
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
File: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft (raw, json)
Hash identifier: Y1OWFq3k7Ec54rLhIRA2rUIMCpZpMgLjyS93cg6fr3M=
Subject key identifier: 98:5E:0A:49:CF:52:38:D7:9B:2A:08:62:BC:C8:F5:A8:E6:EE:12:2B
Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94
Certificate issuer: /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
Certificate serial: 0418
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
Manifest number: 0406
Signing time: Fri 17 Apr 2026 00:20:38 +0000
Manifest this update: Fri 17 Apr 2026 00:20:37 +0000
Manifest next update: Fri 24 Apr 2026 00:20:37 +0000
Files and hashes: 1: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl (hash: nnlaA5OShqeflS1MpzddGfglLQ06equkH11pY5HRsVI=)
2: AB3742F4B34411ECB016765EC4F9AE02.roa (hash: SWcdkZCR9aXBAKCHLOpDQ/w4c30vCytihBZ+pt87TXA=)
3: 9837349AB41E11ECAFDA1F1AC4F9AE02.roa (hash: coFqgEy/GfsHGfK/VEtTVnI0ZqJ2SsX074vbNTT8fEE=)
4: E0722F2EB41B11ECB8529210C4F9AE02.roa (hash: LLqzzzWvO8ImDPnE9xtHvAoTCd4N7lReci7XNB8QRDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl
rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:20:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1048 (0x418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186C2F, serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
Validity
Not Before: Apr 17 00:20:37 2026 GMT
Not After : Apr 24 00:20:37 2026 GMT
Subject: CN=69e17cd5-5b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:6b:f4:c4:a5:7f:17:bc:55:45:2c:02:67:
27:c3:8c:48:41:97:83:ab:89:32:56:77:e9:a8:a7:
a8:36:13:e3:51:81:ec:8a:8c:eb:fc:d7:de:28:6e:
2b:31:b8:44:9a:75:fb:2b:ec:f5:cf:09:0c:55:57:
04:67:b2:1f:70:ee:ea:ab:af:84:55:b2:00:15:50:
85:d1:a8:56:c9:c8:b3:63:64:f0:79:80:c3:1a:d4:
01:23:97:da:8f:4e:99:26:6c:c5:b1:64:d9:08:13:
8b:51:a1:83:d4:d1:64:a9:8e:e0:8c:f7:5a:f4:cd:
f2:07:04:60:2d:c7:e9:cb:e0:e9:1c:94:09:cc:01:
65:80:0a:58:b7:d7:07:25:5b:5d:c0:9c:01:1a:f8:
4b:74:11:83:27:d4:14:42:90:f8:77:01:ef:ec:79:
41:41:3f:c1:f8:03:a6:49:f3:13:c0:e9:20:fb:a4:
93:01:2a:ae:8b:a0:7d:0d:e1:1f:ab:79:aa:64:c6:
68:c2:40:7b:fa:4b:fc:bd:dd:e1:40:ed:f5:dd:42:
f5:ba:c4:d3:54:20:68:7a:b2:b5:e4:1d:9c:a5:11:
09:e5:74:0b:72:04:d8:37:3f:af:66:0a:47:28:ba:
e4:72:7f:65:53:a9:cd:66:ec:fd:cd:60:c1:56:30:
26:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5E:0A:49:CF:52:38:D7:9B:2A:08:62:BC:C8:F5:A8:E6:EE:12:2B
X509v3 Authority Key Identifier:
keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:81:62:38:76:95:a2:64:b8:9d:d8:b4:bb:fb:00:c2:1f:56:
a6:a9:e0:ee:96:14:eb:8a:07:73:25:52:ae:a3:7b:f3:ed:4b:
60:8b:3d:9a:ed:8b:2c:1f:bd:0a:b1:28:8e:77:c9:ff:f9:18:
e9:d2:3b:07:e4:b4:b6:d2:45:55:74:c1:69:f5:94:ce:b0:1b:
ea:cd:e6:34:f5:f1:3a:ce:2c:fc:e7:c1:bd:86:ff:45:12:c1:
9a:0a:86:c1:d6:1d:5c:71:e0:ed:17:84:5f:f7:44:1f:58:0b:
77:42:c8:8a:5e:b9:be:1e:2c:2e:3b:a9:62:6b:eb:a5:c8:5b:
e0:7b:70:54:1b:da:6c:39:0e:3a:db:d0:d4:49:81:66:4d:d6:
79:7e:c5:ed:81:e2:f6:e2:6a:e3:b4:a7:e1:90:e9:ba:5d:67:
16:7a:3d:80:1b:bb:98:c8:95:66:c1:d5:89:ed:64:9b:2d:4e:
44:a5:b0:62:15:5a:7e:bc:e6:ce:35:f2:f9:74:82:d2:d4:a6:
0f:47:ee:c3:6e:80:f8:14:31:e5:c8:a1:7d:87:f4:fa:c3:b6:
2b:f5:1c:7f:4f:53:69:8c:1f:d0:e3:37:c9:ca:93:a0:9b:1f:
c0:2b:87:4a:32:ee:88:e5:2d:c7:a0:bd:39:46:f1:9e:e7:02:
e4:8d:8c:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZDMkYxMTAvBgNVBAUTKEZFMTk3NzhBMEQwN0JEREI1RkY2QjlGMDVCRTJENTQ1
NTIwRUM0OTQwHhcNMjYwNDE3MDAyMDM3WhcNMjYwNDI0MDAyMDM3WjAYMRYwFAYD
VQQDEw02OWUxN2NkNS01YjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAscNr9MSlfxe8VUUsAmcnw4xIQZeDq4kyVnfpqKeoNhPjUYHsiozr/NfeKG4r
MbhEmnX7K+z1zwkMVVcEZ7IfcO7qq6+EVbIAFVCF0ahWycizY2TweYDDGtQBI5fa
j06ZJmzFsWTZCBOLUaGD1NFkqY7gjPda9M3yBwRgLcfpy+DpHJQJzAFlgApYt9cH
JVtdwJwBGvhLdBGDJ9QUQpD4dwHv7HlBQT/B+AOmSfMTwOkg+6STASqui6B9DeEf
q3mqZMZowkB7+kv8vd3hQO313UL1usTTVCBoerK15B2cpREJ5XQLcgTYNz+vZgpH
KLrkcn9lU6nNZuz9zWDBVjAmCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJheCknP
UjjXmyoIYrzI9ajm7hIrMB8GA1UdIwQYMBaAFP4Zd4oNB73bX/a58Fvi1UVSDsSU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkMyRi83NzNEMzlCNkIz
NDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZkdGY5cm53Vy1MVlJWSU94
SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19obDNpZzBIdmR0ZjlybndXLUxWUlZJT3hKUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkMyRi83NzNEMzlCNkIzNDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZk
dGY5cm53Vy1MVlJWSU94SlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArYFiOHaVomS4ndi0u/sAwh9Wpqng7pYU64oHcyVSrqN78+1LYIs9mu2LLB+9
CrEojnfJ//kY6dI7B+S0ttJFVXTBafWUzrAb6s3mNPXxOs4s/OfBvYb/RRLBmgqG
wdYdXHHg7ReEX/dEH1gLd0LIil65vh4sLjupYmvrpchb4HtwVBvabDkOOtvQ1EmB
Zk3WeX7F7YHi9uJq47Sn4ZDpul1nFno9gBu7mMiVZsHVie1kmy1ORKWwYhVafrzm
zjXy+XSC0tSmD0fuw26A+BQx5cihfYf0+sO2K/Ucf09TaYwf0OM3ycqToJsfwCuH
SjLuiOUtx6C9OUbxnucC5I2MDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:07 2026 by rpki-client