
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
File: hUw8jb_u2qy7OypCS1iyWaFMnws.mft (raw, json)
Hash identifier: mTvIWdi24Z4Dc+1YbLmSxRhOY79JEljZ1CttoZEeIBE=
Subject key identifier: D6:6D:F1:B0:57:40:94:25:B7:57:47:56:3C:37:AC:6E:D5:62:BD:C2
Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
Certificate issuer: /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Certificate serial: 025D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
Manifest number: 0250
Signing time: Sun 01 Mar 2026 03:22:55 +0000
Manifest this update: Sun 01 Mar 2026 03:22:55 +0000
Manifest next update: Sun 08 Mar 2026 03:22:55 +0000
Files and hashes: 1: hUw8jb_u2qy7OypCS1iyWaFMnws.crl (hash: a9kKex8uOlK4nUhoOK01s+YpSoc+xJO/6i5Usz/FapU=)
2: 86312104899311F0ACB13D20C4F9AE02.roa (hash: 4R4HH9YkSknxkUbt13TnGXzzMtWUOqurt8XzdKRa/T8=)
3: CF4B4BC61E6411EF8AA5A942C4F9AE02.roa (hash: okezYBAPRWrafbNJbGoQUZV+/kufGLUJt9lzsiJtOtg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DBBF, serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Validity
Not Before: Mar 1 03:22:55 2026 GMT
Not After : Mar 8 03:22:55 2026 GMT
Subject: CN=69a3b10f-bc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:f2:c2:d8:c1:ed:6a:bd:19:8d:e7:30:67:
4f:4c:01:99:99:c6:95:70:33:ea:24:c6:3b:a2:86:
d9:9a:91:f0:4d:a2:8d:63:71:45:f4:63:a3:de:f3:
85:37:95:53:21:d0:d8:b5:61:1f:fb:bc:fd:c7:5d:
fe:c1:be:9d:a4:d5:56:a5:dd:e1:bf:ef:7f:92:58:
0e:94:04:22:55:57:32:f1:24:2b:d2:f6:20:e9:5c:
0c:b7:be:ef:9a:dd:5f:d4:8a:a4:c4:d1:5e:2e:ea:
58:50:85:b9:1a:f3:24:46:bb:6f:38:9e:97:83:8f:
16:c6:df:75:b6:50:3f:b0:ed:14:84:14:db:d1:86:
ee:c8:eb:2a:f4:e3:1d:1a:c7:f7:90:b1:b7:34:88:
ad:89:44:f2:f9:c3:f0:ec:89:9f:ea:47:3d:60:7b:
d8:ef:2c:a8:1b:c2:e8:66:b9:22:02:22:61:f2:b0:
3c:c7:b2:3c:c1:d6:da:7b:7d:c7:84:bc:22:f7:2a:
e1:5f:72:08:af:4e:64:49:f6:75:bd:e2:36:cb:76:
6c:01:0b:ff:fd:8c:39:18:7d:ef:98:8a:12:63:36:
c4:bc:de:65:83:a2:ce:1f:76:f1:c4:43:1e:88:54:
67:4f:c2:72:02:4d:47:71:66:85:58:6a:f6:ab:58:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6D:F1:B0:57:40:94:25:B7:57:47:56:3C:37:AC:6E:D5:62:BD:C2
X509v3 Authority Key Identifier:
keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:63:be:eb:b8:77:e7:d9:74:9a:37:91:20:96:0d:66:b6:6d:
a8:f3:12:cb:31:44:7d:75:0a:b4:29:1b:0f:fd:31:a6:02:f6:
cd:a5:dc:cd:c9:13:79:93:2b:10:e7:78:96:1f:07:f4:08:4e:
34:05:97:4c:33:cb:14:00:b3:4d:1c:d1:91:69:44:fd:12:1a:
64:80:8a:55:86:b3:ef:e4:19:ba:d8:fe:6b:64:04:69:54:fe:
17:b1:46:a5:e8:88:d5:c4:e2:50:5c:40:a6:ee:fb:db:4f:38:
ea:f3:87:0f:4b:86:88:77:75:77:b8:c9:c6:47:c2:ec:68:50:
c1:0a:35:95:6f:e2:9e:4d:12:7e:40:11:0c:7a:10:ab:ae:4b:
e8:d5:70:fa:6e:de:e4:ac:37:3f:70:5a:1e:7f:74:87:ed:7b:
39:c8:18:df:3e:30:8f:6c:9b:65:03:53:69:44:9d:9c:c0:ab:
b2:32:a8:69:10:b0:03:bf:50:92:a8:c4:77:ef:15:e2:a8:81:
ed:7e:2c:83:14:51:8d:4a:6f:ee:1a:53:27:3f:2b:b4:50:7b:
6a:a5:8f:0d:ee:3e:f3:f6:5d:e1:b2:54:e3:c1:5e:6c:14:83:
ac:ae:8d:1a:d1:24:12:36:e3:13:56:c9:36:f2:11:9e:e7:4b:
2f:71:b6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:15 2026 by rpki-client