
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
File: h7HuPp7irRoRPyeipU4sC41a-zQ.mft (raw, json)
Hash identifier: ATdRcHxE14JswmcI4NfIBl+83jlJFPIxnTuNmvbBN0c=
Subject key identifier: 00:4D:6A:5E:FA:88:39:FA:B7:D6:5F:B5:5D:02:D4:84:7C:7A:9B:24
Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
Certificate issuer: /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Certificate serial: 0165
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
Manifest number: 015C
Signing time: Sat 13 Jun 2026 05:02:13 +0000
Manifest this update: Sat 13 Jun 2026 05:02:13 +0000
Manifest next update: Sat 20 Jun 2026 05:02:13 +0000
Files and hashes: 1: h7HuPp7irRoRPyeipU4sC41a-zQ.crl (hash: GvN+aUWiP0EBme7qzqvfnz7AVrXXoKKDKDxJbRp6La4=)
2: 56EC0F5EABD411F0ADCDD73CC4F9AE02.roa (hash: LRGLmwGa2a/I5gvOrv+UPiIF3N2WlDmpx8kIsDZcKzI=)
3: 2FAD450250E411F0A6B4892AC4F9AE02.roa (hash: 5FVZeeMmHHgD5LWgKUCAHIiyRLhCr4xloYA6n+HE21g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl
rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF9F5, serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Validity
Not Before: Jun 13 05:02:13 2026 GMT
Not After : Jun 20 05:02:13 2026 GMT
Subject: CN=6a2ce455-7b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:cf:a6:4a:4a:87:97:54:91:80:16:d1:b9:
d0:54:9b:b7:c5:69:7b:3f:cd:77:18:fd:ed:df:51:
3b:46:9d:09:2a:a5:a9:09:54:8d:c1:d9:da:1f:2a:
8a:b5:90:01:e9:ac:17:d5:23:59:26:9f:32:ed:d4:
0b:75:78:56:8f:68:76:a2:f0:79:db:9e:c2:f7:54:
bd:c9:e0:07:73:10:38:c0:c3:0b:b6:91:9a:bf:22:
07:af:bd:88:7f:af:eb:d4:19:aa:ca:5a:24:12:82:
18:54:bf:94:af:98:9d:48:d3:99:d6:d6:35:9b:26:
25:c0:a3:90:27:96:f1:8d:b4:8e:42:d0:d1:81:46:
2b:af:38:62:15:30:de:12:17:71:b4:9a:d4:e1:4d:
cd:db:19:9b:cf:0f:1c:38:aa:38:08:80:51:47:c3:
a1:90:69:34:8f:38:cc:07:6e:f7:7d:36:f5:3a:af:
fd:9d:66:10:cb:79:ab:22:35:6d:fb:59:09:2b:42:
50:55:1b:f5:b9:2e:7f:77:58:2c:bb:52:ad:e8:ee:
33:94:e0:92:e0:fc:b0:88:de:21:b8:8a:ab:d9:11:
d6:3a:8e:7c:66:07:a3:0b:d1:23:03:b9:e5:64:cf:
cd:47:0c:91:c4:c7:34:8f:83:de:d4:6e:29:8d:df:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4D:6A:5E:FA:88:39:FA:B7:D6:5F:B5:5D:02:D4:84:7C:7A:9B:24
X509v3 Authority Key Identifier:
keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:4e:4b:46:27:cd:65:d4:2b:67:29:88:ca:7b:28:7d:17:2b:
