
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
File: HUkvo_OylYBJWmiA1ATuDDcK2SU.mft (raw, json)
Hash identifier: FF1/SlUGljEx2oFbWJJ4BTsgyWacNzepl4F5Ub8t+tY=
Subject key identifier: CA:08:0C:8B:35:0B:78:32:A2:02:8F:01:47:76:41:7D:4A:5B:0A:9D
Authority key identifier: 1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
Certificate issuer: /CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Certificate serial: 01E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
Manifest number: 08C5
Signing time: Wed 20 May 2026 22:14:10 +0000
Manifest this update: Wed 20 May 2026 22:14:10 +0000
Manifest next update: Wed 27 May 2026 22:14:10 +0000
Files and hashes: 1: HUkvo_OylYBJWmiA1ATuDDcK2SU.crl (hash: p1lTS2ZF0brPM8u1BnkUSjeMC5tOHfDnkL6uySUzRxc=)
2: D458065EF30B11F0A359DAA54E6F56BC.roa (hash: CujWoz7YSR3BrTm8n54jyD4+DKLImLUDsMDTDNYN3Ck=)
3: AE497F78EFD311F08FDE80E8366F56BC.roa (hash: X9jPCZEMWoGQ94NhhknprQOWplVin8VAtLLz669e5UE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D963, serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Validity
Not Before: May 20 22:14:10 2026 GMT
Not After : May 27 22:14:10 2026 GMT
Subject: CN=6a0e3232-a3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ce:e8:74:b9:44:90:3e:2c:67:41:7e:4a:c8:
17:bd:e1:b4:08:2d:bc:bb:21:ac:a6:15:0e:d2:98:
36:a8:3c:17:66:a2:e9:60:8e:0b:64:81:a2:8e:15:
34:ac:49:e2:7f:c1:0d:b4:39:bc:7b:bd:9f:b1:6c:
34:e0:94:71:18:57:8d:bf:76:66:15:3c:52:c5:37:
c0:95:c6:5f:41:ca:78:09:56:de:e7:b7:b6:79:62:
89:fb:24:01:8d:25:c5:73:51:d3:56:27:24:84:0e:
26:2c:e3:e7:ad:44:cd:ad:fe:3b:fa:77:ec:4a:3d:
6e:3a:dc:a5:1b:fe:41:2b:25:66:95:67:d5:ad:94:
32:1f:72:d2:2f:ef:c5:e9:f8:f9:4d:00:e3:5b:9c:
cc:93:f9:68:9d:68:cf:a8:f4:33:6b:da:cb:0f:76:
55:bf:73:f6:3a:78:b1:3b:7e:8f:72:ea:c9:91:f6:
69:5a:3d:b4:95:29:37:92:b2:40:a1:55:3e:88:45:
88:8c:73:90:45:98:c1:17:4d:ba:c7:3c:a2:bc:13:
f9:ea:ae:fc:ff:b0:30:af:e5:23:c4:2e:a9:43:c9:
34:b7:40:4b:5e:ff:aa:be:0d:79:a1:d5:e3:e1:e4:
73:27:12:cb:94:c2:fc:c1:68:4a:d6:90:af:63:89:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:08:0C:8B:35:0B:78:32:A2:02:8F:01:47:76:41:7D:4A:5B:0A:9D
X509v3 Authority Key Identifier:
keyid:1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:12:a3:f9:7f:dc:81:0c:27:2e:52:a9:1a:2e:bd:ff:40:f4:
7b:25:55:75:f7:b8:61:bb:e9:8c:26:db:da:54:76:03:9b:8b:
10:32:50:0d:ef:2c:e6:be:b8:bb:12:77:90:bd:67:e6:31:30:
da:2b:78:e3:ee:0b:26:9b:4d:4f:51:e1:44:7e:68:ab:c9:90:
62:f8:a3:19:f0:ca:5a:37:d7:40:a9:6f:f2:b9:c7:44:4c:92:
f8:19:65:a6:1b:1d:e0:94:00:3c:2d:16:a4:7b:ee:53:d8:5a:
6d:aa:2e:05:e4:38:a1:8c:59:cf:33:5a:75:8f:01:e0:a8:01:
28:0e:f6:6b:87:05:51:31:5c:34:c1:c8:ad:ff:c3:02:a7:64:
7b:b2:8c:0f:6a:9d:b1:cd:1a:eb:18:d7:6e:b5:63:db:3e:63:
09:8c:b1:71:34:dd:88:f0:2a:9b:9f:21:58:01:6e:d9:25:13:
9b:92:2f:69:54:1d:23:47:17:e2:1f:9c:f0:77:50:ae:bb:cb:
9f:4f:39:a7:cd:a6:1f:0c:b9:b7:5e:00:68:38:44:46:b8:06:
6b:7b:bb:9b:2f:20:0b:3d:82:b1:a0:68:4d:db:a5:47:a1:f2:
ef:43:e1:ef:0f:e2:36:50:32:11:8e:69:51:54:1d:7a:5f:ac:
a4:34:a6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:30:45 2026 by rpki-client