
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
File: HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json)
Hash identifier: wimdcPH6lCh0D16rQavVK2FEaV6XRicWsGXmMIPYVuI=
Subject key identifier: 2A:7A:CD:FC:6A:27:2D:47:76:51:04:09:93:B9:EE:1E:77:B7:A6:AE
Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71
Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
Certificate serial: 19F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
Manifest number: 19DA
Signing time: Sat 04 Apr 2026 16:16:49 +0000
Manifest this update: Sat 04 Apr 2026 16:16:49 +0000
Manifest next update: Sat 11 Apr 2026 16:16:49 +0000
Files and hashes: 1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: +yyMxlsL5vdYSsRBt5d7kC6jCrcYJ5EbW+vvlQwlQPA=)
2: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: YbJqZlDc5DhntXvk0RSJHoPR1oURQ03ROlcVicrPr9A=)
3: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: ViCm8rntM/kipc96OmVyQSWm5otXWholJHBWK9um5D0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl
rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6642 (0x19f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
Validity
Not Before: Apr 4 16:16:49 2026 GMT
Not After : Apr 11 16:16:49 2026 GMT
Subject: CN=69d13971-6686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:dd:0b:2e:bb:a9:95:ad:bb:0b:66:11:06:
9c:02:8f:af:eb:53:9a:42:7a:2b:fc:5e:0e:3a:00:
4f:d9:58:3c:f5:70:d6:92:a3:b4:d5:87:48:cf:9e:
a3:2c:f4:e8:d5:c3:ac:e1:bc:e7:db:8b:7e:67:c6:
ef:06:67:fd:f3:f7:c2:87:67:df:41:a9:c6:87:64:
4d:aa:38:8e:ec:71:43:6f:17:db:08:b6:2d:cb:76:
aa:81:1f:80:31:fe:56:ca:cc:fc:09:8b:ec:e7:1b:
c1:2d:ab:1d:30:47:2b:fc:72:ae:ea:38:a5:fd:0a:
21:10:65:2a:f5:69:75:a8:ba:a4:e3:fe:fe:ef:f2:
89:b0:17:b1:bf:a0:b7:e3:f5:3c:56:9a:06:a0:95:
b0:45:92:93:0d:50:bc:76:9a:ed:59:9a:69:f8:d3:
4b:e5:37:ac:2a:39:1f:e0:34:0b:65:60:c4:d4:75:
59:a4:4d:e4:32:48:29:b9:c7:64:1c:d4:70:7c:3d:
53:06:bf:fb:81:1b:41:b4:9e:e9:0b:a6:6b:d8:15:
c1:65:49:0f:f2:ee:74:19:d9:f3:4f:30:ef:94:17:
73:33:c8:ae:2b:ae:8f:4a:05:78:98:44:a3:b4:22:
59:9e:59:7a:f6:dc:3f:85:06:c8:d6:38:54:be:70:
0e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7A:CD:FC:6A:27:2D:47:76:51:04:09:93:B9:EE:1E:77:B7:A6:AE
X509v3 Authority Key Identifier:
keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7d:11:7b:8e:3c:a7:91:7f:2e:c3:27:bf:24:1f:ff:47:33:
72:82:18:bd:55:e4:01:01:15:e1:b8:e4:2f:5c:53:8c:7f:18:
5a:50:34:bd:71:9a:96:e3:a8:bd:fc:9c:66:e5:c2:64:fa:a4:
1e:a6:d5:4d:a3:3d:5c:ed:ee:9b:08:f6:ca:21:00:b4:b7:59:
e5:dd:9a:89:f6:e0:f3:8c:cf:12:0f:f4:c6:02:43:f8:54:db:
ef:69:7c:ce:37:85:d8:37:21:35:9d:49:bf:69:1b:d6:8d:29:
f8:9c:18:4e:c7:e6:c6:d8:25:c2:b2:f8:a5:d4:3e:02:e9:dd:
61:69:dc:bc:01:61:0b:eb:7d:74:ac:c5:c2:b9:d7:2e:8e:00:
11:ac:a7:4f:1d:29:eb:09:30:2b:98:f2:81:10:9a:9a:96:f0:
07:cb:12:bb:17:82:de:3a:db:67:2a:c0:08:16:94:6b:9e:d5:
90:e1:7c:8d:60:bd:ba:5e:48:0f:2b:87:81:53:70:27:87:ea:
33:22:f3:fe:df:2f:12:67:8f:f1:26:56:ec:65:97:11:ae:97:
3e:18:50:59:48:2a:b5:e6:02:ec:95:ff:a3:82:03:df:c4:60:
e7:d3:bb:7d:6a:f5:51:ce:2a:f6:79:76:bd:8e:e2:19:5f:e7:
1f:61:66:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:56 2026 by rpki-client