
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
File: HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft (raw, json)
Hash identifier: d3CvSlTi0FgFwzUSFLYGLo4FXtwadY0fCXNKKNMmm+A=
Subject key identifier: 2E:A8:33:8C:E6:19:1C:F4:87:D0:F5:1F:74:95:14:FA:FE:EF:22:B1
Authority key identifier: 1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F
Certificate issuer: /CN=A911BD6E/serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
Manifest number: A3
Signing time: Fri 09 Oct 2026 08:08:40 +0000
Manifest this update: Fri 09 Oct 2026 08:08:40 +0000
Manifest next update: Fri 16 Oct 2026 08:08:40 +0000
Files and hashes: 1: HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl (hash: tD2Tg/JnjUa7H+OkwASQLt176cNh5fUaFneJxuh0wT0=)
2: C6369A92E29211F086FBD344456F56BC.roa (hash: /hMoFkZDEyrOtFoyUNiUcHKPDtAIaxeqfmQ19EP0GNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl
rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD6E, serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F
Validity
Not Before: Oct 9 08:08:40 2026 GMT
Not After : Oct 16 08:08:40 2026 GMT
Subject: CN=6ac8a108-cb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d9:b7:e2:aa:cd:a2:f9:f3:8a:9e:a6:fa:56:
0e:17:38:e4:85:76:b6:09:3c:a0:ad:26:d4:fa:96:
c6:da:08:fc:cc:f5:b2:8c:61:ec:d8:c3:77:09:37:
51:ce:ad:6d:f6:7c:94:26:8a:52:a0:51:88:81:5e:
f9:61:1b:a3:d2:d2:80:83:29:a2:96:1b:4a:7e:52:
6c:c2:b5:67:fc:a6:ce:39:81:d8:57:01:f5:6f:79:
e9:ed:ea:40:26:95:12:76:0a:31:6a:13:92:02:7d:
31:9a:ce:08:6d:bc:6b:78:88:fd:06:02:ee:20:dd:
8f:e2:1b:40:83:6e:03:25:f2:4e:9a:78:b5:11:4d:
e5:bc:59:e3:90:f1:33:13:b6:c9:d8:a9:5b:8a:0b:
00:31:f0:c3:2f:94:75:20:41:52:47:99:db:f1:ba:
1a:eb:96:d8:64:ce:9e:1d:73:87:b9:49:87:fa:5e:
0b:99:cc:eb:45:b5:e0:15:c1:e0:e8:18:5c:b6:5a:
e8:a6:55:38:ca:8c:86:32:ca:e7:5b:28:b7:1d:0b:
2d:a6:f2:7e:c9:89:ec:b2:9b:5e:e7:17:a9:93:3a:
03:d3:95:fe:30:47:26:4b:4a:87:ba:2f:ca:d9:3b:
97:02:79:e4:6e:a7:e8:2d:0e:31:d1:d8:a1:c6:ef:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A8:33:8C:E6:19:1C:F4:87:D0:F5:1F:74:95:14:FA:FE:EF:22:B1
X509v3 Authority Key Identifier:
keyid:1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:56:35:3a:11:14:ee:d4:47:97:19:38:9b:4c:30:c9:5f:30:
ab:0c:cc:c9:33:90:cc:26:44:2e:24:b7:72:81:33:26:2c:39:
75:93:72:be:be:ba:9e:d9:44:df:d3:91:dd:c7:fb:80:f8:32:
d6:eb:2b:2b:59:0b:ac:73:a1:8f:f7:c8:06:53:e2:21:a1:77:
ae:9a:0a:9a:1f:26:9a:64:eb:5b:bf:e1:60:ec:89:5b:e1:df:
e5:4c:48:81:3c:b6:2e:a4:02:16:e6:fa:2a:4b:9d:05:f2:ab:
88:f3:46:98:ee:81:44:74:25:0d:ae:7e:57:45:40:cf:dc:7e:
94:49:2f:88:61:e8:aa:e8:ab:57:fa:25:83:1c:2f:78:68:b5:
af:56:bd:d3:4d:e1:bc:73:e6:b5:1d:f4:22:80:94:98:69:7d:
98:12:26:dd:6a:4d:72:c2:d2:00:d3:c2:70:95:de:bf:a7:61:
77:07:16:8b:51:ed:50:8e:92:15:4b:14:5c:d3:2d:93:08:10:
cc:f9:73:1c:6e:ed:b1:31:88:54:b9:67:e2:46:b0:d3:b0:03:
38:81:d8:cd:a1:2c:b7:a3:1c:e6:25:00:e6:a3:b5:77:5c:02:
ea:c2:33:9f:e5:6a:66:39:6d:d0:4a:a7:3e:1c:25:89:32:ba:
29:2a:ef:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:24:58 2026 by rpki-client