
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json)
Hash identifier: JAJLPM01cFziOmZ1hU+5ayZj+j2LCGHkerfLWGDjMso=
Subject key identifier: D9:63:39:4E:45:6C:85:02:75:3D:96:70:79:E9:5F:3A:89:0F:C8:DE
Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F
Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F
Certificate serial: 0281
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
Manifest number: 0273
Signing time: Wed 29 Jul 2026 03:08:19 +0000
Manifest this update: Wed 29 Jul 2026 03:08:19 +0000
Manifest next update: Wed 05 Aug 2026 03:08:19 +0000
Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: fWy5C31SsEBjERT/D7gFf7JIewzgEv8blPCFubh0mm4=)
2: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: uPSJvajAQINjQlYTF7zaoX95KpMnomn9ZGEL6XXGiq0=)
3: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: yD5FYCPErZgPY0yX40dpogtlEWrDeZjOT8LtPpUMuck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl
rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 641 (0x281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F
Validity
Not Before: Jul 29 03:08:19 2026 GMT
Not After : Aug 5 03:08:19 2026 GMT
Subject: CN=6a696ea3-7026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dc:71:8f:5d:59:45:dc:8d:6e:47:ab:5a:26:
a2:16:b8:8b:70:b9:61:16:07:8f:c8:81:3a:6a:8a:
94:fa:d3:81:fe:3d:cd:71:36:05:4c:74:e7:6e:d2:
90:84:fd:21:35:02:5f:5e:d7:e6:20:3c:6c:0e:c2:
73:ad:ca:76:12:11:dc:c2:fc:f4:c0:47:71:a2:dd:
31:8f:05:ad:97:17:1f:4e:b1:b7:3f:4c:23:d8:52:
c8:b7:c7:bc:82:56:92:a4:1c:18:5b:61:5f:28:a7:
10:5a:4b:a6:53:05:1c:9e:5d:bc:1e:bd:0a:91:91:
38:5c:e0:d7:ed:ab:bf:0b:0e:bc:9f:50:e0:07:61:
59:e3:e0:0c:95:17:97:a8:9d:6e:23:35:53:ad:d4:
97:0d:7c:81:6f:10:b0:25:ea:81:bc:ef:c9:a9:dc:
74:d3:10:fd:01:09:b2:27:88:f1:a9:92:55:8c:98:
da:b6:1d:0e:51:5f:03:89:ff:c9:5a:83:22:f3:4f:
76:27:ac:62:19:f5:e2:be:02:7c:98:61:5f:d1:98:
cc:9f:d7:5e:7a:2f:82:53:24:cb:a3:2a:09:53:56:
d6:60:91:c8:f0:82:11:1d:bf:12:66:cb:ff:c9:23:
7f:03:bd:bf:57:e4:a2:35:db:6f:d1:97:52:a0:b8:
ab:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:63:39:4E:45:6C:85:02:75:3D:96:70:79:E9:5F:3A:89:0F:C8:DE
X509v3 Authority Key Identifier:
keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:01:7a:70:a7:86:fc:2a:e3:1a:d3:3b:74:22:dd:f8:58:2e:
13:8f:ae:51:4b:04:ad:c1:80:d3:42:87:25:71:5b:03:52:f6:
2a:8a:66:d3:3e:fc:56:10:27:67:73:54:52:27:78:b9:47:89:
c1:f4:02:ef:f2:ff:22:73:ff:29:b7:44:1e:83:d9:be:5c:aa:
78:fe:fc:ec:1d:7b:3c:7b:63:ce:17:5b:2f:e6:b6:cf:4f:52:
a3:c3:4e:bc:64:7b:2b:80:1a:40:7d:18:63:2c:4d:13:fb:42:
1f:41:ff:ab:98:53:f2:de:cd:f2:4a:9f:42:d9:06:8f:38:30:
6c:93:c0:e3:51:53:3c:c9:6f:65:f5:eb:94:d5:64:58:60:16:
ad:3c:e8:11:5d:2b:e3:1f:da:d2:cd:69:b3:58:42:3a:79:26:
0e:72:1a:06:52:e1:de:f5:5c:97:58:20:c9:80:70:d9:c4:0b:
86:d4:91:59:d8:c8:3c:b4:71:c4:e8:4c:35:c0:66:36:40:f9:
cc:dd:10:12:e4:a7:f3:7e:62:43:68:47:fc:74:59:98:da:ac:
e5:74:52:2a:13:b1:ca:ba:36:55:32:b2:8f:cc:91:7a:60:35:
dd:f2:2d:b6:ea:d5:32:c7:19:a1:ff:b3:71:d4:e8:5c:a5:a0:
af:2e:8c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:39 2026 by rpki-client