
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
File: g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json)
Hash identifier: nlLLdi0aYkvOm7ol1SPhe3JJzW4Z3d4Wh9QK4HENSzg=
Subject key identifier: B6:42:67:70:E6:87:6F:32:79:53:7C:BC:20:92:CA:04:B7:4A:13:D2
Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
Certificate issuer: /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
Manifest number: 0266
Signing time: Wed 09 Sep 2026 02:36:34 +0000
Manifest this update: Wed 09 Sep 2026 02:36:33 +0000
Manifest next update: Wed 16 Sep 2026 02:36:33 +0000
Files and hashes: 1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: gCXB+09y8dkwD846PcTNp/4cAGYgvkkaenKPWjZNAOQ=)
2: 991CBF9A86F311F1B8F66003A7EE528E.roa (hash: jc4CCB8ZNjD5l8JwMnuS9o09cS9T+3d3PcbaK2GUzrA=)
3: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: 1di8rNGyqV1ndDBfMBfKTjWY7rtHJTy/ZCp+HJPdtTI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl
rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 02:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Validity
Not Before: Sep 9 02:36:33 2026 GMT
Not After : Sep 16 02:36:33 2026 GMT
Subject: CN=6aa0c631-99f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d2:15:4a:1d:ee:83:b5:69:96:a7:6c:08:17:
de:40:fc:e7:a7:90:76:99:11:fd:22:1a:c4:5b:8c:
b5:7c:80:61:92:2a:f3:20:ca:db:db:43:aa:99:db:
27:b2:3b:17:90:58:2c:1c:8d:1d:cb:3d:f5:59:24:
1f:40:26:32:af:61:a5:2e:f2:5b:13:79:0b:00:a3:
7a:95:41:de:e4:69:b6:ca:59:bb:2b:5b:35:c5:48:
47:7f:5c:7a:81:38:24:6b:a1:e5:ca:4c:b3:54:8f:
d1:4a:84:0c:28:e3:5c:d2:75:96:8f:c4:bb:99:fe:
75:b4:6b:f2:05:cc:a3:ce:02:24:ff:ad:43:76:37:
f6:f8:05:4d:e2:13:a1:9f:4d:59:91:b2:c6:43:37:
11:80:27:5a:99:9a:5e:e5:71:14:28:63:76:9f:97:
45:69:a5:68:dd:4a:46:b1:dc:f5:54:cd:48:9b:47:
dc:28:d7:1e:bb:56:c6:e1:a4:e0:81:3f:a7:d9:2d:
8a:34:79:a6:e1:cf:19:5d:f6:f0:2b:09:a8:32:da:
52:4f:bd:f9:3a:ad:15:83:e5:ad:60:2b:26:3a:b5:
b0:3e:e1:ec:b7:ee:fc:79:3c:df:15:b7:0b:5a:c8:
d8:0c:47:54:f6:f5:83:e4:18:7f:1e:13:85:39:d1:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:42:67:70:E6:87:6F:32:79:53:7C:BC:20:92:CA:04:B7:4A:13:D2
X509v3 Authority Key Identifier:
keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:6d:af:af:86:41:28:47:b4:f4:6e:19:02:0b:ae:42:a9:c0:
d7:4f:fd:6b:b9:de:7b:31:12:f1:60:73:8b:55:84:5d:37:44:
4b:a1:d8:d3:4d:82:26:ef:18:c6:21:58:09:27:f9:1e:3b:8c:
04:30:ab:cf:fa:27:4d:4b:65:36:e6:33:62:95:7d:3c:97:b8:
05:65:56:f9:7c:96:2f:40:5d:f7:13:07:c7:8a:46:82:78:dd:
a4:ee:a7:f1:92:73:9e:23:03:64:00:31:61:a6:72:27:8d:07:
c9:6f:62:35:4c:ec:9d:91:f4:de:5b:fb:98:35:7a:56:2c:bc:
31:78:1a:b5:2d:88:20:f4:25:c6:09:1c:e6:c9:68:b0:d5:7e:
5b:a5:0d:81:aa:18:66:05:38:87:9c:aa:5f:bc:d2:03:cd:72:
93:40:59:d8:d5:a8:71:5b:cb:a6:46:7b:72:5a:38:c9:04:83:
3c:03:52:6e:cf:f6:3b:95:94:52:dc:dd:2b:24:69:6d:64:5c:
f9:5d:f7:42:82:42:bd:1c:f7:45:8f:47:56:9a:5f:28:7e:f4:
5c:66:5a:31:ec:4f:ae:15:fb:f3:7e:14:5c:5f:05:a5:36:73:
9b:8c:e6:cb:2b:94:fe:96:7f:51:04:38:92:9c:99:d5:55:24:
84:ad:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:20:34 2026 by rpki-client