
$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
File: SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json)
Hash identifier: 9xMMn0e5fkCQxRQJzCnERWpUOUMu61TQUiBmtM4gABg=
Subject key identifier: 81:C1:A9:0B:66:C2:0A:E1:53:EE:B8:09:DA:4F:2E:40:91:3A:5C:ED
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial: 02B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
Manifest number: 029D
Signing time: Sat 13 Jun 2026 01:46:36 +0000
Manifest this update: Sat 13 Jun 2026 01:46:36 +0000
Manifest next update: Sat 20 Jun 2026 01:46:36 +0000
Files and hashes: 1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: 528vI3vpkPBtT7WrV6DK/QoCrVvDPBfWUyQkyrb08p0=)
2: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: RnuV+1DoXIf2HDUvOKaEZgCO7oWGACeQmNMNZ7oeAtg=)
3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: 3thOWBScBaW27emyNgWIB6Tm9y3isPfdf3d0Ik133Zg=)
4: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: kt58U+JdwwoWOrJfOurK3ZzukKhfcE+5o9qCOQ61N04=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697 (0x2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Validity
Not Before: Jun 13 01:46:36 2026 GMT
Not After : Jun 20 01:46:36 2026 GMT
Subject: CN=6a2cb67c-345e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:4e:63:55:7d:95:4e:f6:2c:8e:f9:10:1b:
91:ac:2f:d6:6b:ea:90:fd:ea:ad:89:f1:28:4a:69:
67:7a:11:62:00:d7:8f:99:8e:a2:10:7b:69:f4:78:
81:06:c3:fe:c2:c4:5a:52:18:14:de:cb:0a:de:0e:
56:be:89:62:7d:78:6c:a9:76:d2:28:67:09:02:41:
a4:65:7a:9e:d1:14:ab:0f:a5:19:e0:1e:df:4f:3d:
d1:2d:8f:a3:64:df:cd:0d:9e:ed:f9:41:c3:d4:4e:
71:60:50:50:67:7b:9c:2c:d2:76:26:31:a7:9a:6b:
ff:ab:f9:e2:59:d8:2b:be:c0:81:54:1e:7f:8a:bc:
67:c1:fb:06:56:fa:f1:50:f9:88:87:c8:bf:8f:58:
04:bc:b1:54:f9:8e:41:ac:f7:5c:15:3c:13:a3:4a:
14:1b:71:83:97:b4:03:ba:90:d7:63:4a:6d:bb:80:
b4:6d:44:54:59:e5:02:51:ec:f5:31:7e:36:5c:90:
46:a3:c5:58:3a:75:b6:f7:a7:84:68:4f:00:bf:c5:
34:74:98:84:47:a0:b0:b2:15:6c:41:ca:84:5f:79:
ee:4c:2b:5c:a3:fb:83:e3:87:33:75:d8:2b:d4:d0:
ed:cf:c4:5d:db:1f:59:f6:06:17:b2:27:34:d9:e6:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C1:A9:0B:66:C2:0A:E1:53:EE:B8:09:DA:4F:2E:40:91:3A:5C:ED
X509v3 Authority Key Identifier:
keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e5:e1:28:0a:f8:e4:8c:b4:52:c7:1f:76:1a:e0:e4:07:17:
29:a6:f5:1c:54:1b:96:44:d3:69:8e:28:bf:4e:17:4f:03:d7:
16:ed:32:8a:e7:1b:79:82:d2:19:91:7a:58:c0:c8:a5:ce:3d:
f1:e4:0f:11:a5:09:82:ad:dc:92:37:52:ce:78:01:fa:fb:cc:
68:51:37:63:c6:5e:fe:92:7b:ed:de:74:dd:e1:dc:83:80:6b:
6b:64:0c:01:1e:49:9b:85:47:a8:d0:7b:d8:51:43:c2:8f:b7:
78:0e:91:23:68:35:10:e6:91:4c:71:4e:b7:90:09:46:cd:69:
56:89:3b:28:00:f2:a5:25:fa:c1:7f:91:52:e1:ed:b4:78:74:
e2:ca:1d:ba:68:af:3b:1e:ab:c6:11:2f:90:37:1f:b1:c0:df:
06:02:41:13:b7:21:1d:f3:f9:88:ac:6d:25:a2:f5:d5:81:70:
01:47:2d:dd:9b:69:74:6f:95:f2:03:f5:b9:27:1d:d5:16:ca:
0f:a1:2c:78:4d:60:17:3a:72:31:df:90:0e:54:85:7c:ea:7b:
c1:a8:d4:69:7b:d7:58:23:bb:87:67:a7:52:13:1d:aa:68:49:
15:94:d6:d4:ff:a9:bb:23:de:e5:84:69:07:9f:be:1c:2e:d2:
4f:4f:83:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw
QkIyQzUwREIwHhcNMjYwNjEzMDE0NjM2WhcNMjYwNjIwMDE0NjM2WjAYMRYwFAYD
VQQDEw02YTJjYjY3Yy0zNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqfdOY1V9lU72LI75EBuRrC/Wa+qQ/eqtifEoSmlnehFiANePmY6iEHtp9HiB
BsP+wsRaUhgU3ssK3g5WvolifXhsqXbSKGcJAkGkZXqe0RSrD6UZ4B7fTz3RLY+j
ZN/NDZ7t+UHD1E5xYFBQZ3ucLNJ2JjGnmmv/q/niWdgrvsCBVB5/irxnwfsGVvrx
UPmIh8i/j1gEvLFU+Y5BrPdcFTwTo0oUG3GDl7QDupDXY0ptu4C0bURUWeUCUez1
MX42XJBGo8VYOnW296eEaE8Av8U0dJiER6CwshVsQcqEX3nuTCtco/uD44czddgr
1NDtz8Rd2x9Z9gYXsic02ebVzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIHBqQtm
wgrhU+64CdpPLkCROlztMB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC
OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTZENC81RTlFNjQzNDdCOTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBx
dWRhTjVLNURKOFFMc3NVTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoOXhKAr45Iy0Uscfdhrg5AcXKab1HFQblkTTaY4ov04XTwPXFu0yiucbeYLS
GZF6WMDIpc498eQPEaUJgq3ckjdSzngB+vvMaFE3Y8Ze/pJ77d503eHcg4Bra2QM
AR5Jm4VHqNB72FFDwo+3eA6RI2g1EOaRTHFOt5AJRs1pVok7KADypSX6wX+RUuHt
tHh04sodumivOx6rxhEvkDcfscDfBgJBE7chHfP5iKxtJaL11YFwAUct3ZtpdG+V
8gP1uScd1RbKD6EseE1gFzpyMd+QDlSFfOp7wajUaXvXWCO7h2enUhMdqmhJFZTW
1P+puyPe5YRpB5++HC7ST0+D7Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:02:15 2026 by rpki-client