
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
File: hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft (raw, json)
Hash identifier: DaZUCEPYuUAiucKMgxsVMqlWV98T7bLVJZdk4G0sG/8=
Subject key identifier: 2C:EC:3E:45:D7:CB:D0:86:6E:0A:8D:4A:36:55:2C:5D:DE:04:28:8C
Authority key identifier: 86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65
Certificate issuer: /CN=A919A8BE/serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565
Certificate serial: 1080
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
Manifest number: 1068
Signing time: Tue 18 Aug 2026 17:35:55 +0000
Manifest this update: Tue 18 Aug 2026 17:35:55 +0000
Manifest next update: Tue 25 Aug 2026 17:35:55 +0000
Files and hashes: 1: hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl (hash: FDmXzz6C3gt5xY2WggLim4JqWH1wBAZdSs1dQDlgfP0=)
2: 28DA447C289B11EAA1EA9B53C4F9AE02.roa (hash: +QsBublCSi/Ra5CJk1uOnK17kaA8DRCpH5g6/7+9Qrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl
rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4224 (0x1080)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A8BE, serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565
Validity
Not Before: Aug 18 17:35:55 2026 GMT
Not After : Aug 25 17:35:55 2026 GMT
Subject: CN=6a8497fb-7b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:07:d1:2a:4b:c2:02:d8:6d:43:ae:67:ad:8d:
37:a7:71:d4:a9:93:cb:4d:0c:d6:e0:85:d3:13:5f:
f8:45:a9:75:0c:6b:c2:13:d8:39:d3:90:88:13:5d:
62:09:9d:42:24:90:9f:9a:61:c5:db:73:83:03:37:
ee:ad:8d:55:55:81:fb:db:37:53:51:3d:db:b9:33:
1e:ea:23:3d:9a:4b:cf:2e:20:d5:ab:c5:20:75:7b:
ce:2c:72:8e:4f:29:36:3d:2a:3b:d6:b1:e0:02:70:
59:68:af:07:82:a3:19:e2:cd:9f:76:26:f6:70:40:
f1:ea:27:ea:f8:44:7d:d7:f0:8a:80:d7:02:dc:ba:
d1:64:ba:ec:9d:5b:9c:92:68:9e:21:2d:13:d8:63:
d5:9e:5c:ff:41:48:26:f6:91:f6:2e:df:b1:f9:92:
7f:67:5e:4f:64:d5:62:d1:60:54:40:d9:31:72:3b:
46:48:0d:82:63:7e:5c:7c:4f:1e:2d:a2:b5:65:70:
6c:61:4b:9c:86:ea:e1:68:b0:b5:40:b6:d1:65:f4:
1d:3f:40:65:0d:b7:a0:e7:77:c7:bb:cc:7b:d7:fa:
30:f0:57:a2:87:7b:1e:af:f2:3d:c1:e8:33:2a:e2:
6d:fb:b8:06:60:15:81:00:a6:52:a5:70:77:09:74:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EC:3E:45:D7:CB:D0:86:6E:0A:8D:4A:36:55:2C:5D:DE:04:28:8C
X509v3 Authority Key Identifier:
keyid:86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c9:cd:76:06:f0:21:be:fc:b8:fa:51:9e:8b:b0:d3:44:86:
a7:b4:ef:4c:e4:c2:26:43:f0:0f:8b:4c:e1:af:8f:e0:ea:23:
4c:80:1f:6f:c8:a2:04:0f:95:94:ec:68:3a:21:82:ed:96:d9:
6d:06:0c:af:0b:97:70:3b:1f:eb:12:82:19:0d:b1:e2:46:3e:
3d:92:50:0c:be:67:70:a4:99:80:2e:2a:9e:83:0c:d3:68:a1:
28:65:de:db:65:37:40:c3:0f:9d:2f:24:66:a5:63:fc:a0:42:
62:4e:4a:76:f4:2f:7d:e2:bc:56:44:84:d8:d3:1b:17:ac:ce:
4a:83:80:74:ba:40:69:36:a4:af:c5:11:37:e5:c3:ba:44:1e:
63:9f:9e:88:ac:bf:32:6c:86:34:96:72:1b:b1:da:0a:e5:6d:
15:20:fa:b1:81:f9:83:6c:f4:d7:a0:8c:6c:9d:6b:41:ea:b9:
4f:cb:d1:54:c0:36:62:a9:40:54:6e:7e:f7:7b:cf:b8:19:44:
59:fb:06:c5:8c:d8:e6:00:13:b8:0e:be:bb:73:f0:46:b6:c9:
1d:1f:d2:f4:a4:e9:3a:56:2f:d8:0c:df:f0:0d:5d:02:21:48:
f3:ef:e5:9a:82:6b:56:f8:3e:cd:f6:f8:cd:be:96:82:1b:06:
64:7f:c5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:04 2026 by rpki-client