
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
File: HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json)
Hash identifier: iGDsb31EIZr8pmstd0Wn7a6PttcJuP55LbaltD4qQbw=
Subject key identifier: BD:7B:AE:AD:F7:2C:8A:0B:D4:77:DE:46:77:CD:11:C3:4C:63:06:4F
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial: 0277
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
Manifest number: 025B
Signing time: Tue 27 Oct 2026 02:35:12 +0000
Manifest this update: Tue 27 Oct 2026 02:35:11 +0000
Manifest next update: Tue 03 Nov 2026 02:35:11 +0000
Files and hashes: 1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: m+0zZoFyHMVnhv8HBLFUAqnXCukaZDajqVdhYGLg5BA=)
2: F9F53948599011EEB54F7158C4F9AE02.roa (hash: 53jUno38hR5QrdEYJgj5E34tWdnvnUXHFCIqAyPF2Mk=)
3: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: o+6ZDuPIrO5DnJqINIScEMsH1AtzfYFLtkRLVBpnBNo=)
4: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: OXtGQAmVv6/zcLdy3u3i2oyqHV0zpKuoz/3nmtWN4+c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 02:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Validity
Not Before: Oct 27 02:35:11 2026 GMT
Not After : Nov 3 02:35:11 2026 GMT
Subject: CN=6ae00ddf-a48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:01:7f:e7:61:ab:83:7c:03:32:06:d9:e4:
1e:4f:37:98:bc:fe:e2:e5:84:9a:9f:74:03:7b:ad:
97:af:31:fb:ec:5c:85:cb:09:d0:23:f8:e8:b5:84:
d9:17:d6:fb:5f:a5:6f:ca:0b:2d:33:fe:16:97:6c:
21:b6:79:d4:0f:22:26:e3:17:84:0f:92:7b:3b:f9:
c7:a6:9c:a0:70:9b:61:71:cb:a6:de:95:e0:0a:ee:
f7:fc:c9:e3:e7:9b:ee:af:35:d9:52:fe:18:2d:2a:
42:94:ed:c4:07:a8:1a:fc:15:ed:f1:6e:74:8f:52:
ea:5c:93:1c:40:a4:ab:e2:01:14:cc:34:1a:5e:2f:
e3:3a:9f:89:c6:2e:ca:f0:7c:5f:fd:b9:25:0b:ca:
79:7f:44:cd:4d:6d:9e:c4:6d:16:e1:cf:a3:3f:01:
a9:c2:0d:fb:ed:4e:eb:b8:ee:b1:f4:b6:c7:aa:73:
47:56:e3:a3:8a:01:9e:7f:b6:bf:b6:4f:2b:8e:1a:
67:16:c6:56:dd:ce:a1:fc:a2:ae:8e:fd:be:f6:c0:
80:2c:34:c1:08:48:56:06:dd:8a:f2:36:3f:22:51:
ac:de:15:b9:60:da:d8:d6:35:2f:2f:ee:13:e7:d7:
8e:d0:a2:6e:a3:51:f8:ad:69:41:0a:d6:08:43:f4:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7B:AE:AD:F7:2C:8A:0B:D4:77:DE:46:77:CD:11:C3:4C:63:06:4F
X509v3 Authority Key Identifier:
keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:11:46:73:1d:25:3b:c7:60:11:bb:30:da:33:b5:3c:05:75:
a7:86:60:94:6c:c9:22:f0:da:8c:c8:25:7b:99:ea:5e:90:4a:
29:96:1c:1e:7f:7e:38:f5:97:34:27:a4:14:98:ba:ed:10:72:
7f:ba:b9:10:a8:ac:da:8f:65:e5:21:11:61:ad:d1:d0:02:85:
60:1d:20:e3:e8:2b:2c:fd:e6:65:c4:9c:41:3b:ef:ba:f0:1c:
82:20:88:20:57:47:94:bb:6b:84:3a:ec:50:7d:18:c2:ba:d6:
51:86:48:e0:9e:9a:17:6d:cc:b6:82:3e:05:78:44:90:d1:77:
78:1d:36:cf:da:97:e9:4d:5e:55:5f:22:39:ef:47:38:a7:a7:
0d:26:e0:13:f8:6c:23:7f:7b:04:b0:24:a2:db:76:8b:0e:82:
aa:63:e4:10:64:a5:78:b1:1e:28:35:ff:d4:f6:7e:04:98:a0:
a6:02:c5:73:02:c3:b0:13:44:45:5b:84:44:e2:36:b4:85:1f:
a0:f4:04:18:14:cd:6f:ab:83:79:84:62:23:c5:06:12:4f:53:
46:30:01:de:e4:cd:cc:86:f6:75:2b:a4:60:54:da:01:0d:49:
6a:4a:32:b4:ce:46:f1:b3:f4:88:e7:eb:4c:b9:11:96:12:3d:
ed:7e:d9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:54:45 2026 by rpki-client