
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json)
Hash identifier: NcEt0Fp5CzhxO3+uVykA2UEEIazJEWytNpiqY1HyVaw=
Subject key identifier: E3:67:2F:EB:0C:26:29:9E:EC:3D:7A:69:86:5C:05:87:01:9F:17:F6
Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F
Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F
Certificate serial: 027E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
Manifest number: 0270
Signing time: Thu 23 Jul 2026 03:17:36 +0000
Manifest this update: Thu 23 Jul 2026 03:17:36 +0000
Manifest next update: Thu 30 Jul 2026 03:17:36 +0000
Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: YeFdo7dNrRFbrYCq58mJ+fhKw3UcIYxH+XFNWLYlTdQ=)
2: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: yD5FYCPErZgPY0yX40dpogtlEWrDeZjOT8LtPpUMuck=)
3: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: uPSJvajAQINjQlYTF7zaoX95KpMnomn9ZGEL6XXGiq0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl
rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F
Validity
Not Before: Jul 23 03:17:36 2026 GMT
Not After : Jul 30 03:17:36 2026 GMT
Subject: CN=6a6187d0-806d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:d1:89:27:89:d7:4e:6e:72:34:8d:46:39:
0b:95:2b:a8:3f:9d:3a:f6:88:b8:ef:0e:bc:a0:84:
60:36:80:1b:d2:54:b4:a6:cf:62:62:af:96:fe:88:
39:81:85:c3:f3:29:b6:c5:41:46:97:6a:e6:84:4a:
80:c7:15:eb:7d:51:8b:34:b7:7b:5a:22:0a:e1:2e:
a3:9b:75:a6:74:3b:93:fe:51:4b:a6:87:88:5b:6c:
7c:49:7d:d5:9d:84:b0:b5:59:7d:78:fd:4b:b1:29:
93:53:86:10:07:41:20:dc:36:a5:8c:0d:55:b3:d4:
1a:55:4a:1a:b9:d9:ef:bd:df:7a:3e:b4:24:b1:21:
22:77:94:3d:e5:c7:5e:18:a6:5f:68:a5:ad:39:66:
49:7d:b2:36:49:a5:3a:86:61:22:77:17:e2:aa:9f:
fc:9c:b5:ef:29:0e:28:e2:a4:63:f8:7f:17:92:b8:
a7:5c:e6:0f:89:b5:48:e5:43:55:9e:af:a2:ab:d1:
ef:c0:59:e6:73:8b:17:e7:24:e9:1e:b9:c3:4e:46:
7d:02:dd:88:f0:99:31:96:70:b3:43:4e:03:0c:40:
1b:71:a1:81:9b:df:3d:1f:f4:e1:8f:93:5c:49:bd:
14:70:b4:4d:39:5a:35:67:6d:50:68:5e:72:a8:ba:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:67:2F:EB:0C:26:29:9E:EC:3D:7A:69:86:5C:05:87:01:9F:17:F6
X509v3 Authority Key Identifier:
keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:a8:c3:a2:d7:0d:69:bc:77:26:f2:8d:e2:46:90:e1:77:67:
28:82:85:2c:2d:8f:bd:b2:09:24:6d:4f:a2:44:43:52:c5:89:
0f:98:ff:77:be:65:05:23:7a:9e:71:e5:ba:07:38:9f:6b:40:
c6:d6:6a:37:c0:f5:8b:fb:4b:0a:72:e4:4b:c1:63:6d:20:1c:
f3:96:53:5b:79:6f:f8:dd:1f:0b:ff:fe:bd:b2:62:a1:85:64:
8c:e3:be:bc:4f:d4:9c:14:0b:f2:f5:d7:99:17:c9:1b:44:9d:
5b:db:5d:e5:65:43:50:77:b2:53:5a:c6:9d:ac:3d:fa:4f:4a:
ca:f0:76:00:21:d4:54:a5:f5:c0:98:f5:75:5b:cf:f9:c6:f1:
40:e8:a4:46:8b:22:3b:b6:ff:67:ec:c2:3b:23:e8:53:a6:bc:
86:b5:93:dc:90:0a:c1:4e:e3:29:7c:7d:84:96:ce:85:22:c4:
4a:6a:64:3d:eb:05:72:44:2b:61:27:8d:35:8f:1e:08:77:57:
e2:a8:54:0d:ed:7e:1d:06:1a:2d:b8:dd:ec:a6:0b:b0:4b:fc:
62:98:d7:9d:21:e6:2d:cf:7d:5b:bf:6a:cb:b4:45:b0:00:32:
65:29:fa:ee:08:30:f6:29:3c:84:db:e3:08:a5:81:4d:60:2f:
2a:66:d8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:11 2026 by rpki-client