
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
File: HUkvo_OylYBJWmiA1ATuDDcK2SU.mft (raw, json)
Hash identifier: GDFhNoRjiu2wEvxfS8OJ9MGWeeXDHsWXe+cXWcxnqKY=
Subject key identifier: 51:ED:E4:4B:E4:1F:5B:8D:DF:B9:62:41:17:8B:F7:40:19:6B:14:17
Authority key identifier: 1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
Certificate issuer: /CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Certificate serial: 0237
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
Manifest number: 0959
Signing time: Fri 02 Oct 2026 22:18:02 +0000
Manifest this update: Fri 02 Oct 2026 22:18:01 +0000
Manifest next update: Fri 09 Oct 2026 22:18:01 +0000
Files and hashes: 1: HUkvo_OylYBJWmiA1ATuDDcK2SU.crl (hash: 9V9E5wAc1K/Bkzg8N+q85DzYCHGjMnHsVPPiVqj2F4E=)
2: D458065EF30B11F0A359DAA54E6F56BC.roa (hash: BBzU6l7+Aet7tiGxkuZJg3JEsicg6f9k+Y/7Tu2inB8=)
3: E768261A9F7311F19D1E40ED3811F970.roa (hash: OTq84YSmYhACPfKL6z7p5F1RxHk3Gcm+eYjbuPACkA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D963, serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Validity
Not Before: Oct 2 22:18:01 2026 GMT
Not After : Oct 9 22:18:01 2026 GMT
Subject: CN=6ac02d99-4c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:67:06:06:88:30:c8:7b:6b:17:3b:ab:b9:
7c:1d:c6:a1:7a:ae:67:f6:64:33:28:d7:17:67:37:
3b:22:83:2d:a8:f4:f9:19:69:5d:68:54:44:3b:87:
fe:78:8c:7e:f3:c3:0f:c5:9b:5a:dc:82:82:e2:33:
30:f5:27:98:04:c9:ff:bc:4b:14:7c:93:09:bb:05:
aa:ff:6a:ea:27:a8:9c:4e:d0:a6:b0:b0:47:e0:51:
71:18:08:8c:fa:43:98:06:33:cd:da:2f:fd:9f:5d:
cd:0f:39:b4:05:4b:35:0b:46:ab:71:b9:7d:09:2f:
84:40:2d:bc:ba:62:4f:3c:50:cf:5a:2b:a7:1e:d5:
40:b7:c8:2c:f3:c9:4d:0f:54:ab:0a:01:94:c8:d7:
bb:26:ea:bd:5a:02:3c:ef:c0:24:08:48:1a:c5:67:
b2:68:8e:89:b4:9a:6e:45:26:a3:90:91:8d:e6:cc:
05:5e:dd:ca:39:1a:f2:91:1a:62:f6:8e:8f:d3:f4:
4e:18:c0:94:db:4a:31:91:d2:9e:57:5b:3f:08:5a:
a9:45:a6:20:88:6f:0f:0c:2e:a1:67:30:ef:33:2a:
8d:91:50:25:2c:ce:c5:52:85:67:39:2f:42:c4:92:
72:64:d8:1d:30:ba:47:10:9d:9b:88:13:8e:1d:cb:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:ED:E4:4B:E4:1F:5B:8D:DF:B9:62:41:17:8B:F7:40:19:6B:14:17
X509v3 Authority Key Identifier:
keyid:1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:88:a0:b5:10:94:24:3e:33:ef:bd:1d:51:bf:cf:81:cb:6a:
bd:05:6b:2c:0a:72:fa:62:46:0b:b2:ce:f8:7a:0d:de:af:2d:
5c:68:56:b4:9d:cd:7a:5e:76:78:ab:b2:6f:e8:04:da:b0:48:
15:e7:ad:ac:44:93:f4:7e:ff:a9:7c:d5:54:76:19:8d:32:f7:
2e:7c:53:92:5d:06:d0:e7:6f:55:c7:cf:ea:ee:cd:fa:1c:e8:
9d:71:35:54:30:a9:69:e1:18:35:e0:0c:90:25:74:60:89:6a:
d7:54:e5:6e:51:c6:60:b6:1b:06:66:45:0c:25:7b:4c:8a:0e:
14:96:32:17:52:e6:19:34:62:55:3b:f4:d5:6d:0f:89:db:a8:
e4:7b:89:51:e8:34:9a:b5:1d:54:55:b5:1e:42:1c:7c:d9:5b:
81:13:1c:ff:17:c8:fb:63:fb:8f:6d:d5:42:3f:da:1e:ed:ae:
f6:a9:a6:4b:cb:68:00:ae:04:f6:b2:11:e8:d4:84:9b:85:44:
67:99:a8:a3:4f:0a:6e:a5:b2:d3:68:3d:07:85:7f:eb:96:5e:
40:09:08:18:5d:7d:79:db:79:ec:ff:63:e4:bf:75:e5:ad:ae:
34:9f:68:1a:65:47:46:e8:13:4d:15:43:14:0a:c9:1e:15:73:
73:34:44:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:30:50 2026 by rpki-client