
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
File: HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json)
Hash identifier: JK8s7ZfZFZ78lS8dr9eX7wRlKk+gla6H0SdW4mYiotU=
Subject key identifier: BE:2B:82:29:5C:D1:7B:F9:8B:11:42:DD:ED:17:FD:B1:CF:C4:9F:8E
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial: 0211
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
Manifest number: 01F9
Signing time: Fri 17 Apr 2026 03:04:27 +0000
Manifest this update: Fri 17 Apr 2026 03:04:27 +0000
Manifest next update: Fri 24 Apr 2026 03:04:27 +0000
Files and hashes: 1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: up7bmumjvzJshNE3WyRTDLOZXH7Xxj6sUbUjAHRCjxM=)
2: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: RQ/EfLMrrJ/X3PS3AL1VNJyNJGsjiJ0HkUJPHHuU2ZI=)
3: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: +rjbca/NG9q7zWTrWpjMJftRcPfM//W/HUIpnTX4nPE=)
4: F9F53948599011EEB54F7158C4F9AE02.roa (hash: GXFMT6PzwPtBUSZwV4Os9TF+cE8bPf2hVfP0jiPGj7s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Validity
Not Before: Apr 17 03:04:27 2026 GMT
Not After : Apr 24 03:04:27 2026 GMT
Subject: CN=69e1a33b-0c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bc:a0:5a:91:14:9b:ac:3d:e0:95:a1:bb:68:
89:0c:fe:82:57:1a:e0:a1:e2:3a:3c:9b:6c:d0:7a:
d0:5a:ca:99:9d:77:0e:d9:03:8f:ce:8a:67:6d:1c:
5d:14:bb:4a:77:52:83:ac:69:b8:e0:2a:1e:ed:a3:
26:d2:14:f9:e4:8f:d3:d7:d5:20:ba:58:b2:04:d6:
08:d4:f3:0e:43:60:d5:6f:b2:37:4b:61:8f:64:39:
81:e6:66:2a:04:fd:57:79:7d:31:90:51:30:28:c2:
fc:44:28:79:43:1f:d2:d4:d7:8c:e5:8d:8c:1c:22:
26:38:5f:b2:2e:f3:4a:35:9d:a8:d4:60:db:c2:ed:
14:79:eb:d5:7f:ba:2f:20:e1:69:e7:ac:88:82:c1:
92:71:0e:9a:3c:41:78:b4:f3:4e:11:d6:e7:4e:d1:
ff:8b:88:73:f2:79:d4:62:ab:45:92:1f:dd:5a:8e:
f4:e1:dd:38:57:8c:62:ea:65:93:6b:1d:8f:be:6d:
52:19:b7:56:c9:f1:89:70:49:31:e7:05:b2:65:dd:
40:34:66:de:23:21:13:3c:52:92:d2:ce:ad:03:c8:
c6:43:6f:c0:e3:01:0c:26:b1:1b:9a:0f:c9:46:6d:
74:f4:06:c1:5e:09:58:7f:45:3d:99:d8:b7:94:25:
30:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2B:82:29:5C:D1:7B:F9:8B:11:42:DD:ED:17:FD:B1:CF:C4:9F:8E
X509v3 Authority Key Identifier:
keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:29:55:86:1a:de:70:c1:9c:c3:f4:ff:31:c7:8d:ed:d0:61:
24:d7:c2:f5:bd:40:44:c0:74:ad:66:f9:19:bc:85:63:2f:6b:
e4:ff:4b:0b:78:39:83:b2:91:e0:58:fb:26:20:f3:fd:76:29:
45:ea:c3:25:8a:c1:51:cd:1e:45:92:20:8c:bb:e7:de:83:6c:
ec:a3:cc:8e:50:b7:85:5b:83:3d:28:99:5e:76:5c:89:c2:19:
55:3b:2a:fb:fa:2f:b0:27:42:44:90:e4:15:49:35:e1:c7:37:
c8:2e:cb:7c:57:f4:bf:ed:2c:34:76:0a:65:6a:50:fb:a1:1d:
db:16:fb:d6:63:50:8c:1d:a3:b2:e8:fc:17:0c:c2:cb:7c:63:
7b:e8:4b:5e:53:21:3e:7f:31:a6:77:fb:79:78:66:29:c2:de:
33:5a:f9:6c:14:db:75:9b:99:d8:60:c4:3c:89:4a:e7:49:78:
96:6e:37:6e:c2:79:61:c4:48:2d:66:7a:13:95:e5:ec:78:3b:
dd:7a:36:0d:e6:f0:17:e8:8d:7c:07:e4:a1:48:83:64:51:9c:
fc:3e:e5:dd:e7:e2:65:0b:c4:a3:a5:df:0c:80:cc:3f:9d:eb:
90:24:48:10:90:32:ff:3e:35:03:49:c5:90:3e:03:c8:56:ba:
a0:25:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:37 2026 by rpki-client