
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
File: HhI4RWNx50SJRiLpisHuVbQUXhA.mft (raw, json)
Hash identifier: EJdxuFJ4D104rI1bs0nVtoPrcQ8MM34y2i3I5cOcjec=
Subject key identifier: 2C:A4:F6:32:55:EC:9F:44:71:5B:29:21:FA:DF:F4:62:0B:DA:91:E1
Authority key identifier: 1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
Certificate issuer: /CN=A917E678/serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Certificate serial: 1614
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
Manifest number: 15B8
Signing time: Mon 02 Mar 2026 02:36:24 +0000
Manifest this update: Mon 02 Mar 2026 02:36:22 +0000
Manifest next update: Mon 09 Mar 2026 02:36:22 +0000
Files and hashes: 1: HhI4RWNx50SJRiLpisHuVbQUXhA.crl (hash: pap/U+kDhOA47YytOwVAOZjypuZouFrv0VCbGAv/62c=)
2: C5C8F29AFFE711F09EC342C9756F56BC.roa (hash: j07fKwZtLRciT6NFGCe/+nPRJNggQVvYMx63JVztzcI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl
rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5652 (0x1614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Validity
Not Before: Mar 2 02:36:22 2026 GMT
Not After : Mar 9 02:36:22 2026 GMT
Subject: CN=69a4f7a8-57d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:59:21:cf:5b:f2:cb:d7:93:e2:8f:c6:4b:
42:92:6b:d8:b2:c0:d9:e5:df:74:e1:c4:c2:aa:38:
df:ed:70:27:3a:50:2e:d5:3e:2c:ea:b9:da:a4:5e:
81:d6:dd:66:15:01:1a:d8:9c:e5:f7:db:ab:10:4a:
3d:f2:c0:88:62:b9:52:05:1e:a9:c1:fc:19:63:ce:
0a:c8:8e:e2:78:ce:f6:38:fb:13:1f:55:86:e5:78:
08:6f:08:b1:11:19:7a:dd:17:87:48:10:01:85:2d:
04:ff:28:24:26:79:71:66:20:ff:dd:bd:f6:11:44:
3e:ab:e1:d6:ba:a9:6c:7b:09:3a:33:11:3b:20:5f:
89:82:76:da:29:a0:6e:33:f5:b1:0c:ac:a7:55:ea:
5a:ed:8b:e8:ee:1d:c1:2b:b5:b2:a2:28:e2:c3:93:
16:cd:26:57:2e:cf:7a:ba:dd:03:35:35:4e:dc:99:
0a:f0:26:70:50:f1:a4:e4:05:c2:bf:6b:5a:5f:34:
db:74:58:ed:5b:1a:d2:00:49:70:8b:1c:56:c1:a4:
17:8a:0a:43:be:9d:e6:fe:14:15:51:f3:1c:2e:05:
b7:8c:88:84:e7:17:af:31:aa:fb:d0:8a:4c:08:7e:
55:43:a9:8e:7c:81:ff:38:7d:d5:48:79:1d:56:10:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A4:F6:32:55:EC:9F:44:71:5B:29:21:FA:DF:F4:62:0B:DA:91:E1
X509v3 Authority Key Identifier:
keyid:1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:d5:ad:49:21:13:06:95:08:8d:87:07:eb:49:3f:cc:81:64:
d1:68:89:c4:70:b8:6c:b4:f8:48:a8:2a:d4:78:67:45:7d:c1:
d6:12:a9:ce:4c:68:2c:80:ea:3d:67:d0:ed:cd:e3:10:40:56:
41:43:f2:98:38:31:0b:bb:51:f6:8c:f0:c5:e5:dd:81:2e:02:
9b:e4:3b:d6:4d:ca:82:28:80:3c:cd:c9:73:49:92:58:cb:10:
5b:98:ab:df:ac:e4:ab:11:4f:7b:e4:22:31:69:b9:34:a9:a4:
80:1d:52:9e:d6:0b:dc:14:49:64:09:95:47:ad:7a:1a:a9:e4:
27:56:24:d9:5c:af:70:6c:54:2b:ff:44:2a:db:d8:fa:94:89:
d3:59:08:5d:99:73:ef:42:ec:91:0b:2c:84:1e:8a:13:0a:8b:
d0:d0:22:a3:8a:37:6f:4c:e0:6d:ba:58:e3:14:4f:28:6b:65:
03:87:cd:24:de:67:93:63:71:10:84:fc:fb:b1:fd:f7:45:41:
1b:f2:1b:23:7f:98:26:e9:58:a6:dc:17:75:00:18:7e:6a:1e:
94:2a:e3:06:3a:67:19:f1:7f:c4:23:0e:63:a5:1f:ed:7c:d2:
e1:cd:e6:5e:a4:35:97:72:12:1f:bc:95:f9:e8:46:bb:21:9b:
b1:33:fc:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2NzgxMTAvBgNVBAUTKDFFMTIzODQ1NjM3MUU3NDQ4OTQ2MjJFOThBQzFFRTU1
QjQxNDVFMTAwHhcNMjYwMzAyMDIzNjIyWhcNMjYwMzA5MDIzNjIyWjAYMRYwFAYD
VQQDEw02OWE0ZjdhOC01N2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsNZZIc9b8svXk+KPxktCkmvYssDZ5d904cTCqjjf7XAnOlAu1T4s6rnapF6B
1t1mFQEa2Jzl99urEEo98sCIYrlSBR6pwfwZY84KyI7ieM72OPsTH1WG5XgIbwix
ERl63ReHSBABhS0E/ygkJnlxZiD/3b32EUQ+q+HWuqlsewk6MxE7IF+JgnbaKaBu
M/WxDKynVepa7Yvo7h3BK7Wyoijiw5MWzSZXLs96ut0DNTVO3JkK8CZwUPGk5AXC
v2taXzTbdFjtWxrSAElwixxWwaQXigpDvp3m/hQVUfMcLgW3jIiE5xevMar70IpM
CH5VQ6mOfIH/OH3VSHkdVhA6PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCyk9jJV
7J9EcVspIfrf9GIL2pHhMB8GA1UdIwQYMBaAFB4SOEVjcedEiUYi6YrB7lW0FF4Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC82OTdFMzU2QTY5
NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9IaEk0UldOeDUwU0pSaUxwaXNIdVZiUVVY
aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0hoSTRSV054NTBTSlJpTHBpc0h1VmJRVVhoQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTY3OC82OTdFMzU2QTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9IaEk0UldOeDUw
U0pSaUxwaXNIdVZiUVVYaEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAudWtSSETBpUIjYcH60k/zIFk0WiJxHC4bLT4SKgq1HhnRX3B1hKpzkxoLIDq
PWfQ7c3jEEBWQUPymDgxC7tR9ozwxeXdgS4Cm+Q71k3KgiiAPM3Jc0mSWMsQW5ir
36zkqxFPe+QiMWm5NKmkgB1SntYL3BRJZAmVR616GqnkJ1Yk2VyvcGxUK/9EKtvY
+pSJ01kIXZlz70LskQsshB6KEwqL0NAio4o3b0zgbbpY4xRPKGtlA4fNJN5nk2Nx
EIT8+7H990VBG/IbI3+YJulYptwXdQAYfmoelCrjBjpnGfF/xCMOY6Uf7XzS4c3m
XqQ1l3ISH7yV+ehGuyGbsTP87Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:29:56 2026 by rpki-client