
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
File: hlng_trNtpATntXTNVh0di16GJ0.mft (raw, json)
Hash identifier: k7ZE6zkP9rg3/H+yKE+sziZmyRhSZU8hhb+Ysl10OJ8=
Subject key identifier: AC:19:97:BD:B0:D1:E6:C6:46:A8:7A:E3:B2:BD:ED:19:CC:3C:24:56
Authority key identifier: 86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
Certificate issuer: /CN=A91AC0BB/serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
Manifest number: 0D
Signing time: Sun 05 Apr 2026 08:28:23 +0000
Manifest this update: Sun 05 Apr 2026 08:28:22 +0000
Manifest next update: Sun 12 Apr 2026 08:28:22 +0000
Files and hashes: 1: hlng_trNtpATntXTNVh0di16GJ0.crl (hash: nndyqtJNx2kclmAbrKAX9fzM0o8hI1YuU+SYul+pRKo=)
2: 76DAAFAA251911F182F11CF1C0833773.roa (hash: uwccILNOfn3op7dK+stqfjkg9anKckOvjcXt+VX9yxw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl
rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC0BB, serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
Validity
Not Before: Apr 5 08:28:22 2026 GMT
Not After : Apr 12 08:28:22 2026 GMT
Subject: CN=69d21d27-db5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8c:b3:8d:98:b6:78:c8:e3:3b:e4:b8:46:76:
91:ed:e6:7b:71:63:c7:f6:d2:57:68:79:dd:63:19:
e8:53:60:74:eb:4f:b2:50:c2:b2:8e:d3:1a:64:e8:
b8:9c:32:a4:f0:f5:72:c9:a2:8b:73:39:9f:32:d0:
9c:f4:67:3d:31:6a:2c:20:bd:81:3c:37:82:bf:9e:
c3:50:d8:4e:cd:a5:12:a5:80:b1:5e:d8:77:78:fa:
6c:2d:bd:7d:ab:fd:2d:6c:3e:c5:5b:34:00:aa:ce:
0b:b2:40:c0:dd:81:6f:74:98:d5:04:f0:0d:a3:4e:
ec:06:d8:cb:e1:73:59:ae:e2:07:00:0c:eb:ee:23:
8a:18:44:9f:66:27:66:f6:3f:b9:c8:30:26:38:7a:
b8:63:96:ff:a5:63:86:0c:05:33:52:af:2e:a8:91:
47:bc:ef:6c:b7:d4:79:92:ca:69:6d:3f:47:a4:f0:
61:f3:64:88:51:8c:ff:e1:05:a4:33:3c:3c:20:8f:
81:41:2b:8b:3a:fc:58:8a:87:f3:1f:fc:da:3a:ff:
bc:29:fb:f4:76:f0:f8:c7:d9:cf:07:d6:e9:b5:09:
e9:45:d1:c2:1b:c9:8a:b5:11:e4:34:d2:16:1a:aa:
78:ab:33:3e:fb:b6:bf:06:29:b4:56:c9:94:d9:89:
77:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:19:97:BD:B0:D1:E6:C6:46:A8:7A:E3:B2:BD:ED:19:CC:3C:24:56
X509v3 Authority Key Identifier:
keyid:86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8a:47:25:f6:21:dd:4a:c1:40:52:70:39:a3:4f:b0:c2:13:
89:f0:2d:45:d9:94:bb:ba:1a:55:dd:1a:6f:36:94:d7:1c:90:
1e:76:88:9c:4a:dd:20:2c:1d:13:ee:18:f2:d4:12:ce:3b:97:
18:95:e6:f1:08:c7:4e:f0:07:10:28:2e:4d:a7:f3:85:33:c3:
cb:8e:f3:57:7e:a9:96:ed:57:23:05:85:c9:46:b7:c8:2d:66:
a3:dd:b0:99:9e:f6:f8:a7:7f:38:ef:20:6b:75:cc:c6:e8:0e:
50:8a:61:8c:41:b2:6d:ce:95:87:27:4c:c8:42:b9:1d:e6:a9:
22:d2:e5:bd:c6:ba:53:45:be:7a:84:0b:55:1b:4a:14:66:21:
ef:b4:54:64:cc:ea:14:87:1d:8a:4c:79:9a:59:51:0b:8a:bc:
42:ef:e2:bb:60:44:f3:6b:82:83:39:ee:de:d7:3b:13:7c:58:
67:b0:5a:19:a0:1e:f0:43:91:3c:e8:62:78:6c:24:cc:59:20:
61:68:6b:09:dd:f9:2b:16:f4:ae:c5:dc:8c:ff:bb:f2:1b:f0:
97:d6:6c:3f:3d:7d:a7:fb:f5:33:16:30:a4:cc:16:f5:d6:7b:
b8:5e:1d:2c:60:9e:ec:dd:f2:b5:bf:8a:6d:79:3b:61:a9:f4:
01:76:23:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:13 2026 by rpki-client