
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
File: HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft (raw, json)
Hash identifier: bnRHeBBlOpjQEsnvvLXsbWDvTMM38V7iTHHZ794EX8w=
Subject key identifier: EC:9D:7A:3D:45:FA:C8:21:1C:C3:0A:40:A8:F5:ED:84:EE:BA:17:57
Authority key identifier: 1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4
Certificate issuer: /CN=A919EF2B/serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
Certificate serial: 03D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
Manifest number: 03CF
Signing time: Fri 09 Oct 2026 00:41:29 +0000
Manifest this update: Fri 09 Oct 2026 00:41:29 +0000
Manifest next update: Fri 16 Oct 2026 00:41:29 +0000
Files and hashes: 1: HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl (hash: e2bMHr0HrD26aqao84Hgejq/w1aFJFytuxvKVXr1ns8=)
2: 830C9F90EBCA11ECA2A1747EC4F9AE02.roa (hash: ZS73m8PHc2jdDEHGSUbWmMvRHOgafdSVcGYG1WG2/zs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl
rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 00:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982 (0x3d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF2B, serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
Validity
Not Before: Oct 9 00:41:29 2026 GMT
Not After : Oct 16 00:41:29 2026 GMT
Subject: CN=6ac83839-1a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:96:7f:aa:16:ae:46:e3:da:65:09:6c:83:
e4:3f:53:da:ca:37:8f:f1:f8:5b:a7:3e:95:e3:3a:
00:8f:23:52:4c:ce:db:e3:f0:85:09:ff:35:a5:bb:
17:06:c8:c2:fe:ad:93:23:f0:23:e5:cf:b9:49:97:
e8:51:45:2e:eb:e9:98:f1:26:5e:0b:f2:7b:05:09:
24:a0:49:4f:c0:3d:88:da:dd:7c:6c:57:e5:d4:93:
2a:0f:38:40:9f:1b:26:90:b8:74:6d:22:04:03:00:
a3:cd:98:8f:71:c8:8f:fc:c2:1e:f6:c8:7e:c9:6f:
60:e7:44:6f:5b:50:3d:89:6d:75:a6:78:4d:5d:85:
c5:93:25:b6:e0:f2:91:e0:0c:12:de:bd:7c:af:8d:
8a:4b:fb:e5:aa:6d:7f:5b:1a:8d:f0:7f:4b:15:87:
92:fe:e3:87:dc:2e:d1:d4:f1:df:b8:9b:8d:c3:e0:
62:85:65:7f:0f:86:17:3f:b1:9c:98:58:24:3f:75:
ca:f0:34:9b:db:18:28:2f:e5:7d:9c:b0:c3:d5:29:
c0:98:c9:9b:c8:85:0f:8b:45:a9:f4:80:60:35:be:
68:ed:f7:4c:db:e9:0d:8a:a2:af:2c:a1:29:59:a1:
f1:83:b8:ec:9f:3f:76:21:11:44:0e:09:21:1f:0b:
62:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9D:7A:3D:45:FA:C8:21:1C:C3:0A:40:A8:F5:ED:84:EE:BA:17:57
X509v3 Authority Key Identifier:
keyid:1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5c:da:d7:bb:c4:c9:d7:36:f0:d3:80:9d:d4:6e:66:d9:61:
42:02:74:58:bc:d8:19:82:53:d2:36:e6:ca:e3:aa:8f:21:bf:
38:c4:b9:89:6f:a5:ad:35:d3:34:25:37:db:98:45:25:f3:42:
ea:42:0a:61:26:f2:de:32:e8:49:99:ec:67:a0:6e:b2:5c:00:
1b:f8:d9:bf:12:31:2e:6c:34:92:87:2a:e3:41:3e:17:fc:a0:
d7:d6:62:7a:56:01:90:ff:0a:d1:1f:a0:62:7a:1a:02:fb:93:
c5:4e:3d:84:27:a4:b5:9d:42:cc:4e:76:bf:ae:9b:eb:53:b7:
dd:97:9a:9f:db:e4:3f:e4:c5:38:67:a3:23:34:4a:eb:b1:14:
e2:14:92:15:78:7d:f1:e4:4a:df:4f:d8:00:24:40:ee:d9:bd:
f6:58:d6:3e:ae:b6:8c:3a:c7:3d:68:37:3d:57:27:33:3a:d1:
96:65:c5:d4:c2:58:0d:d1:ff:76:23:0e:16:d6:72:d4:90:f1:
b6:1a:29:c4:d3:4e:8d:f2:65:1b:98:ca:d6:3d:e1:f5:6c:6f:
69:df:6d:26:fa:5d:53:10:d6:93:82:9d:24:86:19:a1:b1:19:
90:11:a6:96:01:26:59:a5:8d:62:be:65:89:95:88:51:62:32:
b0:95:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:37:25 2026 by rpki-client