e9:5d:94:0f:ab:42:7f:43:ea:35:7a:c0:60:c9:5c:9c:f3:5d:
e1:6b:c7:39:d2:e8:34:bd:2d:67:85:c7:39:3b:9f:bb:a5:30:
3c:c5:f8:61:3e:c9:c7:15:c6:90:3a:66:78:cf:08:bd:e7:1e:
d7:c6:ea:b7:b8:d0:f3:9f:08:3d:86:c0:3b:b2:83:c3:50:04:
7b:ed:ef:25:17:35:6b:27:06:64:7e:5e:d3:4b:02:a0:09:b7:
b2:54:64:30:fe:e9:22:82:94:c1:6e:72:13:71:1e:be:ea:3c:
d0:a8:d2:c9:64:3a:e5:dd:e4:09:d5:2f:bf:88:36:f0:b8:e1:
fe:83:34:d8:19:9d:cd:e6:a5:dd:a8:13:4d:3c:78:0c:4a:3b:
9d:90:23:20:8a:e1:e4:93:c6:54:b9:62:9f:61:ac:92:68:68:
40:9e:d3:d9:89:8c:2d:50:ce:30:1b:ff:b9:ae:b4:53:a1:a3:
ca:3f:5b:ef:6d:43:a0:98:19:82:d1:26:84:41:e6:70:46:54:
de:f8:33:26:d2:59:fe:d5:e7:65:d8:bb:46:cc:e2:c5:9b:b0:
d0:b5:d7:d3:d4:3b:dc:23:02:45:db:3e:ca:70:8a:8c:98:a6:
3b:f7:f9:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Y5RjUxMTAvBgNVBAUTKDg3QjFFRTNFOUVFMkFEMUExMTNGMjdBMkE1NEUyQzBC
OEQ1QUZCMzQwHhcNMjYwNjEzMDUwMjEzWhcNMjYwNjIwMDUwMjEzWjAYMRYwFAYD
VQQDEw02YTJjZTQ1NS03YjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnaPPpkpKh5dUkYAW0bnQVJu3xWl7P813GP3t31E7Rp0JKqWpCVSNwdnaHyqK
tZAB6awX1SNZJp8y7dQLdXhWj2h2ovB5257C91S9yeAHcxA4wMMLtpGavyIHr72I
f6/r1BmqylokEoIYVL+Ur5idSNOZ1tY1myYlwKOQJ5bxjbSOQtDRgUYrrzhiFTDe
EhdxtJrU4U3N2xmbzw8cOKo4CIBRR8OhkGk0jzjMB273fTb1Oq/9nWYQy3mrIjVt
+1kJK0JQVRv1uS5/d1gsu1Kt6O4zlOCS4PywiN4huIqr2RHWOo58ZgejC9EjA7nl
ZM/NRwyRxMc0j4Pe1G4pjd9+twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABNal76
iDn6t9ZftV0C1IR8epskMB8GA1UdIwQYMBaAFIex7j6e4q0aET8noqVOLAuNWvs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlGNS84QjkyNkQyQTVC
OUUxMUVGOEJGOTE3NUJDNEY5QUUwMi9oN0h1UHA3aXJSb1JQeWVpcFU0c0M0MWEt
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g3SHVQcDdpclJvUlB5ZWlwVTRzQzQxYS16US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RjlGNS84QjkyNkQyQTVCOUUxMUVGOEJGOTE3NUJDNEY5QUUwMi9oN0h1UHA3aXJS
b1JQeWVpcFU0c0M0MWEtelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk05LRifNZdQrZymIynsofRcr6V2UD6tCf0PqNXrAYMlcnPNd4WvHOdLoNL0t
Z4XHOTufu6UwPMX4YT7JxxXGkDpmeM8Ivece18bqt7jQ858IPYbAO7KDw1AEe+3v
JRc1aycGZH5e00sCoAm3slRkMP7pIoKUwW5yE3Eevuo80KjSyWQ65d3kCdUvv4g2
8Ljh/oM02Bmdzeal3agTTTx4DEo7nZAjIIrh5JPGVLlin2GskmhoQJ7T2YmMLVDO
MBv/ua60U6Gjyj9b721DoJgZgtEmhEHmcEZU3vgzJtJZ/tXnZdi7RszixZuw0LXX
09Q73CMCRds+ynCKjJimO/f5eg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:47 2026 by rpki-client