
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft
File: H4-gq_qNf39-fqANVuoBxwky5gc.mft (raw, json)
Hash identifier: 0PhN2HB9fOK5vXj6nBVj0YBTom+uLAUlJz0b0rnXgdM=
Subject key identifier: 7C:C2:25:10:40:11:0E:D2:3E:37:87:E0:F3:38:B0:98:59:A0:01:55
Authority key identifier: 1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07
Certificate issuer: /CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607
Certificate serial: 0F32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft
Manifest number: 10F4
Signing time: Mon 02 Mar 2026 17:35:06 +0000
Manifest this update: Mon 02 Mar 2026 17:35:05 +0000
Manifest next update: Mon 09 Mar 2026 17:35:05 +0000
Files and hashes: 1: H4-gq_qNf39-fqANVuoBxwky5gc.crl (hash: 6i/ZUa2yLt10zaaQ6WKOWOAH+YGfZ7k9UX8rhuZl+HA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl
rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3890 (0xf32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDD82, serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607
Validity
Not Before: Mar 2 17:35:05 2026 GMT
Not After : Mar 9 17:35:05 2026 GMT
Subject: CN=69a5ca4a-b002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:db:46:70:a8:88:bf:67:7b:77:28:4e:cb:
c0:19:93:e9:e9:2c:3e:4c:2d:c8:81:f0:94:fd:9d:
f8:a0:47:20:0d:0a:2e:a9:7d:43:24:a2:b5:c6:18:
70:99:7a:ce:be:7c:19:1d:07:ad:7b:a7:9d:b1:b7:
e4:af:d0:2a:b5:84:d7:4e:24:3c:08:80:34:6a:59:
aa:68:f9:d2:ae:e6:8c:03:86:62:b0:b2:e1:92:96:
15:38:1a:7c:d4:22:2f:80:80:ae:35:9e:1d:2a:2e:
93:a7:85:63:44:e9:71:8d:2d:39:56:7c:a3:eb:ea:
4a:fe:5e:55:9e:ce:95:48:8e:25:01:7e:f5:36:e6:
f5:59:86:88:17:b2:a5:54:c6:60:15:c9:c5:39:ca:
db:73:32:6b:40:87:ef:0d:04:1a:26:f2:00:d1:15:
ce:de:48:cd:cd:cc:1b:a5:87:be:f9:82:3f:98:ed:
3e:e7:cb:36:14:0b:72:3f:1f:2b:bf:1d:54:b4:76:
f3:63:a6:36:4a:87:ad:95:52:ab:0b:5c:71:85:b8:
a1:fc:26:34:7b:63:71:3f:e3:2c:1b:db:6b:3b:a4:
a5:0a:3a:ce:31:e1:44:e1:41:12:14:3d:fb:40:bc:
86:d9:47:a4:74:17:69:23:44:25:ab:67:52:5c:bd:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C2:25:10:40:11:0E:D2:3E:37:87:E0:F3:38:B0:98:59:A0:01:55
X509v3 Authority Key Identifier:
keyid:1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:71:f1:ce:b7:1c:bd:6a:59:f1:d3:6f:d5:0b:72:cc:c7:ae:
c5:2a:91:a8:96:23:7a:50:f2:45:5d:50:17:1d:a9:b5:e5:0f:
26:98:ce:64:66:fa:ba:91:d7:e1:ac:76:e0:c5:0d:00:1a:b3:
4a:4a:3b:b7:b8:bc:0c:81:40:24:bc:cf:61:3d:91:ed:2f:86:
7e:28:31:c8:82:91:01:c1:75:b7:78:fa:40:3e:79:09:0b:75:
ea:00:42:ea:65:95:58:f3:3c:dd:6c:63:ff:3e:d0:9a:21:ec:
90:a8:7c:a7:f0:dc:7f:5a:0e:e8:69:8f:97:67:10:bd:55:42:
f4:62:e5:16:37:1d:5d:59:1d:08:fb:f9:23:91:1e:24:dd:38:
ab:c6:6d:cb:22:93:a9:a7:6f:31:45:ff:52:dd:28:4f:69:b2:
1d:b3:94:b1:81:79:2b:d6:41:74:2c:69:aa:3b:f8:7b:4f:2c:
3a:1a:31:5d:b3:d3:ed:cd:df:e4:ce:92:1f:34:d7:84:24:a6:
c6:4e:58:56:68:9e:6a:4a:0d:f8:e7:b9:20:9f:29:58:50:2b:
87:92:36:dc:23:82:21:85:ec:a3:12:06:d0:37:0f:ae:cc:ba:
c2:a1:37:31:34:30:e3:ac:0e:6c:1a:d8:0f:79:e6:83:ec:01:
67:fe:c5:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkREODIxMTAvBgNVBAUTKDFGOEZBMEFCRkE4RDdGN0Y3RTdFQTAwRDU2RUEwMUM3
MDkzMkU2MDcwHhcNMjYwMzAyMTczNTA1WhcNMjYwMzA5MTczNTA1WjAYMRYwFAYD
VQQDEw02OWE1Y2E0YS1iMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn+jbRnCoiL9ne3coTsvAGZPp6Sw+TC3IgfCU/Z34oEcgDQouqX1DJKK1xhhw
mXrOvnwZHQete6edsbfkr9AqtYTXTiQ8CIA0almqaPnSruaMA4ZisLLhkpYVOBp8
1CIvgICuNZ4dKi6Tp4VjROlxjS05Vnyj6+pK/l5Vns6VSI4lAX71Nub1WYaIF7Kl
VMZgFcnFOcrbczJrQIfvDQQaJvIA0RXO3kjNzcwbpYe++YI/mO0+58s2FAtyPx8r
vx1UtHbzY6Y2SoetlVKrC1xxhbih/CY0e2NxP+MsG9trO6SlCjrOMeFE4UESFD37
QLyG2UekdBdpI0Qlq2dSXL2RMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHzCJRBA
EQ7SPjeH4PM4sJhZoAFVMB8GA1UdIwQYMBaAFB+PoKv6jX9/fn6gDVbqAccJMuYH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx
RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYzOS1mcUFOVnVvQnh3a3k1
Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g0LWdxX3FOZjM5LWZxQU5WdW9CeHdreTVnYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYz
OS1mcUFOVnVvQnh3a3k1Z2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnXHxzrccvWpZ8dNv1QtyzMeuxSqRqJYjelDyRV1QFx2pteUPJpjOZGb6upHX
4ax24MUNABqzSko7t7i8DIFAJLzPYT2R7S+GfigxyIKRAcF1t3j6QD55CQt16gBC
6mWVWPM83Wxj/z7QmiHskKh8p/Dcf1oO6GmPl2cQvVVC9GLlFjcdXVkdCPv5I5Ee
JN04q8ZtyyKTqadvMUX/Ut0oT2myHbOUsYF5K9ZBdCxpqjv4e08sOhoxXbPT7c3f
5M6SHzTXhCSmxk5YVmieakoN+Oe5IJ8pWFArh5I23COCIYXsoxIG0DcPrsy6wqE3
MTQw46wObBrYD3nmg+wBZ/7FBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:02:05 2026 by rpki-client