
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
File: HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json)
Hash identifier: 8a8P7EeAS9MohgxXjL4CxJvV98K6Tcj1mboCuwUbBYQ=
Subject key identifier: 84:C9:05:3A:70:5E:BE:9C:C6:70:45:AE:3C:95:1A:1A:F7:CB:29:30
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial: 0243
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
Manifest number: 022B
Signing time: Mon 27 Jul 2026 04:22:23 +0000
Manifest this update: Mon 27 Jul 2026 04:22:22 +0000
Manifest next update: Mon 03 Aug 2026 04:22:22 +0000
Files and hashes: 1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: bZhIRCbRjNWyrYqaAUbPdD51anDtLjIcXbuO9ZQ/a3Y=)
2: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: +rjbca/NG9q7zWTrWpjMJftRcPfM//W/HUIpnTX4nPE=)
3: F9F53948599011EEB54F7158C4F9AE02.roa (hash: GXFMT6PzwPtBUSZwV4Os9TF+cE8bPf2hVfP0jiPGj7s=)
4: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: RQ/EfLMrrJ/X3PS3AL1VNJyNJGsjiJ0HkUJPHHuU2ZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Validity
Not Before: Jul 27 04:22:22 2026 GMT
Not After : Aug 3 04:22:22 2026 GMT
Subject: CN=6a66dcfe-ea36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:94:8b:a4:ca:f9:28:13:fd:a8:a1:f4:c2:
4c:c8:39:b5:a9:96:5b:9c:f2:26:a3:54:19:ec:40:
4c:03:24:b3:1d:f2:01:88:d5:35:e5:6b:b1:0c:fd:
7d:a0:7e:5a:95:64:f2:4e:e5:e1:19:1d:3e:66:a8:
3a:d0:86:2d:ab:61:e3:c4:5b:f0:6a:64:5a:1b:55:
e6:f3:d8:31:32:7f:81:7f:7c:3e:c2:c8:25:3f:12:
27:1c:7a:6a:51:00:4b:d8:73:27:50:11:fe:8d:80:
d0:a5:53:1c:52:f6:3c:44:31:4a:19:19:ec:88:cb:
cd:97:0c:1e:2c:4b:94:e4:84:bf:36:98:37:f8:70:
2b:12:8a:2f:59:8c:ce:4d:3f:de:00:29:5a:29:64:
2e:ea:25:87:51:73:3f:3e:10:b5:31:59:7c:f8:95:
4c:e9:56:4c:0a:b3:1f:6a:a2:7c:c9:84:c7:15:e2:
d2:2f:85:c9:dd:13:89:c0:ae:96:9c:de:75:53:77:
89:4a:72:d5:55:60:5a:8d:cd:97:04:e8:f1:85:e8:
f5:91:d4:ae:34:f8:7d:4a:07:ce:50:14:58:dc:3b:
3b:f8:9d:6a:6f:3e:76:c4:af:91:d5:51:6d:8a:3c:
2b:02:01:62:4f:cf:32:20:4a:5f:3c:e2:57:12:e7:
ac:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C9:05:3A:70:5E:BE:9C:C6:70:45:AE:3C:95:1A:1A:F7:CB:29:30
X509v3 Authority Key Identifier:
keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:6f:9e:62:fc:05:a3:3d:a1:6d:75:36:31:be:cb:65:4c:9d:
7e:ee:c1:e2:34:ca:05:c7:24:15:37:f1:1a:d8:e9:b6:04:b9:
6a:fd:aa:b5:45:7a:12:90:fa:c7:89:ad:0a:2a:43:3b:62:3c:
5d:94:73:12:b9:3a:d6:82:08:a1:af:9b:f1:25:e4:54:c6:30:
3e:17:14:86:ca:d5:cb:cb:5e:69:65:a1:4d:59:04:e6:56:60:
c2:f3:38:28:a5:13:93:df:da:1c:93:f3:93:99:72:88:e8:e8:
8e:ac:48:e4:7b:38:59:80:9b:f3:b2:ce:43:c5:81:e4:94:1c:
16:58:82:5b:1a:36:ac:1d:19:ac:35:62:c3:d8:30:11:37:cc:
bd:03:d9:92:bd:97:e7:7a:47:98:53:02:6c:81:66:db:a2:a3:
9f:f8:c7:ad:73:8f:b4:fe:a3:45:75:5e:59:3c:37:c2:23:b9:
06:38:e0:f6:ec:5c:db:2d:7f:18:03:d1:9f:5d:2a:fe:b0:ee:
4f:cd:28:30:1e:93:52:4a:4c:8d:c3:b0:fc:09:6d:60:f4:1d:
a0:be:e3:1f:27:da:e2:9f:ec:9f:ef:d5:7b:fe:af:cc:03:63:
06:e7:a2:ac:fe:d4:6d:ef:7b:24:c4:15:8e:46:02:bb:03:6e:
89:f2:38:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:21:30 2026 by rpki-client