
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
File: HUA-MjAeWHgKBwV8syty7K9G19k.mft (raw, json)
Hash identifier: e22fyxlp5UyScXS8pYPJRRPPodyK9SRn57twSu+J0H8=
Subject key identifier: B4:5A:A1:38:58:C1:FD:44:8A:28:A0:56:84:B0:76:38:53:86:44:E3
Authority key identifier: 1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9
Certificate issuer: /CN=A91FA645/serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
Certificate serial: 0486
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
Manifest number: 0477
Signing time: Wed 13 May 2026 00:12:00 +0000
Manifest this update: Wed 13 May 2026 00:12:00 +0000
Manifest next update: Wed 20 May 2026 00:12:00 +0000
Files and hashes: 1: HUA-MjAeWHgKBwV8syty7K9G19k.crl (hash: 36hZtQlbg9LBrfFbLua4RAewJwG9e6EHqonkSIRcIuA=)
2: F4639D76356211F09A66C487C4F9AE02.roa (hash: 1UN4KPGqZ6uoZhzgBcPw2J3Eo3ejGF+DzvEQ3A+zIIk=)
3: 76EBCD3E8C9911ECB051A327C4F9AE02.roa (hash: 2+6KJayAWnQFJXHL2WauDqgBMec8ccqiiY0r+7oqsgs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl
rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1158 (0x486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA645, serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
Validity
Not Before: May 13 00:12:00 2026 GMT
Not After : May 20 00:12:00 2026 GMT
Subject: CN=6a03c1d0-2cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:2a:3e:10:28:f9:27:f7:2e:27:c5:45:83:
d8:19:c5:cc:cd:35:f7:8a:a1:fd:f9:a7:a2:7b:8f:
2a:fc:55:d8:a0:c7:86:1f:1c:96:7c:a8:82:d6:33:
4b:39:2a:82:a8:23:7a:64:69:e7:e0:24:ad:de:6d:
c6:ee:95:50:70:4a:71:be:22:00:f6:64:91:b9:ba:
3a:52:c1:6e:27:a7:c7:ea:81:90:fb:94:fa:c0:c4:
ef:2d:21:78:e7:74:36:8c:49:fe:33:52:0b:d3:39:
14:80:ef:c0:39:77:a1:46:8a:ca:01:73:2a:2e:bf:
6c:2f:b1:0a:fb:d5:7c:f1:55:17:ea:76:2d:42:ac:
12:d9:ac:e2:50:0c:cb:fc:7e:27:50:94:e0:de:da:
5f:da:b0:42:05:84:d5:8c:89:34:95:d8:04:8f:d7:
d9:ed:d3:3b:b3:a4:de:28:41:5c:58:81:3c:3e:73:
cb:71:f8:5e:2e:76:ff:04:e9:e2:4b:28:a6:4a:f8:
cc:77:f9:20:6f:6a:12:cb:6d:be:17:8f:32:a3:96:
b7:69:29:58:ea:e2:d5:69:a8:9c:5b:66:62:f1:3f:
1e:06:d1:e5:8f:ee:ef:0e:36:37:b9:ba:b1:0f:1b:
cd:67:8e:a2:be:1a:e9:28:32:9f:9c:e5:f1:a4:60:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5A:A1:38:58:C1:FD:44:8A:28:A0:56:84:B0:76:38:53:86:44:E3
X509v3 Authority Key Identifier:
keyid:1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:51:7f:54:af:df:d6:28:04:3e:f7:4f:a0:1e:75:b3:ec:05:
67:91:99:62:6a:ad:ea:07:2c:97:7d:e5:3e:60:f9:b1:73:9e:
8e:8f:69:86:5d:41:ba:2f:b2:e5:7e:10:9b:c0:75:13:62:d6:
8d:ce:f2:ee:cf:bf:a1:2a:c5:9d:58:1d:b7:f7:5c:13:3b:5b:
0b:22:59:58:2d:cd:ff:7f:8a:90:75:d8:09:2b:e9:81:77:3a:
0e:54:a8:36:a5:2e:2d:38:dd:2b:8a:0f:7e:2d:d3:81:52:dc:
d9:4a:71:83:bc:f4:ed:fb:3a:25:f1:e2:80:44:0d:13:38:2a:
ab:49:15:ba:2d:52:aa:f7:4e:3f:9d:51:cb:f1:73:67:86:b8:
b0:fe:95:be:32:6e:50:3a:62:73:2c:0e:ec:68:3c:95:52:47:
1a:0a:6a:fa:78:79:6a:d1:43:e4:6a:70:04:06:27:c0:58:f5:
74:e3:0e:6a:67:94:28:b0:d9:ca:d5:a3:f8:f6:86:bf:41:8f:
09:c8:d1:57:34:28:83:10:b8:e4:d3:dd:7f:db:4a:6e:5e:f4:
27:b1:5f:8e:3d:2f:47:f5:2b:0b:9e:56:87:7e:49:9f:57:3a:
40:fb:ee:85:1e:f4:2c:17:18:51:9a:09:d9:f1:bc:a5:a3:2e:
02:2e:04:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:45:58 2026 by rpki-client