
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
File: HUkvo_OylYBJWmiA1ATuDDcK2SU.mft (raw, json)
Hash identifier: p0dXxBS3MEauSII27oRkaF3F2RNW9yl1ZVyfJeJM3aI=
Subject key identifier: B2:23:FF:3C:C8:7D:DA:72:CC:1E:C6:57:AF:60:C0:B2:72:3B:F9:18
Authority key identifier: 1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
Certificate issuer: /CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
Manifest number: 088B
Signing time: Tue 24 Mar 2026 21:59:24 +0000
Manifest this update: Tue 24 Mar 2026 21:59:24 +0000
Manifest next update: Tue 31 Mar 2026 21:59:24 +0000
Files and hashes: 1: HUkvo_OylYBJWmiA1ATuDDcK2SU.crl (hash: qlQvE/vtBBiHuJipIBwYXAhTHltbA5pqecPVrgPzOIM=)
2: AE497F78EFD311F08FDE80E8366F56BC.roa (hash: X9jPCZEMWoGQ94NhhknprQOWplVin8VAtLLz669e5UE=)
3: D458065EF30B11F0A359DAA54E6F56BC.roa (hash: CujWoz7YSR3BrTm8n54jyD4+DKLImLUDsMDTDNYN3Ck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D963, serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Validity
Not Before: Mar 24 21:59:24 2026 GMT
Not After : Mar 31 21:59:24 2026 GMT
Subject: CN=69c3093c-da8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:02:9b:9c:62:f4:9e:a0:3c:20:4d:75:25:87:
61:d9:6e:cd:c5:22:dd:3a:11:ce:65:fa:71:05:3c:
3d:45:ec:3a:31:b0:ab:ec:51:ff:a8:03:d4:c9:8c:
86:b3:4a:0f:41:c5:ca:d8:fe:4b:ca:cf:84:a1:23:
2c:41:bf:0b:25:8c:ff:7e:22:da:b9:d3:50:b7:36:
a2:55:ca:20:07:87:16:04:47:46:ef:53:e5:9e:86:
b9:1b:b0:3c:4c:8e:51:1a:8b:e6:8b:a1:2c:fd:df:
57:21:4a:ed:11:c8:4e:53:62:bc:a2:47:c4:59:15:
d7:52:e7:4e:9c:2c:41:36:cd:21:ee:c9:99:7b:ec:
e4:17:7d:3f:18:2d:99:20:f2:8a:40:46:1f:2e:a9:
b0:ba:28:45:13:16:0e:b1:7b:42:ac:0f:1b:8f:13:
46:fa:34:60:71:9a:9a:61:07:33:7b:47:3f:96:14:
aa:41:67:34:88:22:50:ac:ef:10:36:30:c3:a2:76:
79:9b:41:26:3e:00:d4:ed:64:4b:a1:fd:ce:ed:1c:
16:9f:70:3c:bc:1b:ef:04:5f:11:e6:85:97:96:c7:
67:12:d3:cc:87:58:f3:0e:e6:f1:7b:8b:ab:70:5a:
97:1b:4b:0f:21:8f:de:e0:de:a6:b1:ff:cc:f9:f1:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:23:FF:3C:C8:7D:DA:72:CC:1E:C6:57:AF:60:C0:B2:72:3B:F9:18
X509v3 Authority Key Identifier:
keyid:1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:2c:92:8b:8b:f5:b8:7c:8e:2f:83:0e:1b:85:fa:d0:1f:18:
11:cc:2a:31:f5:0f:f0:cb:44:bd:fd:39:5a:53:97:3b:e9:5e:
2c:ec:93:36:55:da:10:02:f3:90:bb:69:3d:eb:6b:af:94:12:
11:b7:c5:0a:e4:9d:fd:36:e2:30:73:74:56:34:5e:0e:09:88:
54:07:8f:17:ff:ce:3b:56:74:bd:1c:e8:e1:9d:97:70:44:c5:
22:2f:91:db:11:5e:e3:d6:14:7b:33:f8:d4:ab:fc:3b:82:e8:
a8:29:38:a6:3e:78:76:2d:43:51:5f:d0:f3:fe:34:69:59:e1:
8a:1a:d6:4f:d1:3d:56:67:e0:b6:c7:ec:c1:64:f2:6a:12:d9:
5a:c4:e8:81:07:bd:f2:49:e4:23:12:60:1d:49:d1:1e:08:8a:
47:75:38:54:2e:eb:c4:23:cd:46:08:be:c5:04:ef:07:f7:1e:
8f:40:58:44:57:a4:01:a7:5e:55:ad:26:04:cd:6a:f2:26:b4:
8a:a1:03:87:f6:ff:2f:a5:3e:4a:5f:2e:48:14:86:5a:a8:9c:
0a:72:38:15:84:9c:4b:da:43:a5:b1:92:52:fa:56:a5:05:ab:
75:32:9c:d4:7e:0f:ae:21:f4:73:93:cb:cd:49:28:c3:a7:d2:
01:1d:25:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:50 2026 by rpki-client