
$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
File: h-gMDkYzEKnTA4zgE88YU3SlxyI.mft (raw, json)
Hash identifier: F2KH0PwzaPGypbsKtQJuHCoV/AM/3AXxeDeLDNfNh4k=
Subject key identifier: 41:1F:DE:17:62:FF:F2:9F:C6:38:19:41:51:E2:28:D7:06:64:93:A7
Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
Certificate issuer: /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Certificate serial: 066E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
Manifest number: 0660
Signing time: Mon 02 Mar 2026 01:15:25 +0000
Manifest this update: Mon 02 Mar 2026 01:15:23 +0000
Manifest next update: Mon 09 Mar 2026 01:15:23 +0000
Files and hashes: 1: h-gMDkYzEKnTA4zgE88YU3SlxyI.crl (hash: k4UldQDZ79CDdHuHbOIkSs55+0kqdiDrvCO1P9m2SL8=)
2: C49CE482BEA411EB85828650C4F9AE02.roa (hash: JOGvq1AD8Gg+4yY3ltKJTiWff0l41sfm7XWi5tngbn4=)
3: C850F3BA89A511EEB6692E43C4F9AE02.roa (hash: 5be7I0/+cwjNbyTqFfbMRK0sXrbNJNl+sPoUACjviPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl
rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1646 (0x66e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918524B, serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Validity
Not Before: Mar 2 01:15:23 2026 GMT
Not After : Mar 9 01:15:23 2026 GMT
Subject: CN=69a4e4ac-71b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:7c:d7:a6:f9:e9:68:b3:88:6d:32:2b:10:
d3:1c:82:2d:50:3b:14:45:64:cd:1e:7a:96:50:84:
de:8d:66:53:5f:bd:e8:8a:26:ca:6d:4e:6a:a8:8e:
c3:78:af:95:71:1d:fc:b1:5e:24:7d:b2:ce:5e:3c:
9d:67:09:66:d6:f0:f9:f5:69:70:7d:7c:b6:df:3d:
1a:f7:15:85:2f:67:5c:b5:a7:ab:7a:90:9c:b5:48:
48:80:f7:d6:87:16:47:ff:a9:3a:54:11:ea:da:c9:
13:23:0f:8f:0e:bd:ac:a3:b0:2b:58:50:cc:8e:66:
03:75:93:87:4f:45:12:e4:a3:78:5d:f9:76:ff:8f:
b2:d1:22:ce:ba:ed:91:f6:41:99:ae:dc:3e:a8:df:
48:7c:67:64:6a:24:32:22:10:15:c9:65:7e:38:2c:
34:dc:57:0d:f0:c8:88:e2:43:b3:48:ae:90:80:a0:
79:f8:6e:71:ab:8f:6a:a9:7b:70:4c:c0:76:91:b8:
50:66:2e:9b:7c:fb:cc:b8:4c:94:bb:d8:d3:f6:46:
d6:80:95:f9:5f:78:a1:be:ce:c5:fe:72:56:11:34:
85:38:8b:00:73:4b:c7:26:76:e4:95:bd:5e:6b:51:
b7:de:3a:91:a1:fa:02:b7:69:1e:ca:a0:7f:62:46:
5c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1F:DE:17:62:FF:F2:9F:C6:38:19:41:51:E2:28:D7:06:64:93:A7
X509v3 Authority Key Identifier:
keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:39:9b:37:c3:5c:34:9c:36:9c:3f:84:7f:ac:61:e7:27:03:
5d:2c:7e:b3:5b:a6:8e:3a:07:88:93:e5:79:dd:44:8a:dd:e5:
bd:9d:d2:74:ba:7f:d7:25:a1:1b:84:64:5b:fc:27:3f:fc:8d:
21:38:50:2e:7a:e3:40:4a:29:7a:7d:1f:91:16:bf:6d:fa:3d:
55:e7:ad:85:b1:86:af:00:f1:f8:75:49:6c:48:1c:e3:1a:82:
0d:ab:d8:2f:46:cd:35:34:90:c7:af:05:ac:59:c0:74:51:96:
c7:df:2f:5c:1e:dc:60:ee:9e:76:2b:e7:2a:f4:76:99:f2:69:
32:41:8c:f5:8d:67:9a:a1:55:7a:f3:88:fc:5e:3b:4b:7e:16:
dd:95:85:b1:03:53:58:b7:a8:de:28:9e:c3:9b:ad:a8:46:ed:
27:30:b1:6d:a7:63:92:b0:27:5b:74:c3:98:73:19:1b:49:95:
99:d3:06:d6:1c:5b:ea:69:85:74:be:05:77:8b:07:cc:bc:a0:
f8:bb:23:9b:88:71:0c:24:18:59:03:fa:ec:48:60:b0:d8:82:
dc:a5:3b:9e:74:50:9a:ff:b1:5d:0a:15:89:5a:7b:c8:4d:a3:
98:30:5f:f1:86:1b:be:cf:8e:89:30:3a:0e:c5:9a:ea:23:98:
b0:5f:8e:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUyNEIxMTAvBgNVBAUTKDg3RTgwQzBFNDYzMzEwQTlEMzAzOENFMDEzQ0YxODUz
NzRBNUM3MjIwHhcNMjYwMzAyMDExNTIzWhcNMjYwMzA5MDExNTIzWjAYMRYwFAYD
VQQDEw02OWE0ZTRhYy03MWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtBx816b56WiziG0yKxDTHIItUDsURWTNHnqWUITejWZTX73oiibKbU5qqI7D
eK+VcR38sV4kfbLOXjydZwlm1vD59WlwfXy23z0a9xWFL2dctaerepCctUhIgPfW
hxZH/6k6VBHq2skTIw+PDr2so7ArWFDMjmYDdZOHT0US5KN4Xfl2/4+y0SLOuu2R
9kGZrtw+qN9IfGdkaiQyIhAVyWV+OCw03FcN8MiI4kOzSK6QgKB5+G5xq49qqXtw
TMB2kbhQZi6bfPvMuEyUu9jT9kbWgJX5X3ihvs7F/nJWETSFOIsAc0vHJnbklb1e
a1G33jqRofoCt2keyqB/YkZcfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEEf3hdi
//KfxjgZQVHiKNcGZJOnMB8GA1UdIwQYMBaAFIfoDA5GMxCp0wOM4BPPGFN0pcci
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTI0Qi85MjQwNkEwNkJF
QTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVLblRBNHpnRTg4WVUzU2x4
eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2gtZ01Ea1l6RUtuVEE0emdFODhZVTNTbHh5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTI0Qi85MjQwNkEwNkJFQTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVL
blRBNHpnRTg4WVUzU2x4eUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAODmbN8NcNJw2nD+Ef6xh5ycDXSx+s1umjjoHiJPled1Eit3lvZ3SdLp/1yWh
G4RkW/wnP/yNIThQLnrjQEopen0fkRa/bfo9VeethbGGrwDx+HVJbEgc4xqCDavY
L0bNNTSQx68FrFnAdFGWx98vXB7cYO6edivnKvR2mfJpMkGM9Y1nmqFVevOI/F47
S34W3ZWFsQNTWLeo3iiew5utqEbtJzCxbadjkrAnW3TDmHMZG0mVmdMG1hxb6mmF
dL4Fd4sHzLyg+Lsjm4hxDCQYWQP67EhgsNiC3KU7nnRQmv+xXQoViVp7yE2jmDBf
8YYbvs+OiTA6DsWa6iOYsF+Oug==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:53 2026 by rpki-client