
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
File: hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json)
Hash identifier: wFGsb6bEV5gsdqtu4NFINE+Fqn6kk/vHkayABG70cl8=
Subject key identifier: E9:AA:52:AD:25:36:7B:7A:06:09:B4:FC:08:0B:5B:7D:81:A9:4D:43
Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
Certificate issuer: /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Certificate serial: 016E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
Manifest number: 0157
Signing time: Sun 19 Apr 2026 04:45:42 +0000
Manifest this update: Sun 19 Apr 2026 04:45:41 +0000
Manifest next update: Sun 26 Apr 2026 04:45:41 +0000
Files and hashes: 1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: 5RG5mRrT1CjS90on72AYm94qPiRw/AfIjyxcngZWZ7w=)
2: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: 9GZpU2PHliAK9NY+OWOq5Tt+JHpwX/IWIj0455bKALU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Validity
Not Before: Apr 19 04:45:41 2026 GMT
Not After : Apr 26 04:45:41 2026 GMT
Subject: CN=69e45df6-5156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:f7:70:65:c0:cb:22:c3:bf:c1:50:19:7e:
b6:b7:3d:10:e5:f2:60:80:ec:d4:1e:8e:dc:e2:73:
f5:ca:84:3d:4d:d8:82:ac:50:91:c7:cf:d0:95:c7:
6b:60:6f:19:a6:66:6c:ef:7e:37:b1:f6:76:61:1f:
37:d9:d8:25:8e:93:dd:ae:b5:41:36:67:a1:1b:da:
d6:70:53:1c:1f:26:f7:ea:f6:1f:e8:61:92:32:0e:
fd:f5:35:25:8d:72:d6:b6:ab:af:a8:f6:53:83:a2:
b3:91:e2:a0:af:6d:45:af:49:36:d2:7e:6c:bd:bc:
3e:df:d9:82:92:d6:1d:f3:7c:7d:22:77:14:b7:78:
eb:1c:f4:01:1f:f0:1b:b9:87:80:59:3c:a5:55:86:
f5:d9:41:29:56:89:97:10:4d:0c:42:a1:b7:08:c6:
12:3e:3e:50:3f:e1:3e:2a:1b:48:0c:44:7c:ba:24:
3c:6a:fc:dc:c5:98:c0:c8:3d:79:e4:de:04:8b:cf:
68:7b:e0:aa:60:5a:e1:9b:b6:e6:5b:b2:7f:95:40:
66:81:05:7c:2f:99:98:9d:e8:44:a8:31:6a:f7:db:
2e:a2:be:67:f8:72:b7:c1:ba:7b:40:c2:6e:1d:33:
e8:d6:3a:35:64:70:07:97:13:45:91:cf:e1:cc:00:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AA:52:AD:25:36:7B:7A:06:09:B4:FC:08:0B:5B:7D:81:A9:4D:43
X509v3 Authority Key Identifier:
keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:54:b6:d3:55:f7:0d:b7:e0:3f:77:37:b3:60:0a:39:e1:a6:
88:8a:48:2b:14:e1:83:cc:9f:8f:4b:1e:16:78:86:b6:6b:f4:
a1:68:98:46:c2:e0:09:ce:41:0c:82:66:de:1a:30:66:c0:b4:
2a:70:42:84:46:4e:55:8d:93:f6:cb:09:65:d0:bb:46:30:f3:
1b:91:82:cf:aa:de:c8:80:09:64:29:de:5b:f5:b3:86:d8:08:
42:25:9d:1f:2e:f1:d8:c4:eb:59:9f:64:2d:5a:58:9a:1c:49:
00:1b:d6:b0:54:06:b2:03:f0:27:b9:3c:0c:87:33:e4:b0:0b:
ab:c9:a3:0e:8b:a6:2a:0a:ed:e6:47:b4:17:74:9c:d9:7d:8c:
52:e9:97:9f:1e:e1:f9:8c:3e:3c:d9:9d:df:92:b1:7e:15:6c:
bd:81:b1:51:4e:c9:1e:ad:f8:91:e0:bb:85:35:32:d1:c6:f5:
de:1b:d7:2b:29:6f:e1:45:5c:a9:e0:fa:4a:e1:3b:c8:f6:77:
8d:23:76:5a:53:5c:ef:63:65:3d:83:4d:79:1b:18:4b:89:23:
85:cc:f6:c8:be:bf:c5:0a:e0:14:b5:dd:40:08:83:48:9f:d4:
54:b3:ae:b8:f0:e8:36:a3:15:05:9f:bb:25:5b:4d:c2:d2:a4:
46:8d:0d:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBRTIxMTAvBgNVBAUTKDg0NUQ4OEUwQTIxNTE0NUYzNjdEOTMwNEJGM0Y3MUFF
RThFQjRDMkQwHhcNMjYwNDE5MDQ0NTQxWhcNMjYwNDI2MDQ0NTQxWjAYMRYwFAYD
VQQDEw02OWU0NWRmNi01MTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoNX3cGXAyyLDv8FQGX62tz0Q5fJggOzUHo7c4nP1yoQ9TdiCrFCRx8/Qlcdr
YG8ZpmZs7343sfZ2YR832dgljpPdrrVBNmehG9rWcFMcHyb36vYf6GGSMg799TUl
jXLWtquvqPZTg6KzkeKgr21Fr0k20n5svbw+39mCktYd83x9IncUt3jrHPQBH/Ab
uYeAWTylVYb12UEpVomXEE0MQqG3CMYSPj5QP+E+KhtIDER8uiQ8avzcxZjAyD15
5N4Ei89oe+CqYFrhm7bmW7J/lUBmgQV8L5mYnehEqDFq99suor5n+HK3wbp7QMJu
HTPo1jo1ZHAHlxNFkc/hzACy1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOmqUq0l
Nnt6Bgm0/AgLW32BqU1DMB8GA1UdIwQYMBaAFIRdiOCiFRRfNn2TBL8/ca7o60wt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFFMi8yNkE2RjQ0QzNC
QUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZGODJmWk1Fdno5eHJ1anJU
QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2hGMkk0S0lWRkY4MmZaTUV2ejl4cnVqclRDMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEFFMi8yNkE2RjQ0QzNCQUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZG
ODJmWk1Fdno5eHJ1anJUQzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQFS201X3DbfgP3c3s2AKOeGmiIpIKxThg8yfj0seFniGtmv0oWiYRsLgCc5B
DIJm3howZsC0KnBChEZOVY2T9ssJZdC7RjDzG5GCz6reyIAJZCneW/WzhtgIQiWd
Hy7x2MTrWZ9kLVpYmhxJABvWsFQGsgPwJ7k8DIcz5LALq8mjDoumKgrt5ke0F3Sc
2X2MUumXnx7h+Yw+PNmd35KxfhVsvYGxUU7JHq34keC7hTUy0cb13hvXKylv4UVc
qeD6SuE7yPZ3jSN2WlNc72NlPYNNeRsYS4kjhcz2yL6/xQrgFLXdQAiDSJ/UVLOu
uPDoNqMVBZ+7JVtNwtKkRo0NZA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:39 2026 by rpki-client