
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft
File: HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft (raw, json)
Hash identifier: Gh6+lqxlFrCLVM/lMGglRYroHuCXLznEOmLXw4Mm0Gk=
Subject key identifier: 4F:31:55:0A:A7:EB:B8:12:8F:1D:92:B8:EA:63:50:45:17:5D:99:D6
Authority key identifier: 1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6
Certificate issuer: /CN=A91F3FAF/serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6
Certificate serial: 0248
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft
Manifest number: 0216
Signing time: Sun 01 Mar 2026 23:37:28 +0000
Manifest this update: Sun 01 Mar 2026 23:37:27 +0000
Manifest next update: Sun 08 Mar 2026 23:37:27 +0000
Files and hashes: 1: HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl (hash: dmX6sqPjTsr4zWfPvfEBGQnUqCzT5uY/bg6Y2KwngJI=)
2: 5EDB6B50EE9311EF8EB9700BC4F9AE02.roa (hash: oh8GWEzQtGlGtjvymgIqo4L8CHCprgoVIrX7RTa8ArY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl
rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584 (0x248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3FAF, serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6
Validity
Not Before: Mar 1 23:37:27 2026 GMT
Not After : Mar 8 23:37:27 2026 GMT
Subject: CN=69a4cdb8-09ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:1c:be:7e:ed:c4:ca:18:47:5e:22:85:d7:
38:82:29:90:c6:4e:9e:e6:cc:10:6a:aa:35:66:be:
9d:0f:fb:cb:d0:b4:9b:02:22:45:b2:b3:1f:09:79:
d1:2f:91:63:28:68:a3:46:31:06:07:20:66:f4:6a:
9d:96:d7:f2:f8:cf:96:08:4a:46:cf:09:bc:09:ba:
f5:b4:86:d2:6e:4f:e6:00:82:05:a9:f7:e3:68:60:
64:8a:2c:92:59:e4:49:28:65:c7:c3:67:6b:cd:04:
4d:35:10:04:f8:7b:ce:6a:d1:b5:97:b1:db:d9:e8:
88:20:62:a0:fc:63:30:1a:67:ce:7b:a3:f6:7b:36:
96:e6:94:64:1b:bc:93:ea:da:26:fe:10:0f:8e:56:
fb:ec:3e:82:6c:1c:61:da:5d:4f:af:89:2d:98:f3:
56:00:71:a2:33:84:25:95:f3:82:5a:98:57:bb:bf:
09:68:ce:cf:27:0a:92:8a:37:6c:d3:de:50:68:b7:
26:52:2e:64:98:84:ad:c8:d5:60:c0:8a:44:12:1a:
43:4a:4c:80:69:a0:7a:9d:ad:96:ed:7b:54:c4:ca:
2c:f1:75:ea:7b:4a:bd:1e:4a:c1:42:48:36:4a:68:
1e:77:81:4f:e0:de:a5:7d:9e:59:02:85:0d:3e:16:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:31:55:0A:A7:EB:B8:12:8F:1D:92:B8:EA:63:50:45:17:5D:99:D6
X509v3 Authority Key Identifier:
keyid:1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c5:67:81:ea:6d:6c:a0:ae:49:97:57:c9:ea:db:b3:74:c6:
41:5c:a7:8a:7f:75:2c:d7:62:8c:14:8c:b8:65:3e:4e:e0:7a:
4b:c4:b5:ff:1e:c0:1a:3a:2e:00:34:ea:c3:d0:c3:4c:4e:cb:
31:38:13:ab:53:5f:db:e1:60:46:da:4f:57:bb:f8:6d:c9:af:
c7:cd:61:6f:59:28:97:f9:59:05:3d:30:c4:db:dd:49:fa:f6:
7c:78:b8:03:7a:d7:a7:3f:3d:76:53:59:de:81:11:71:19:0e:
72:ba:b8:82:79:3c:64:cf:9b:38:64:f6:da:aa:01:d3:62:11:
80:80:65:2c:51:b1:b0:65:3e:e4:12:f2:ba:14:77:f9:68:55:
32:1c:01:53:f0:df:75:14:90:d9:23:ef:e7:ef:36:a1:9a:51:
95:d4:c6:50:df:58:60:a8:00:e7:a4:ab:cb:23:b5:36:37:09:
d3:89:68:32:b9:33:10:c1:fe:30:2a:ae:5a:9b:81:72:a9:06:
08:03:ce:19:52:6c:f3:fb:a3:72:05:87:a9:28:53:e6:34:3f:
3c:95:11:68:3b:41:1a:6a:78:9b:0b:0d:53:e1:19:b4:07:43:
bd:cb:ea:5d:c5:72:ff:f3:0f:e5:a6:3a:50:3c:49:8c:ce:f7:
49:5f:6c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:47 2026 by rpki-client