
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft
File: HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft (raw, json)
Hash identifier: Q9g6uD6uBoA+RjqwHayb6kf7f6C6OFzWvfjcss7vNlk=
Subject key identifier: E8:EB:3D:E3:3C:CE:DB:A8:34:10:77:82:DE:27:6D:9B:09:EF:11:3F
Authority key identifier: 1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6
Certificate issuer: /CN=A91F3FAF/serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6
Certificate serial: 02C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft
Manifest number: 0290
Signing time: Thu 29 Oct 2026 02:52:04 +0000
Manifest this update: Thu 29 Oct 2026 02:52:03 +0000
Manifest next update: Thu 05 Nov 2026 02:52:03 +0000
Files and hashes: 1: HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl (hash: 1RTAyKlu8Jj/kXIyssMiSyhlWkdwCVaJxMjZKCXr37o=)
2: 5EDB6B50EE9311EF8EB9700BC4F9AE02.roa (hash: oh8GWEzQtGlGtjvymgIqo4L8CHCprgoVIrX7RTa8ArY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl
rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 02:52:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706 (0x2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3FAF, serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6
Validity
Not Before: Oct 29 02:52:03 2026 GMT
Not After : Nov 5 02:52:03 2026 GMT
Subject: CN=6ae2b4d3-52f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:af:8e:bc:e1:7b:3e:ef:bf:21:5a:31:d4:
c8:88:22:66:a9:8f:d6:03:a2:d7:ec:f7:9d:ae:e3:
a0:b3:1b:21:87:60:da:a5:f6:77:11:ab:2f:e9:a2:
04:ae:6f:c0:86:02:79:b8:65:c2:f0:f5:0b:cf:6c:
d4:7a:9c:27:92:6e:42:7a:1e:09:0d:26:bc:44:e4:
6b:43:fe:ce:cd:57:f0:e4:b8:23:7b:c4:81:a6:6b:
39:e2:66:1b:04:cb:1e:3c:56:c9:a0:6a:dd:71:c9:
ff:11:c1:c3:67:fb:07:90:6c:55:ae:ce:f0:6d:c3:
1b:54:66:5e:3b:0e:66:3c:6b:bd:cb:10:8b:66:25:
c0:34:84:a9:b0:1e:ca:9b:1a:1c:05:d3:55:aa:44:
e7:48:ab:b1:87:ac:c3:3d:b0:de:69:f1:02:20:4f:
ac:b8:a7:ec:3e:a8:f0:8c:96:64:d5:62:bd:5a:21:
d6:c6:bf:b6:6b:75:96:01:4d:6a:8c:96:68:6f:dc:
88:27:d4:a1:41:16:e0:64:d0:48:01:a0:2a:62:55:
d8:ec:f5:bf:b8:6f:af:25:b5:a0:3a:04:4d:a6:58:
61:8f:f9:00:3e:e6:93:89:e1:52:d6:9d:5a:b8:6f:
f5:cf:e0:60:c4:07:be:02:8b:ac:29:d6:7d:f9:86:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EB:3D:E3:3C:CE:DB:A8:34:10:77:82:DE:27:6D:9B:09:EF:11:3F
X509v3 Authority Key Identifier:
keyid:1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:a4:fa:de:c1:95:77:65:50:7d:3a:af:96:06:bf:36:8e:3c:
5f:09:d0:25:5d:ff:8c:04:cf:93:a3:f0:a1:ed:f6:84:9c:76:
a7:09:28:65:6f:c4:ee:6c:3e:bc:59:f0:19:0a:5b:6a:63:fd:
a8:5e:3e:1b:c7:6b:07:5a:e4:a7:4a:d3:08:dd:24:13:59:4c:
95:c8:c3:1c:b6:99:e5:db:a2:c0:a2:79:5a:ab:a6:ff:8a:a2:
79:bf:ac:2f:f8:a3:65:09:c9:43:dc:1e:bc:44:10:ca:4c:1e:
0c:84:1d:f6:f0:28:a7:00:c4:0e:08:cc:f4:98:c8:2e:6b:29:
00:74:c1:11:65:0a:fe:10:a3:0f:79:07:bc:8f:94:e5:f6:55:
ee:b8:e4:75:4b:8a:4f:e8:d9:4e:59:b8:0c:ba:29:bd:4e:5f:
17:5d:40:dc:16:0c:4d:bd:19:6c:b4:c6:54:10:30:e2:8e:db:
26:c2:5e:94:fd:3f:70:2f:58:52:96:a8:cc:b6:39:6a:89:1a:
4f:82:3f:f9:a6:d9:ae:48:2e:a5:36:4f:04:cb:fc:40:32:db:
1b:87:72:5c:4a:02:fe:39:47:66:49:6d:99:f7:5a:6f:dc:4b:
be:06:e1:2f:44:cd:25:4c:aa:89:ed:85:68:99:70:63:ce:8f:
2b:e4:01:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:55:08 2026 by rpki-client