
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
File: HUkvo_OylYBJWmiA1ATuDDcK2SU.mft (raw, json)
Hash identifier: GJfUfPhH6pjdVdciXC9erJobxuVsELLID5V9xznjChU=
Subject key identifier: 01:2B:6B:39:87:5E:62:6F:1A:02:1A:12:F3:1B:11:26:F2:E5:CF:B1
Authority key identifier: 1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
Certificate issuer: /CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Certificate serial: 0232
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
Manifest number: 094F
Signing time: Tue 22 Sep 2026 21:44:36 +0000
Manifest this update: Tue 22 Sep 2026 21:44:35 +0000
Manifest next update: Tue 29 Sep 2026 21:44:35 +0000
Files and hashes: 1: HUkvo_OylYBJWmiA1ATuDDcK2SU.crl (hash: DdoP1fy7xYGsk+9aWmEXVhogXcwJXn0eCT2SFp7TVKI=)
2: D458065EF30B11F0A359DAA54E6F56BC.roa (hash: BBzU6l7+Aet7tiGxkuZJg3JEsicg6f9k+Y/7Tu2inB8=)
3: E768261A9F7311F19D1E40ED3811F970.roa (hash: OTq84YSmYhACPfKL6z7p5F1RxHk3Gcm+eYjbuPACkA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D963, serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Validity
Not Before: Sep 22 21:44:35 2026 GMT
Not After : Sep 29 21:44:35 2026 GMT
Subject: CN=6ab2f6c4-f42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0f:28:f9:25:7f:2b:e6:e8:f5:70:14:cb:c9:
f0:c9:23:e6:0c:aa:fa:da:d4:1e:b8:59:10:9c:ad:
a8:92:d5:cc:ba:b0:00:4e:62:83:33:90:d0:9b:b1:
17:17:e2:6a:79:ff:ea:77:9f:e3:12:1a:17:3c:69:
3f:50:a5:d0:f6:0c:8b:53:34:19:e8:b9:83:75:32:
e0:d3:d8:b8:cf:1a:ea:ff:6b:a3:b9:5e:cd:82:04:
60:6d:18:d7:40:25:f3:3c:7f:9e:40:50:d5:33:63:
14:d5:84:98:0a:1c:7e:0a:6c:22:4b:ad:1f:54:11:
0b:b4:9e:3d:ac:5c:71:86:96:16:b7:c2:c9:fd:a5:
27:7b:38:94:09:85:96:8f:6c:02:4b:0e:0b:ff:a7:
1f:5d:7e:7c:05:8a:43:da:76:51:b5:ff:b0:c5:83:
eb:dd:fa:62:4a:8c:65:b8:93:08:a8:43:b4:9d:43:
7a:66:e8:e6:59:38:19:26:18:31:74:b1:64:31:9e:
b5:1f:b8:4f:ce:8f:07:83:16:c0:11:f0:88:a8:95:
2a:92:d6:3c:7c:60:e8:14:be:ed:17:0f:6d:3d:40:
10:88:c7:9c:78:1a:92:e4:78:46:a8:09:02:51:f7:
65:0f:11:40:6a:c7:11:47:23:bd:ad:f2:e9:10:01:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2B:6B:39:87:5E:62:6F:1A:02:1A:12:F3:1B:11:26:F2:E5:CF:B1
X509v3 Authority Key Identifier:
keyid:1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:08:55:b8:2b:b4:af:80:ff:01:42:53:e8:55:eb:c8:f1:9a:
d4:4e:46:1d:74:4d:91:37:b5:f5:b3:7f:7c:9c:6a:21:b5:6d:
ff:98:a9:6b:8c:e6:fb:d1:77:77:85:70:4e:28:0b:8d:2a:68:
a8:8d:bb:74:7a:92:9e:28:6f:1a:c7:90:5f:d8:f0:32:21:9a:
ec:b0:72:3c:e1:fb:83:91:1b:56:50:a5:43:06:73:4d:26:6e:
67:96:da:44:89:23:2b:10:14:ca:f5:7d:cc:cd:a8:76:c2:b9:
b4:b0:de:2a:95:06:af:e9:b8:94:be:7f:97:94:5e:00:5a:b2:
19:f4:df:2e:fc:ed:7d:e1:a6:e7:5b:40:06:d2:6a:f1:09:a1:
d4:b0:e1:6b:fc:96:53:d9:f3:fb:3f:92:41:8d:08:39:84:03:
d8:ae:62:02:32:03:aa:fb:31:d3:a0:e3:89:2b:e2:67:2c:96:
21:da:7f:e7:fb:b1:50:52:fa:e0:0b:63:51:7e:01:5a:2e:4c:
50:c0:c2:d8:e0:1d:80:06:33:c6:a7:bd:44:f0:0d:cb:b4:91:
70:00:ad:fe:42:75:68:b2:27:8e:c2:99:94:47:62:61:03:dd:
1f:d8:02:88:cf:90:fa:11:39:c9:2e:ef:7e:82:1d:53:e3:3c:
b0:39:9e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:20:22 2026 by rpki-client