
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.mft
File: hlMymlHbxnnxvxfXkdg-x2ib564.mft (raw, json)
Hash identifier: 7nFp+vIQg7KTgEGTMmj58C+CUD1pgfnDub4Y5+WxsE0=
Subject key identifier: 39:EB:57:A5:20:3A:E9:01:34:D3:94:2E:6F:A3:29:B1:41:A1:1C:9C
Authority key identifier: 86:53:32:9A:51:DB:C6:79:F1:BF:17:D7:91:D8:3E:C7:68:9B:E7:AE
Certificate issuer: /CN=A91177D4/serialNumber=8653329A51DBC679F1BF17D791D83EC7689BE7AE
Certificate serial: 0940
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.mft
Manifest number: 0932
Signing time: Sun 18 Oct 2026 20:18:53 +0000
Manifest this update: Sun 18 Oct 2026 20:18:52 +0000
Manifest next update: Sun 25 Oct 2026 20:18:52 +0000
Files and hashes: 1: hlMymlHbxnnxvxfXkdg-x2ib564.crl (hash: 3GBybc3N1FTlq7BwNYjkgUYvaFbNmOFZtRgSnskWQBk=)
2: 2611C806D1AA11EA82C4313FC4F9AE02.roa (hash: jzcmk0I0njWf5x2x7k5YyVE7s86dKJbpV1xvAioVPhI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.crl
rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 20:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2368 (0x940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91177D4, serialNumber=8653329A51DBC679F1BF17D791D83EC7689BE7AE
Validity
Not Before: Oct 18 20:18:52 2026 GMT
Not After : Oct 25 20:18:52 2026 GMT
Subject: CN=6ad529ac-b0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:75:9d:f8:ed:ec:db:e0:db:d3:66:ba:95:
87:3c:20:64:54:96:2e:02:29:05:b5:59:f2:bd:26:
93:cb:2c:a2:9c:4d:ba:c8:2a:0e:a4:29:d6:dc:1b:
aa:c4:48:68:da:9a:77:bb:79:1e:c4:67:98:f9:c3:
0c:27:cb:69:bf:a0:e5:fa:81:a9:b0:e4:bb:1e:ee:
ae:aa:43:60:d3:29:24:cf:db:e4:22:36:98:6e:0b:
d0:cb:e0:75:1c:fb:f2:45:a2:76:53:b9:e3:b1:ae:
1c:f5:72:48:5a:62:4d:27:c1:99:ed:f8:69:f4:82:
30:94:93:b3:cd:04:42:0d:3b:71:e2:f1:ae:30:a9:
18:7a:8a:61:d4:04:ab:b0:65:50:83:e4:bb:f7:61:
c9:1a:96:62:b1:92:3f:cb:3a:86:17:d0:c8:89:0c:
ed:da:f2:6e:14:e0:44:f1:13:02:86:f5:53:ac:aa:
07:4b:75:49:2c:f7:d8:83:96:d7:22:92:78:01:f7:
5f:f2:b6:c8:46:27:eb:90:a6:64:63:b7:f9:f1:ea:
69:71:4c:a4:cd:a1:33:4d:f5:96:b4:7f:18:53:b2:
ea:ef:70:32:89:a0:a1:d3:13:f0:c5:bb:b5:3a:60:
a0:5d:32:0e:90:f4:18:e2:e8:35:47:91:f9:3c:6f:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EB:57:A5:20:3A:E9:01:34:D3:94:2E:6F:A3:29:B1:41:A1:1C:9C
X509v3 Authority Key Identifier:
keyid:86:53:32:9A:51:DB:C6:79:F1:BF:17:D7:91:D8:3E:C7:68:9B:E7:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a0:78:48:3f:4f:77:f9:c2:5a:d0:f6:6e:25:21:e9:38:c4:
43:16:8e:5f:b0:33:96:1e:47:86:9b:2b:34:6b:ca:89:a9:6b:
08:22:d8:c4:f4:03:a9:59:1a:75:c1:99:1b:da:45:9f:f6:ee:
74:fc:f4:ab:fb:9e:46:73:a9:c5:3c:fe:c8:81:c4:0a:c2:bf:
b9:9c:37:ca:bc:7c:d3:71:e3:c9:03:9c:38:14:ae:78:51:e7:
77:37:9e:74:5a:8d:2d:d3:84:aa:9e:0e:3e:94:2f:29:27:e7:
f1:25:53:5d:b0:6d:36:3f:cd:e7:30:b5:a1:41:3d:72:05:11:
54:fc:88:de:8b:16:f9:50:5a:5c:24:48:33:9a:42:df:e8:d0:
94:be:f1:3b:99:11:23:49:b8:7c:9a:34:f0:5b:9b:cc:33:b1:
5d:b2:e2:29:d8:3b:42:2f:86:85:53:d1:cd:a4:16:2a:09:61:
79:32:b0:67:64:33:51:1a:38:dc:85:cb:78:e2:45:28:b1:c3:
89:15:01:4e:eb:bb:2a:cb:2e:67:67:59:d9:d8:17:c2:99:25:
80:f7:f3:14:d3:c2:ea:5d:5d:b9:db:7e:c4:19:0c:68:b7:0e:
e1:f1:53:99:71:69:38:4d:95:a7:e7:49:d9:36:36:d3:42:75:
d4:70:8d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:46:54 2026 by rpki-client