
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
File: Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json)
Hash identifier: UGtL6SPu0hlyqRhQxpNavF95CRw6/EvnsSfUt65DJXw=
Subject key identifier: EC:7B:A4:33:6A:09:18:A7:AE:7A:EF:F5:18:EB:DC:65:40:12:6C:B5
Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
Certificate issuer: /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Certificate serial: 0764
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
Manifest number: 075E
Signing time: Mon 02 Mar 2026 00:07:30 +0000
Manifest this update: Mon 02 Mar 2026 00:07:29 +0000
Manifest next update: Mon 09 Mar 2026 00:07:29 +0000
Files and hashes: 1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: wJfPZSQ+m8nc3avJFBW6CdGAdQOH1iWKyWPBpruBkX8=)
2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: FdR4cJFggt3ghkSLs8FW6NUcy7CkfyfswvELLmGkH5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1892 (0x764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8D, serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Validity
Not Before: Mar 2 00:07:29 2026 GMT
Not After : Mar 9 00:07:29 2026 GMT
Subject: CN=69a4d4c2-8cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:d0:b2:33:d6:24:2a:5b:28:ec:47:ed:9f:
c5:4a:38:f7:bd:f8:ae:65:8d:82:67:97:a9:c6:ba:
30:e3:10:9b:25:0f:d9:41:0c:eb:96:f4:e6:1a:00:
3e:44:ad:cd:63:98:a5:54:de:dc:05:6c:5f:66:bd:
47:41:5b:86:e0:e5:b4:87:db:48:3a:19:7c:f3:ac:
1f:cc:8d:7c:af:81:b0:9a:7a:dd:74:ba:dd:87:20:
d1:d7:b2:4b:9b:d2:e9:28:c4:8c:83:d7:5c:ed:03:
64:6d:4b:0b:7e:08:fd:c4:93:f6:3a:d9:1d:79:78:
4b:ed:fa:00:6f:de:ac:9e:db:e0:52:9d:52:77:55:
cc:33:b0:b9:91:61:e0:11:8f:ed:05:f8:55:0c:9e:
5b:6b:8d:a3:b5:d1:5c:8d:67:75:ef:2d:73:1f:be:
73:c6:4f:9c:d9:c9:39:c1:ce:fe:52:24:da:97:1c:
6f:48:c5:eb:bf:49:e3:4b:6e:07:f9:75:d4:4f:5e:
5e:04:37:fb:1b:a0:26:c7:30:1d:9a:bf:5e:87:53:
c7:d0:12:4c:ee:08:cb:13:85:42:c8:ff:95:ee:aa:
bd:92:4b:f3:12:77:a3:0d:9b:e7:cb:6f:c5:08:79:
b0:3b:25:57:0b:fa:71:1e:d4:9d:63:21:37:ca:db:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7B:A4:33:6A:09:18:A7:AE:7A:EF:F5:18:EB:DC:65:40:12:6C:B5
X509v3 Authority Key Identifier:
keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ae:11:4c:e5:e5:a2:d8:32:55:21:ea:38:71:5a:a2:66:31:
90:9c:47:6d:eb:a8:a6:bf:33:fe:e6:79:ed:df:19:e2:6a:c4:
03:33:40:eb:5d:e3:46:05:a9:7d:44:a6:d6:f8:53:7e:19:61:
49:09:b3:d6:d7:21:03:12:30:c7:0d:79:bf:68:d6:1e:93:4d:
88:d8:56:2d:36:8d:c7:b8:11:24:d1:bd:7e:4d:e3:37:e0:61:
56:10:60:36:37:fe:4a:6b:8a:88:91:89:f7:7c:dc:3c:6d:34:
d5:2a:12:9b:55:a0:f8:61:a5:32:f4:b5:6b:e0:ac:82:2d:d2:
cc:cc:16:75:91:b2:8f:d8:aa:1d:01:de:9e:31:ad:a0:ab:63:
3c:22:26:05:c7:b8:52:1a:51:2c:c0:d0:d8:df:fe:77:24:a1:
db:21:21:01:0c:10:cf:2f:4d:fc:a9:e6:2a:14:79:5f:aa:9c:
f8:f2:cb:14:71:04:5a:06:41:43:cf:70:5d:2c:ca:fd:ee:99:
92:b0:af:3d:01:56:0c:c8:21:3c:79:c9:4a:66:86:b5:e1:81:
e6:14:9e:49:e8:d7:28:71:4e:ce:fb:c6:fd:39:15:e6:1c:07:
22:b0:dc:8a:7d:87:e1:69:00:84:fe:ff:6c:d7:b8:92:ec:1a:
01:57:93:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZBOEQxMTAvBgNVBAUTKDFERUJCNzM3MUFCOTdCQjlGM0E5MDZFQjA3RDU5MUM5
Q0YzODhENUQwHhcNMjYwMzAyMDAwNzI5WhcNMjYwMzA5MDAwNzI5WjAYMRYwFAYD
VQQDEw02OWE0ZDRjMi04Y2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHjQsjPWJCpbKOxH7Z/FSjj3vfiuZY2CZ5epxrow4xCbJQ/ZQQzrlvTmGgA+
RK3NY5ilVN7cBWxfZr1HQVuG4OW0h9tIOhl886wfzI18r4GwmnrddLrdhyDR17JL
m9LpKMSMg9dc7QNkbUsLfgj9xJP2OtkdeXhL7foAb96sntvgUp1Sd1XMM7C5kWHg
EY/tBfhVDJ5ba42jtdFcjWd17y1zH75zxk+c2ck5wc7+UiTalxxvSMXrv0njS24H
+XXUT15eBDf7G6AmxzAdmr9eh1PH0BJM7gjLE4VCyP+V7qq9kkvzEnejDZvny2/F
CHmwOyVXC/pxHtSdYyE3ytt8rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOx7pDNq
CRinrnrv9Rjr3GVAEmy1MB8GA1UdIwQYMBaAFB3rtzcauXu586kG6wfVkcnPOI1d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RC81NkZFRkY4MDU2
NEIxMUVCOEZFOUI0MjFDNEY5QUUwMi9IZXUzTnhxNWU3bnpxUWJyQjlXUnljODRq
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hldTNOeHE1ZTduenFRYnJCOVdSeWM4NGpWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkE4RC81NkZFRkY4MDU2NEIxMUVCOEZFOUI0MjFDNEY5QUUwMi9IZXUzTnhxNWU3
bnpxUWJyQjlXUnljODRqVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArK4RTOXlotgyVSHqOHFaomYxkJxHbeuopr8z/uZ57d8Z4mrEAzNA613jRgWp
fUSm1vhTfhlhSQmz1tchAxIwxw15v2jWHpNNiNhWLTaNx7gRJNG9fk3jN+BhVhBg
Njf+SmuKiJGJ93zcPG001SoSm1Wg+GGlMvS1a+Csgi3SzMwWdZGyj9iqHQHenjGt
oKtjPCImBce4UhpRLMDQ2N/+dySh2yEhAQwQzy9N/KnmKhR5X6qc+PLLFHEEWgZB
Q89wXSzK/e6ZkrCvPQFWDMghPHnJSmaGteGB5hSeSejXKHFOzvvG/TkV5hwHIrDc
in2H4WkAhP7/bNe4kuwaAVeTEw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:58 2026 by rpki-client