
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
File: hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft (raw, json)
Hash identifier: 7W+s2mNkRFheXo5olfOqaP1OrUOLMAfV/QP0wx1pLzg=
Subject key identifier: A1:3E:9C:AA:84:1C:BC:86:69:28:68:E0:96:F4:61:D9:5C:23:00:A3
Authority key identifier: 86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65
Certificate issuer: /CN=A919A8BE/serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565
Certificate serial: 1041
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
Manifest number: 1029
Signing time: Thu 16 Apr 2026 17:22:02 +0000
Manifest this update: Thu 16 Apr 2026 17:22:01 +0000
Manifest next update: Thu 23 Apr 2026 17:22:01 +0000
Files and hashes: 1: hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl (hash: QrBtuuZ/d9wQ4RZV9qmpwY23mx5SlHJ9BoV1ZOExUQU=)
2: 28DA447C289B11EAA1EA9B53C4F9AE02.roa (hash: +QsBublCSi/Ra5CJk1uOnK17kaA8DRCpH5g6/7+9Qrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl
rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4161 (0x1041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A8BE, serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565
Validity
Not Before: Apr 16 17:22:01 2026 GMT
Not After : Apr 23 17:22:01 2026 GMT
Subject: CN=69e11aba-5160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:3b:3d:9b:7f:8b:c8:f8:49:33:ac:3c:31:
78:a3:05:ce:ee:67:eb:f2:38:eb:b5:a3:6f:6f:fa:
9b:78:0b:db:db:f5:92:4d:b4:b6:b8:45:2d:e6:54:
ec:0a:78:a0:ff:d4:fb:2e:ff:72:f7:df:68:07:b1:
3d:fd:5f:d0:79:fe:c0:3e:91:84:78:59:29:50:b0:
3b:60:fd:a9:0f:8b:6b:c1:13:05:20:fa:ad:12:34:
63:0f:29:05:47:9e:e4:e8:6d:cf:1e:f0:29:f8:6d:
cb:f2:7b:96:3d:78:0f:17:e6:70:55:3f:cf:b2:f7:
de:58:c4:bd:fc:88:cd:26:2e:1f:72:2d:93:c7:27:
f2:ca:f1:df:c1:e8:93:77:15:24:c6:76:85:81:f3:
53:38:0d:aa:db:2c:f1:ff:b3:68:f1:a4:cc:a7:9b:
c6:79:fb:7d:c1:14:73:7b:ab:ea:38:b3:ac:51:43:
eb:65:af:33:ef:01:1f:c2:be:51:5b:9e:cf:c1:fe:
8a:91:b3:5e:d9:1b:2e:92:fe:a4:21:f7:0f:6b:23:
a5:95:d4:99:e1:f8:07:e6:ef:29:86:7e:80:ec:86:
b8:25:d8:f4:9f:db:2b:4d:3c:41:05:d5:1f:eb:fe:
40:30:1c:fb:7e:f5:3e:08:08:a5:68:32:3c:78:75:
37:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3E:9C:AA:84:1C:BC:86:69:28:68:E0:96:F4:61:D9:5C:23:00:A3
X509v3 Authority Key Identifier:
keyid:86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:60:8f:86:a8:d1:e0:f1:19:52:0c:31:a7:d7:8e:24:cb:c3:
2c:22:70:3a:4b:4d:30:5c:19:21:ce:eb:dc:20:f1:95:47:37:
75:2a:19:4c:4c:97:e8:e2:9f:30:90:0b:7c:d4:8f:13:42:86:
c3:92:86:ce:c3:61:45:3e:95:bc:56:2d:cb:35:90:93:b9:12:
e2:6d:b2:ef:ef:be:1b:48:d4:25:d7:68:49:24:35:3d:c9:6d:
14:ae:8a:ef:4b:b5:ba:35:d9:fe:b5:fc:86:65:ad:42:a9:a7:
0c:a6:31:4c:42:f7:3e:0e:40:c5:5d:41:ba:4c:61:bf:22:81:
4d:0e:0a:b4:1c:10:0a:84:99:50:30:1b:d9:ad:b6:1c:19:65:
ba:aa:17:d6:22:01:d4:c1:f3:9e:21:0a:39:af:62:32:64:aa:
65:62:29:ed:51:9b:72:f8:e6:14:2c:50:d0:4d:ba:73:aa:92:
38:e8:94:ba:e6:59:7e:57:96:b6:a2:12:7a:42:13:16:d2:d4:
44:ac:a1:bf:54:7b:cb:91:82:ba:69:c3:ed:04:04:8e:cb:ad:
0b:af:68:5d:66:02:e8:0d:d3:40:7d:28:a5:0a:90:c6:f8:32:
f6:03:65:41:88:78:4b:90:17:0c:bf:df:4d:a7:93:0f:b7:1a:
7a:a8:99:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE4QkUxMTAvBgNVBAUTKDg2RjJFQkI0QzFFMkU5MEFEOTAwN0M0MjAzNjc2NjI1
OEQ1NDg1NjUwHhcNMjYwNDE2MTcyMjAxWhcNMjYwNDIzMTcyMjAxWjAYMRYwFAYD
VQQDEw02OWUxMWFiYS01MTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuhk7PZt/i8j4STOsPDF4owXO7mfr8jjrtaNvb/qbeAvb2/WSTbS2uEUt5lTs
Cnig/9T7Lv9y999oB7E9/V/Qef7APpGEeFkpULA7YP2pD4trwRMFIPqtEjRjDykF
R57k6G3PHvAp+G3L8nuWPXgPF+ZwVT/PsvfeWMS9/IjNJi4fci2TxyfyyvHfweiT
dxUkxnaFgfNTOA2q2yzx/7No8aTMp5vGeft9wRRze6vqOLOsUUPrZa8z7wEfwr5R
W57Pwf6KkbNe2Rsukv6kIfcPayOlldSZ4fgH5u8phn6A7Ia4Jdj0n9srTTxBBdUf
6/5AMBz7fvU+CAilaDI8eHU3RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKE+nKqE
HLyGaSho4Jb0YdlcIwCjMB8GA1UdIwQYMBaAFIby67TB4ukK2QB8QgNnZiWNVIVl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QThCRS85MDE5RDEyMDY0
MDExMUU5OEVGNkRDNkZDNEY5QUUwMi9odkxydE1IaTZRclpBSHhDQTJkbUpZMVVo
V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h2THJ0TUhpNlFyWkFIeENBMmRtSlkxVWhXVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QThCRS85MDE5RDEyMDY0MDExMUU5OEVGNkRDNkZDNEY5QUUwMi9odkxydE1IaTZR
clpBSHhDQTJkbUpZMVVoV1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASmCPhqjR4PEZUgwxp9eOJMvDLCJwOktNMFwZIc7r3CDxlUc3dSoZTEyX6OKf
MJALfNSPE0KGw5KGzsNhRT6VvFYtyzWQk7kS4m2y7+++G0jUJddoSSQ1PcltFK6K
70u1ujXZ/rX8hmWtQqmnDKYxTEL3Pg5AxV1BukxhvyKBTQ4KtBwQCoSZUDAb2a22
HBlluqoX1iIB1MHzniEKOa9iMmSqZWIp7VGbcvjmFCxQ0E26c6qSOOiUuuZZfleW
tqISekITFtLURKyhv1R7y5GCumnD7QQEjsutC69oXWYC6A3TQH0opQqQxvgy9gNl
QYh4S5AXDL/fTaeTD7caeqiZMA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:04 2026 by rpki-client