
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
File: HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json)
Hash identifier: H/D1IareN+QBPpiuIuIRLlt8dHKhB0IdgSz+DtVd+wU=
Subject key identifier: 01:F2:0F:64:4C:7D:1F:F6:33:8A:F6:3D:60:8B:0E:4C:61:F9:15:F7
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
Manifest number: 0206
Signing time: Wed 13 May 2026 03:16:38 +0000
Manifest this update: Wed 13 May 2026 03:16:38 +0000
Manifest next update: Wed 20 May 2026 03:16:38 +0000
Files and hashes: 1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: hT0C0hJqMmKC+KiOxUIF2M6Y7+tZy3UWsdRNcKwJaOY=)
2: F9F53948599011EEB54F7158C4F9AE02.roa (hash: GXFMT6PzwPtBUSZwV4Os9TF+cE8bPf2hVfP0jiPGj7s=)
3: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: +rjbca/NG9q7zWTrWpjMJftRcPfM//W/HUIpnTX4nPE=)
4: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: RQ/EfLMrrJ/X3PS3AL1VNJyNJGsjiJ0HkUJPHHuU2ZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Validity
Not Before: May 13 03:16:38 2026 GMT
Not After : May 20 03:16:38 2026 GMT
Subject: CN=6a03ed16-2dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:ef:57:18:62:03:79:c2:e1:83:62:11:e5:
75:d8:b4:ae:68:ca:5c:a3:8c:ec:30:80:9f:88:22:
60:34:39:75:83:25:ac:29:cf:98:8c:ae:6c:86:d9:
bc:6c:af:62:80:e7:03:b1:45:4b:ce:bc:18:32:7d:
12:05:86:ac:2c:85:60:ba:ed:51:44:99:4f:10:c6:
01:77:5e:2b:65:c8:90:eb:c8:40:ab:84:86:d1:69:
a9:0b:cd:ef:29:d6:60:c4:83:70:b8:09:7c:da:34:
f0:80:f9:3e:2b:af:ed:00:2b:4c:b2:e3:02:e2:c1:
3d:53:7b:b0:7d:b5:8b:af:c9:d4:85:f5:2d:64:34:
81:aa:3e:74:ac:87:00:c8:24:d8:a4:dd:8f:ee:82:
8f:0b:e4:e3:c0:a0:39:5d:db:6d:04:0f:00:2a:93:
4a:3d:92:65:36:86:4c:80:c0:27:a5:fb:ee:2b:34:
8b:5c:d4:57:4b:09:87:7e:9a:f0:7f:26:f2:fa:26:
76:14:be:98:1d:1b:aa:d0:0d:5c:99:55:9a:fa:92:
c5:34:e3:c8:dc:45:54:70:f7:3b:c9:9d:b2:5e:ac:
83:88:dd:d2:8b:02:f9:ca:ec:b1:1d:51:c9:08:63:
95:af:0e:75:73:e4:0e:7a:3f:b8:15:c2:ac:cc:d1:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F2:0F:64:4C:7D:1F:F6:33:8A:F6:3D:60:8B:0E:4C:61:F9:15:F7
X509v3 Authority Key Identifier:
keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d0:f7:b0:b2:81:06:79:61:88:df:50:e1:de:6c:3e:f2:9a:
55:77:c1:8f:b7:a6:ae:9c:ce:d6:56:af:12:6b:ea:c8:36:2a:
0e:c6:6e:96:95:6a:0e:8a:b9:3b:16:6d:5b:f3:e5:f7:a7:00:
b3:09:6d:3c:b7:83:e4:96:87:e3:c2:49:ef:56:14:5a:82:17:
b9:23:e2:a0:e5:14:7a:67:eb:00:a0:eb:22:28:75:f5:7a:0b:
60:a2:76:11:4e:d4:7a:a2:4b:ef:8c:39:1b:59:02:93:30:e8:
65:62:80:3a:ee:c7:fc:c7:fa:e0:96:91:9f:4c:df:54:61:22:
5f:e2:d6:62:75:d9:fa:d5:4c:c2:4e:a6:76:e1:1f:ac:11:10:
92:a0:2e:67:52:e3:c0:57:df:a8:00:2f:91:d4:96:4f:87:a5:
07:72:f5:f5:43:55:1c:da:35:25:cc:37:0c:c1:e9:3e:e8:58:
99:1a:9f:00:07:1e:7f:60:f2:db:1b:b5:4c:cb:41:75:a3:21:
67:13:8a:5d:d2:0d:ba:34:1f:d5:5e:e9:9f:61:75:c7:81:9a:
84:65:b1:9a:7a:cc:3d:10:5e:d1:d8:46:a6:54:8b:f5:9c:f7:
df:79:87:60:f6:48:d7:64:50:15:3e:dc:54:75:20:2d:dd:71:
64:ea:c8:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNBMzExMTAvBgNVBAUTKDFFRjMwQzRDNTYwNEE1NkVDQjNFQUVFN0YyQ0E5N0VC
NzgxMDUwNzAwHhcNMjYwNTEzMDMxNjM4WhcNMjYwNTIwMDMxNjM4WjAYMRYwFAYD
VQQDEw02YTAzZWQxNi0yZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4DTvVxhiA3nC4YNiEeV12LSuaMpco4zsMICfiCJgNDl1gyWsKc+YjK5shtm8
bK9igOcDsUVLzrwYMn0SBYasLIVguu1RRJlPEMYBd14rZciQ68hAq4SG0WmpC83v
KdZgxINwuAl82jTwgPk+K6/tACtMsuMC4sE9U3uwfbWLr8nUhfUtZDSBqj50rIcA
yCTYpN2P7oKPC+TjwKA5XdttBA8AKpNKPZJlNoZMgMAnpfvuKzSLXNRXSwmHfprw
fyby+iZ2FL6YHRuq0A1cmVWa+pLFNOPI3EVUcPc7yZ2yXqyDiN3SiwL5yuyxHVHJ
CGOVrw51c+QOej+4FcKszNHoPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAHyD2RM
fR/2M4r2PWCLDkxh+RX3MB8GA1UdIwQYMBaAFB7zDExWBKVuyz6u5/LKl+t4EFBw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0EzMS8wOTBGMTRGQTUw
MEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBXN0xQcTduOHNxWDYzZ1FV
SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVIQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0EzMS8wOTBGMTRGQTUwMEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBX
N0xQcTduOHNxWDYzZ1FVSEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqtD3sLKBBnlhiN9Q4d5sPvKaVXfBj7emrpzO1lavEmvqyDYqDsZulpVqDoq5
OxZtW/Pl96cAswltPLeD5JaH48JJ71YUWoIXuSPioOUUemfrAKDrIih19XoLYKJ2
EU7UeqJL74w5G1kCkzDoZWKAOu7H/Mf64JaRn0zfVGEiX+LWYnXZ+tVMwk6mduEf
rBEQkqAuZ1LjwFffqAAvkdSWT4elB3L19UNVHNo1Jcw3DMHpPuhYmRqfAAcef2Dy
2xu1TMtBdaMhZxOKXdINujQf1V7pn2F1x4GahGWxmnrMPRBe0dhGplSL9Zz333mH
YPZI12RQFT7cVHUgLd1xZOrITw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:55:09 2026 by rpki-client