
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
File: HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft (raw, json)
Hash identifier: a4Z/l13jRtStuDeplylw/3YeoQG2uTRC49KxClANJW4=
Subject key identifier: 6E:C6:EB:C8:3B:64:50:A9:F5:1F:83:1F:8B:02:E1:68:C6:14:25:6F
Authority key identifier: 1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F
Certificate issuer: /CN=A911BD6E/serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
Manifest number: 58
Signing time: Wed 13 May 2026 08:28:58 +0000
Manifest this update: Wed 13 May 2026 08:28:57 +0000
Manifest next update: Wed 20 May 2026 08:28:57 +0000
Files and hashes: 1: HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl (hash: BLIGyJsNtxMZD8CbDhkcA5oh7PWTOYVonOV5CSUaRck=)
2: C6369A92E29211F086FBD344456F56BC.roa (hash: /hMoFkZDEyrOtFoyUNiUcHKPDtAIaxeqfmQ19EP0GNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl
rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD6E, serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F
Validity
Not Before: May 13 08:28:57 2026 GMT
Not After : May 20 08:28:57 2026 GMT
Subject: CN=6a04364a-7406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:49:92:f9:e4:a8:80:5a:70:42:bc:5f:b5:
9f:12:8c:2c:65:28:e3:46:bf:31:76:9d:1b:e8:7f:
d4:bb:23:8f:49:5f:28:d4:f0:f8:c6:7a:56:07:f8:
9c:be:45:77:2e:eb:6d:6c:c7:26:77:21:e6:15:da:
32:6d:ec:4f:75:de:0a:f9:b7:c4:1d:72:18:bf:fa:
5c:d5:d7:0d:b0:ba:92:bb:9f:15:da:fa:7d:37:75:
9e:7d:02:6f:d7:21:08:71:e3:03:c4:02:a5:3f:a2:
c9:f2:60:93:42:67:b9:ad:0c:e4:68:c1:ca:39:1f:
2a:a0:76:22:a5:af:32:08:e4:5f:ed:ff:af:35:fc:
c3:80:9e:fa:35:43:54:d8:e8:12:6c:da:2d:5c:41:
c3:d0:23:0d:5c:18:5d:24:26:d1:ef:f7:c7:a2:57:
da:53:37:21:9c:6e:96:3b:93:8c:8f:e6:ff:48:da:
22:9b:36:2b:46:46:8c:f8:be:25:63:26:59:cd:e8:
70:90:4d:6b:90:3f:d3:fe:f2:dc:ff:36:74:b8:f2:
70:80:50:59:a0:77:ab:3e:6f:4d:de:5b:a3:25:ef:
7f:7e:7f:ae:29:5f:f5:fd:51:56:f0:93:93:4c:d4:
92:dc:ac:9e:7d:38:28:3c:d7:45:4a:fd:9b:76:f2:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C6:EB:C8:3B:64:50:A9:F5:1F:83:1F:8B:02:E1:68:C6:14:25:6F
X509v3 Authority Key Identifier:
keyid:1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:05:68:20:f2:95:55:33:0d:cb:ee:b6:98:da:a3:32:9e:3e:
7a:db:8d:50:28:8e:e8:de:d9:66:d8:f6:05:e3:f5:19:0d:10:
e2:e1:49:ca:c6:e7:61:9a:d5:72:bb:0e:b3:ac:9f:31:04:b7:
26:39:00:4d:8a:45:c5:95:fb:af:7f:45:5b:56:fa:3c:80:fb:
8b:d3:fd:21:d7:e3:d3:b8:3c:79:29:3b:40:e0:6a:5a:20:62:
74:48:c9:a0:85:42:fa:5a:c2:87:82:87:b1:c7:0a:42:2c:67:
c4:69:dc:02:2f:90:aa:8d:b1:70:13:f3:aa:be:9b:78:6c:e7:
61:ea:3c:04:ed:d5:39:8b:6f:fd:37:9c:15:cc:f8:13:60:c6:
ef:14:99:d1:8f:e5:d4:50:6f:23:29:9f:d2:ee:35:2e:b4:16:
14:47:36:8a:70:38:2b:ee:9c:3e:18:8e:de:8c:17:22:0d:fd:
43:32:ee:c1:56:14:af:7c:9c:0a:7e:f0:5c:cd:b6:12:e4:1f:
9a:72:fe:66:a2:fd:db:22:9a:a6:b7:15:98:6b:0a:30:5c:f9:
c1:52:f5:c1:90:90:80:6e:ba:99:bb:e7:b7:3e:97:ec:cc:7f:
7d:fd:58:d7:8e:28:83:57:2b:41:fe:6c:97:be:23:50:ea:0c:
f0:ac:9a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:45:20 2026 by rpki-client