58 +0000
Files and hashes: 1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: ToyxbFMzv874x2IlD23X1MiRSqmlUcoSdMJ4Ini770c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3070 (0xbfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Validity
Not Before: Oct 4 19:01:58 2026 GMT
Not After : Oct 11 19:01:58 2026 GMT
Subject: CN=6ac2a2a6-6e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:0b:3e:d9:fb:d2:fc:3e:ef:15:49:e6:0d:
22:45:d8:41:26:81:20:a5:9c:22:4c:f5:01:ad:3a:
5e:c6:c2:5f:6a:67:e3:35:9e:00:de:b1:c9:26:c3:
16:81:f9:df:5d:a4:9a:1a:f7:aa:a2:44:b3:e0:d2:
53:16:8b:96:78:19:8f:ec:9e:12:35:66:68:36:41:
44:a3:34:d2:6e:8d:42:e2:79:c8:ca:e1:4e:88:ff:
5b:25:47:fe:69:ba:1f:76:69:e4:64:65:1c:13:5d:
22:fe:5a:c1:f9:d2:a1:a3:24:18:cb:07:e6:00:72:
0a:5a:14:40:52:91:0d:eb:d0:c8:b3:c5:95:55:f1:
b0:e5:2a:91:70:88:a0:93:22:94:77:c4:95:1e:a3:
11:54:5c:22:dc:c6:df:8b:08:c6:9b:c8:d2:25:15:
36:89:39:10:bd:b5:7f:93:98:5f:de:52:b0:73:8a:
e4:36:4e:7c:67:b9:36:b3:c5:56:3e:6b:5f:57:9d:
9e:89:0c:c0:be:00:3b:03:be:d9:9f:a3:1b:f1:fd:
15:78:22:59:94:56:32:b6:56:18:3c:52:a9:08:27:
ae:0d:df:52:05:08:1c:69:60:2a:46:db:2b:6c:4f:
01:02:aa:07:7f:57:77:02:29:5d:0e:81:dc:69:2d:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CA:2B:BA:CC:8A:8D:6D:65:90:B2:C1:51:1D:41:EA:89:FF:64:99
X509v3 Authority Key Identifier:
keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:03:a3:87:09:b5:a7:61:e8:0a:53:15:c3:89:7c:bd:97:9f:
1c:e5:27:f7:67:41:5b:bf:2f:fb:17:a3:7c:18:74:9d:f2:a0:
11:ea:c5:a2:50:15:b8:92:65:5a:74:39:ab:53:89:70:39:7c:
e7:ad:00:ef:29:7d:09:a5:6e:3f:ae:f7:32:7a:5e:67:e1:bf:
fa:8c:a2:f6:47:75:a5:e7:13:de:90:52:fc:d3:5c:88:97:f5:
6a:d8:ae:71:22:87:37:83:ad:56:5b:9d:72:9e:d2:90:82:d4:
d3:72:bc:9a:48:3a:ad:d6:3b:62:cd:a5:66:bf:ef:a4:b9:0c:
5c:97:a6:69:8c:31:dc:3e:1e:11:4a:49:88:ef:0a:65:2d:d4:
7b:84:ba:0f:d8:93:12:7b:3b:46:12:87:f7:9d:ed:53:8b:66:
08:77:4a:b0:d4:55:14:bd:c8:26:b3:7d:ec:f4:7b:bb:b6:01:
21:b2:58:1c:99:78:32:02:c9:cc:12:d1:a4:51:8b:80:34:95:
c0:5e:31:e8:d8:df:52:f8:67:95:c7:d8:a5:0d:76:38:95:aa:
b5:24:9e:23:4e:da:eb:50:27:e1:e2:51:6c:56:20:03:6f:32:
bd:b7:7f:19:d5:75:3c:14:11:37:47:37:27:42:26:f4:4d:2e:
e0:42:43:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQyM0ExMTAvBgNVBAUTKEY4NzIyN0M2NjUzRDY5QkFFRTJFOTk0ODg0MkNFQjBC
NDA0OUU3ODYwHhcNMjYxMDA0MTkwMTU4WhcNMjYxMDExMTkwMTU4WjAYMRYwFAYD
VQQDEw02YWMyYTJhNi02ZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcMLPtn70vw+7xVJ5g0iRdhBJoEgpZwiTPUBrTpexsJfamfjNZ4A3rHJJsMW
gfnfXaSaGveqokSz4NJTFouWeBmP7J4SNWZoNkFEozTSbo1C4nnIyuFOiP9bJUf+
abofdmnkZGUcE10i/lrB+dKhoyQYywfmAHIKWhRAUpEN69DIs8WVVfGw5SqRcIig
kyKUd8SVHqMRVFwi3MbfiwjGm8jSJRU2iTkQvbV/k5hf3lKwc4rkNk58Z7k2s8VW
PmtfV52eiQzAvgA7A77Zn6Mb8f0VeCJZlFYytlYYPFKpCCeuDd9SBQgcaWAqRtsr
bE8BAqoHf1d3AildDoHcaS2VTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIjKK7rM
io1tZZCywVEdQeqJ/2SZMB8GA1UdIwQYMBaAFPhyJ8ZlPWm67i6ZSIQs6wtASeeG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDIzQS84RTNDMTIxRTQ4
RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8tSElueG1VOWFicnVMcGxJaEN6ckMwQko1
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1ISW54bVU5YWJydUxwbEloQ3pyQzBCSjU0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDIzQS84RTNDMTIxRTQ4RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8tSElueG1VOWFi
cnVMcGxJaEN6ckMwQko1NFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfQOjhwm1p2HoClMVw4l8vZefHOUn92dBW78v+xejfBh0nfKgEerFolAVuJJl
WnQ5q1OJcDl8560A7yl9CaVuP673MnpeZ+G/+oyi9kd1pecT3pBS/NNciJf1atiu
cSKHN4OtVludcp7SkILU03K8mkg6rdY7Ys2lZr/vpLkMXJemaYwx3D4eEUpJiO8K
ZS3Ue4S6D9iTEns7RhKH953tU4tmCHdKsNRVFL3IJrN97PR7u7YBIbJYHJl4MgLJ
zBLRpFGLgDSVwF4x6NjfUvhnlcfYpQ12OJWqtSSeI07a61An4eJRbFYgA28yvbd/
GdV1PBQRN0c3J0Im9E0u4EJD1g==
-----END CERTIFICATE-----
Generated at Mon Oct 5 00:03:42 2026 by rpki-client