
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
File: HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json)
Hash identifier: JA7F/xxaFbiziD2PJcn2GGjrWp/Bbs75PxX0lc/zIhg=
Subject key identifier: C9:5C:1A:84:52:4F:3E:70:0A:03:80:D1:87:48:44:EC:02:A0:54:53
Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71
Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
Certificate serial: 1A1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
Manifest number: 1A04
Signing time: Mon 22 Jun 2026 16:20:03 +0000
Manifest this update: Mon 22 Jun 2026 16:20:02 +0000
Manifest next update: Mon 29 Jun 2026 16:20:02 +0000
Files and hashes: 1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: BSSJN36eFbAP8/taLStc4Csyr1lc/b0X/OVMTZJ6Ugg=)
2: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: UVagvNv2xQNSD/DTi1pYnkPAd6yaMMHes6alyvk08Ew=)
3: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: whf91COmOS4nmBy8X3NCysn1mTlxA8VZykZt4Rg2IFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl
rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6686 (0x1a1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
Validity
Not Before: Jun 22 16:20:02 2026 GMT
Not After : Jun 29 16:20:02 2026 GMT
Subject: CN=6a3960b3-5f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:75:ca:64:70:bc:39:95:cf:4a:d2:8a:1b:
0b:8d:9e:3a:b4:6c:38:bf:21:9e:4c:eb:c6:e9:82:
15:82:fc:58:4d:f1:6b:2f:6d:df:3a:a1:7f:ae:f0:
46:9d:87:e9:b9:e0:39:54:b2:7d:0a:d8:fc:24:21:
24:ea:31:5d:cc:31:60:8d:4f:cd:e8:4a:98:ac:61:
0d:65:2a:4e:e6:b2:be:ad:41:f7:3b:6b:0d:30:4a:
be:57:fd:8a:79:8e:e6:69:37:6b:a6:a2:24:90:db:
94:9a:13:24:96:87:49:48:8c:35:0b:60:26:d1:34:
0d:54:88:cc:5a:5d:c6:51:b3:a2:4c:5f:73:46:19:
80:d7:84:1d:4a:7c:4b:4a:39:a0:48:96:e0:22:70:
a9:a2:79:50:1c:ea:42:85:06:53:6f:68:4c:fc:ba:
56:51:ea:18:43:65:20:0d:20:c8:cc:6e:31:53:16:
40:d1:e0:2d:91:d1:24:87:dc:a3:65:5c:83:dc:df:
a6:37:ac:49:19:5c:9a:90:f1:a8:88:bb:90:f7:ce:
b3:0c:ca:aa:5b:63:4d:f1:8d:c1:9e:09:17:70:c0:
fd:18:00:51:8d:52:86:2a:95:89:90:1c:63:8f:6e:
d7:37:8c:f1:6c:63:52:3c:e5:e5:9a:c4:bb:d8:ba:
55:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5C:1A:84:52:4F:3E:70:0A:03:80:D1:87:48:44:EC:02:A0:54:53
X509v3 Authority Key Identifier:
keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:8b:e2:e3:68:b9:08:66:15:df:f5:86:80:4c:9e:90:a2:0d:
fd:e0:d0:72:6a:ba:d1:8b:22:5f:92:0f:3c:54:18:f1:f6:8d:
1d:15:04:d1:fa:21:5a:36:48:d1:6a:6c:35:e1:6e:a9:75:f1:
fb:c8:4f:12:d0:2d:18:4a:98:03:b7:e2:e8:22:b0:ab:f6:56:
f9:18:8a:1c:03:94:50:c5:9d:09:2f:54:2b:a8:27:0d:55:b0:
a2:5c:07:7c:3d:b0:3f:d3:aa:7f:62:68:df:32:c7:da:7e:dc:
73:6e:b6:4d:39:a6:19:0a:de:4e:d4:2a:ff:4c:23:38:2d:94:
f6:13:01:3c:82:be:fe:3f:6f:a2:24:b8:86:8f:5f:3c:7f:42:
0d:72:0e:9d:16:9d:f8:9f:66:54:f7:0f:91:b0:7c:f6:39:bf:
da:d1:71:1e:38:0b:1d:3c:b0:8b:4d:65:bb:3e:8a:ac:f1:36:
10:32:cd:96:3c:00:8e:c7:36:52:29:f3:64:e5:36:73:8c:89:
ef:16:b2:26:21:f6:44:50:d0:8c:b1:8b:a9:6a:11:e8:5b:e9:
9d:7e:63:d7:c2:a6:e7:71:d3:d3:c7:37:5a:fb:ce:db:32:a0:
a9:b5:7e:35:99:0a:58:44:df:59:6d:eb:78:4b:b3:56:dc:7d:
4e:30:d8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:31 2026 by rpki-client