
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
File: g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json)
Hash identifier: NLsxUz8EFDMX2PBEAwJ189raBTqfufjdsKhMKHrV+/E=
Subject key identifier: 10:39:18:25:4A:64:32:76:19:E9:80:D5:A1:9F:54:6B:88:09:4E:3A
Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
Certificate issuer: /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Certificate serial: 026A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
Manifest number: 024E
Signing time: Sat 25 Jul 2026 03:51:58 +0000
Manifest this update: Sat 25 Jul 2026 03:51:58 +0000
Manifest next update: Sat 01 Aug 2026 03:51:58 +0000
Files and hashes: 1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: hbRRS3fp9XxYjZeh8jXK7saYYvnlAYSbtjO+ohaloo0=)
2: 991CBF9A86F311F1B8F66003A7EE528E.roa (hash: jc4CCB8ZNjD5l8JwMnuS9o09cS9T+3d3PcbaK2GUzrA=)
3: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: 1di8rNGyqV1ndDBfMBfKTjWY7rtHJTy/ZCp+HJPdtTI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl
rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Aug 2026 03:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 618 (0x26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Validity
Not Before: Jul 25 03:51:58 2026 GMT
Not After : Aug 1 03:51:58 2026 GMT
Subject: CN=6a6432de-4cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:64:91:b3:dc:21:82:d4:3b:d3:3a:d4:37:
07:2d:c1:d6:4b:ac:94:d7:37:a1:b4:d5:c5:ea:17:
2c:e8:7d:64:49:1b:bd:9e:c4:5c:e9:fa:94:8a:8c:
1a:24:32:73:31:67:39:17:4f:67:3b:6f:13:20:bc:
e6:fd:62:ad:60:d0:d0:ed:f4:1e:01:11:b9:0b:1d:
90:50:69:33:63:a1:22:90:e9:d4:a0:b3:fd:56:c4:
56:e3:20:9a:3d:91:c5:29:0f:0a:e0:b4:8f:22:7d:
04:59:77:94:dd:7b:ef:4b:97:59:a6:62:78:ce:79:
86:ad:da:27:47:4c:7a:f3:f7:40:ac:08:64:fa:32:
13:2a:de:b5:89:27:2c:1f:12:ae:32:57:2d:02:20:
bd:d2:1f:df:73:8f:a5:64:4d:ed:bf:47:ce:f1:f4:
89:b7:e8:a8:b2:a4:7f:bc:f1:57:62:20:d9:72:a2:
a1:93:5a:48:25:9c:42:41:e8:20:33:3c:bf:d3:42:
72:7e:69:35:db:11:04:67:73:3c:5a:50:4b:81:90:
e7:cd:e2:43:5f:34:5e:77:28:d6:04:71:ee:a4:21:
7f:cf:1e:16:be:a1:ab:12:d1:72:70:ce:9e:31:42:
12:2d:3a:0d:88:62:e8:3f:88:d0:51:3d:64:8b:38:
c2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:39:18:25:4A:64:32:76:19:E9:80:D5:A1:9F:54:6B:88:09:4E:3A
X509v3 Authority Key Identifier:
keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:03:21:d1:c3:c5:7e:31:f0:9f:de:03:c6:1d:80:dc:ea:5a:
04:82:db:a3:0b:71:56:90:1d:70:2f:f8:05:c9:65:41:20:9d:
2b:cb:da:49:b5:33:a5:5e:bb:bc:6e:2e:17:53:f3:6c:12:c4:
8a:b2:65:2c:7e:96:35:91:48:95:4c:bd:75:f8:92:96:37:e4:
23:1c:f2:dd:84:d6:ed:ea:5d:35:8a:6b:13:7e:84:e7:84:f0:
c1:02:82:52:34:57:73:1f:93:7c:b6:91:0e:86:88:d0:13:4f:
12:ed:07:de:27:3d:e0:19:67:ab:c0:e0:46:ea:ec:0c:c0:62:
e4:18:97:43:f5:18:24:c0:59:7a:f4:1c:73:3e:d3:2d:e8:c2:
1a:64:e5:03:39:a2:cc:48:31:6b:b1:84:ec:d6:a1:7a:57:45:
3f:b2:75:ff:c5:af:c7:e9:9c:73:b2:eb:e5:f3:1f:31:73:e3:
5c:46:e4:b7:13:8f:7b:dc:a6:d0:18:f7:0b:5b:8c:55:4d:9b:
96:ec:03:b5:22:0d:b1:31:4e:0b:ab:87:da:fc:92:20:3f:cc:
14:ea:73:40:2e:11:94:ee:2d:62:72:5d:5d:6c:01:e9:2c:df:
86:60:95:27:37:6d:12:37:a8:a7:08:ca:ef:c6:94:d1:b1:96:
86:37:01:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:37 2026 by rpki-client