
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
File: HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json)
Hash identifier: pZO0wENkcruI0TeSHmi1/Pp+h+vw3EF7DgA0rVyQN4Y=
Subject key identifier: CB:F1:35:3B:5C:E1:77:B6:2E:56:5E:9E:9A:C8:6D:38:ED:13:5E:6A
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial: 0241
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
Manifest number: 0229
Signing time: Thu 23 Jul 2026 04:06:08 +0000
Manifest this update: Thu 23 Jul 2026 04:06:08 +0000
Manifest next update: Thu 30 Jul 2026 04:06:08 +0000
Files and hashes: 1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: RCCnDnjUH8Sp9ReIO4PyoGKIFEiz6BpAP9GjfIzWLsk=)
2: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: +rjbca/NG9q7zWTrWpjMJftRcPfM//W/HUIpnTX4nPE=)
3: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: RQ/EfLMrrJ/X3PS3AL1VNJyNJGsjiJ0HkUJPHHuU2ZI=)
4: F9F53948599011EEB54F7158C4F9AE02.roa (hash: GXFMT6PzwPtBUSZwV4Os9TF+cE8bPf2hVfP0jiPGj7s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Validity
Not Before: Jul 23 04:06:08 2026 GMT
Not After : Jul 30 04:06:08 2026 GMT
Subject: CN=6a619330-ea9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:ae:d5:1a:ba:c6:c7:48:af:ba:19:be:ef:
b2:d0:14:71:24:12:74:dc:51:0a:e9:a4:ac:79:a4:
97:f5:15:cd:d1:7b:39:72:f7:89:62:23:e3:bb:5f:
72:55:66:e2:70:d0:a4:c4:ea:e3:f7:69:63:d6:48:
19:9b:28:bb:54:19:dd:d8:24:10:0d:d6:6d:ea:51:
2b:8c:c8:43:61:17:7e:fb:ca:e4:ed:8c:5b:63:aa:
45:18:83:9c:0e:e9:87:72:e7:e3:1c:72:f7:64:c1:
ad:1b:7f:a1:11:9c:00:47:8a:ee:2f:cd:1d:3b:34:
b4:01:f6:c2:79:65:e2:8a:d1:db:ee:6b:7d:a1:e1:
dc:e7:ff:30:37:fe:9a:a2:23:1f:30:88:2c:21:9a:
1e:df:5f:e0:62:5d:55:af:50:81:6c:b3:8a:b5:9f:
2f:83:c6:ec:d7:bb:b3:aa:82:0d:d7:6f:f8:da:1c:
31:8a:6c:a8:31:7b:8d:f9:18:d3:0b:5f:4f:7f:50:
ae:de:a4:70:a7:61:bf:b4:81:24:66:5b:1c:df:8e:
b2:1a:7b:cc:f2:13:ac:d3:e8:32:2b:2f:cc:74:78:
f7:84:f7:f9:b0:cf:41:5a:a3:9d:b3:7c:34:02:f4:
7a:ce:67:cf:67:ba:4a:48:de:e1:96:50:69:d2:0d:
70:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F1:35:3B:5C:E1:77:B6:2E:56:5E:9E:9A:C8:6D:38:ED:13:5E:6A
X509v3 Authority Key Identifier:
keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b7:52:d7:2b:f5:dc:a9:2e:62:52:e4:09:38:52:7f:96:df:
cc:86:6b:79:2c:2e:80:70:a2:32:e7:e6:cc:b6:08:e0:5a:dc:
12:02:50:14:51:d2:cd:46:fe:1d:2f:ae:dc:ed:79:13:40:19:
79:f4:bc:1f:34:7a:26:09:6e:db:57:50:56:21:2e:c8:86:c2:
bf:86:5f:9d:cf:b8:3a:94:a7:25:a9:34:57:e6:59:0e:b0:cb:
8f:12:46:76:1a:6a:6e:f3:80:c7:7d:34:63:ce:8d:48:ff:f2:
af:c2:d3:be:b1:f9:07:d8:6a:f8:44:3b:97:99:a7:d1:ef:28:
39:2b:d8:20:17:56:cd:c7:39:26:97:79:c3:f8:ef:48:ce:9b:
fe:7c:84:0a:93:88:0b:df:40:bc:53:d0:ed:eb:1e:68:f2:23:
f0:ec:bb:09:22:aa:6d:a8:9f:34:8d:09:05:e0:25:8e:ff:50:
63:af:7d:56:eb:89:d2:b3:4c:f7:e6:91:4f:8a:e4:c8:cf:d3:
2a:7b:55:21:1b:80:e3:81:fe:3c:52:32:b1:a7:e8:21:bc:69:
73:70:bc:0e:73:48:1d:5d:9b:22:fc:2b:b8:d2:5c:32:f0:f8:
6f:52:17:5a:fd:fb:f9:8b:ad:bf:f5:97:23:88:53:c8:34:31:
50:7b:13:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNBMzExMTAvBgNVBAUTKDFFRjMwQzRDNTYwNEE1NkVDQjNFQUVFN0YyQ0E5N0VC
NzgxMDUwNzAwHhcNMjYwNzIzMDQwNjA4WhcNMjYwNzMwMDQwNjA4WjAYMRYwFAYD
VQQDEw02YTYxOTMzMC1lYTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxX6u1Rq6xsdIr7oZvu+y0BRxJBJ03FEK6aSseaSX9RXN0Xs5cveJYiPju19y
VWbicNCkxOrj92lj1kgZmyi7VBnd2CQQDdZt6lErjMhDYRd++8rk7YxbY6pFGIOc
DumHcufjHHL3ZMGtG3+hEZwAR4ruL80dOzS0AfbCeWXiitHb7mt9oeHc5/8wN/6a
oiMfMIgsIZoe31/gYl1Vr1CBbLOKtZ8vg8bs17uzqoIN12/42hwximyoMXuN+RjT
C19Pf1Cu3qRwp2G/tIEkZlsc346yGnvM8hOs0+gyKy/MdHj3hPf5sM9BWqOds3w0
AvR6zmfPZ7pKSN7hllBp0g1wHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMvxNTtc
4Xe2LlZenprIbTjtE15qMB8GA1UdIwQYMBaAFB7zDExWBKVuyz6u5/LKl+t4EFBw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0EzMS8wOTBGMTRGQTUw
MEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBXN0xQcTduOHNxWDYzZ1FV
SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVIQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0EzMS8wOTBGMTRGQTUwMEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBX
N0xQcTduOHNxWDYzZ1FVSEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApLdS1yv13KkuYlLkCThSf5bfzIZreSwugHCiMufmzLYI4FrcEgJQFFHSzUb+
HS+u3O15E0AZefS8HzR6Jglu21dQViEuyIbCv4Zfnc+4OpSnJak0V+ZZDrDLjxJG
dhpqbvOAx300Y86NSP/yr8LTvrH5B9hq+EQ7l5mn0e8oOSvYIBdWzcc5Jpd5w/jv
SM6b/nyECpOIC99AvFPQ7eseaPIj8Oy7CSKqbaifNI0JBeAljv9QY699VuuJ0rNM
9+aRT4rkyM/TKntVIRuA44H+PFIysafoIbxpc3C8DnNIHV2bIvwruNJcMvD4b1IX
Wv37+Yutv/WXI4hTyDQxUHsTIw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:26:36 2026 by rpki-client