
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
File: HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json)
Hash identifier: pNWScTIip2CRKjkF30G/Tne/NV6KBCKU8NCLFcTMscI=
Subject key identifier: 08:09:63:26:CD:0C:8D:29:10:2B:27:C5:05:71:D3:71:34:8F:9A:B0
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial: 026B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
Manifest number: 024F
Signing time: Sat 03 Oct 2026 03:06:51 +0000
Manifest this update: Sat 03 Oct 2026 03:06:50 +0000
Manifest next update: Sat 10 Oct 2026 03:06:50 +0000
Files and hashes: 1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: TlUazsW2PK8aKvbTHJF1JcNO06eqqZ2SD+V8ryE1NlY=)
2: F9F53948599011EEB54F7158C4F9AE02.roa (hash: 53jUno38hR5QrdEYJgj5E34tWdnvnUXHFCIqAyPF2Mk=)
3: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: o+6ZDuPIrO5DnJqINIScEMsH1AtzfYFLtkRLVBpnBNo=)
4: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: OXtGQAmVv6/zcLdy3u3i2oyqHV0zpKuoz/3nmtWN4+c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 619 (0x26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Validity
Not Before: Oct 3 03:06:50 2026 GMT
Not After : Oct 10 03:06:50 2026 GMT
Subject: CN=6ac0714a-ef70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:91:bd:f6:27:e5:10:b8:6d:d3:53:2d:16:
7b:07:54:a6:ce:9c:1a:5a:44:a9:a4:c4:96:02:fc:
03:ff:99:3b:80:bb:5e:1e:0c:bd:02:e6:6d:8c:18:
7f:f5:b4:be:85:53:a2:ea:ff:ad:39:df:b0:a7:0a:
42:63:bd:f7:a5:7d:d3:45:30:4e:bf:73:a2:f7:49:
8e:89:a8:e9:d7:b2:79:01:3f:96:00:5b:51:55:a9:
bf:07:45:1e:74:8d:8b:82:22:0e:82:e7:42:98:89:
6d:7e:8e:61:02:43:96:c3:21:50:58:c4:bc:06:f5:
93:d6:a7:23:db:ad:32:d0:34:bb:c6:ca:0f:d2:8b:
d0:ee:cf:92:31:0e:8b:29:8f:0d:0f:1a:bf:e8:27:
cc:57:27:a7:d0:44:ff:bc:2c:ad:29:82:4e:b4:91:
e1:a2:50:4c:63:fa:da:a9:ac:b4:33:5d:48:ae:be:
49:4e:d1:17:1a:43:1c:42:52:e0:a6:ba:e8:2e:ad:
a1:e9:5a:19:cc:66:dd:4e:af:95:02:c6:a3:fd:e3:
29:9c:71:fd:a9:b1:44:79:5c:d8:17:50:ba:b9:1c:
3d:59:65:49:2b:c4:98:4e:75:93:fe:fa:75:dc:5d:
1e:5c:b7:a4:71:95:a1:e8:26:47:48:f5:6b:d5:c5:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:09:63:26:CD:0C:8D:29:10:2B:27:C5:05:71:D3:71:34:8F:9A:B0
X509v3 Authority Key Identifier:
keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8c:ec:13:a2:17:fd:1c:37:aa:45:00:d3:52:59:db:3c:31:
91:25:f4:2f:f0:16:54:89:b5:71:9f:b4:86:10:15:0f:5f:34:
51:82:35:ea:ac:4a:00:26:52:b6:5c:05:7f:f6:ac:ce:13:51:
3b:bc:89:13:ce:6d:73:60:a9:8e:97:1b:cf:3b:cd:f4:c4:84:
e9:f1:23:73:e1:5c:30:b1:69:a6:22:1b:51:9d:85:6f:79:c0:
aa:cd:41:27:7c:49:92:32:5b:02:d3:18:f2:c4:91:3b:f7:ea:
26:20:15:db:62:b9:7d:3c:32:ea:ff:8c:3c:dc:17:07:7d:e3:
a6:4f:87:a3:b8:79:f1:b7:92:56:83:1c:f1:6c:2b:6d:48:1d:
ca:8c:28:9c:00:01:34:69:69:d4:bf:ca:15:69:b6:e0:99:08:
89:0b:fb:80:f3:b1:ce:af:3c:36:8f:de:c2:6c:0c:56:00:ba:
0f:40:5d:3f:38:8b:91:c2:24:ef:21:13:06:14:27:fc:43:00:
4b:9e:5a:55:17:50:78:70:89:4d:35:dd:a9:b6:68:5d:f0:56:
82:f0:af:38:f3:b5:63:8f:d8:38:da:bb:50:1a:22:29:de:45:
23:e3:9a:2a:da:ad:f8:05:29:02:75:78:ef:b2:c5:d8:64:1f:
d2:62:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:50:37 2026 by rpki-client