
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
File: HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft (raw, json)
Hash identifier: QqyPM/CdZLli0Bl29XyH+ABMEJyYq0HTaLHyOAbcNs0=
Subject key identifier: 7D:AC:E8:45:1B:00:57:20:50:69:67:8D:EE:76:17:CA:BB:15:10:03
Authority key identifier: 1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4
Certificate issuer: /CN=A919EF2B/serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
Certificate serial: 0374
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
Manifest number: 036E
Signing time: Sun 05 Apr 2026 00:37:35 +0000
Manifest this update: Sun 05 Apr 2026 00:37:34 +0000
Manifest next update: Sun 12 Apr 2026 00:37:34 +0000
Files and hashes: 1: HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl (hash: Y9cUWBeAVK2CBPKtPiZ6N/4F4U/iY0EjM+3Gr+3WBV8=)
2: 830C9F90EBCA11ECA2A1747EC4F9AE02.roa (hash: 3NxrjtF1LNJgYupbzMrriTN+tRYzA8aged2EpehvID4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl
rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884 (0x374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF2B, serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
Validity
Not Before: Apr 5 00:37:34 2026 GMT
Not After : Apr 12 00:37:34 2026 GMT
Subject: CN=69d1aece-b4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:97:d0:0c:1d:5f:78:43:64:40:c8:23:4a:
b0:45:5f:c5:e8:98:7c:5b:ae:7e:27:02:da:bf:16:
05:bd:d2:a0:af:ef:6e:22:9f:83:84:1c:08:5a:53:
50:a7:ff:5c:4e:9e:05:83:e8:6c:e6:f4:bd:a0:38:
f8:b5:0e:6d:4f:0e:7f:fe:a0:23:b8:cd:e9:d8:e3:
fb:f1:88:eb:9d:f6:99:37:72:c0:9c:82:05:0d:7f:
62:9c:a5:0d:ff:83:ce:ff:bb:b3:01:1e:14:6a:cc:
05:4e:0b:4b:4f:59:40:e4:96:04:74:42:ca:93:75:
92:f2:d1:dc:fc:6c:64:f7:55:23:7d:fb:e8:ff:6a:
9c:07:74:aa:5a:38:6c:ed:c1:2c:6d:df:d6:d9:1c:
b9:d1:fa:62:ce:73:cd:ee:5c:fd:41:d3:43:8d:47:
fc:b6:c1:f2:f8:00:0a:15:86:dd:38:f4:ff:94:dc:
0d:80:c0:bd:15:e4:7e:98:27:3e:44:92:80:1e:b1:
06:21:77:e7:50:59:a6:2e:d3:29:ac:07:35:de:7c:
fa:fd:12:d1:52:11:82:60:f5:f0:b4:db:fa:eb:4f:
a6:ad:bb:33:e6:0c:6a:ed:a2:9e:8e:83:b2:3e:6b:
b3:05:01:cd:2f:73:7a:9e:2e:99:2b:a9:c9:6d:14:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AC:E8:45:1B:00:57:20:50:69:67:8D:EE:76:17:CA:BB:15:10:03
X509v3 Authority Key Identifier:
keyid:1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:7c:d7:86:f0:b4:f1:6a:1f:ea:8c:48:5b:3b:a2:04:7c:9e:
60:d9:86:08:91:0f:6c:09:6c:e9:8d:29:15:cd:ff:eb:03:af:
f8:92:47:2f:93:62:31:df:82:3e:dc:30:c6:ff:48:15:b0:70:
0d:82:bd:9e:45:a2:ec:14:d6:95:58:59:4c:5a:7e:a9:8e:e3:
74:18:29:1b:85:d3:f8:a6:07:dc:42:f1:7a:6b:7c:13:37:bc:
47:9f:69:1d:21:f4:ad:f6:9f:d7:e2:ba:e4:25:29:61:59:67:
44:47:c9:63:dc:0f:11:6f:60:78:38:ac:47:9c:38:ce:4a:26:
d2:45:9f:20:3b:27:a1:06:9e:64:34:4d:ae:e0:12:1d:e3:ae:
dc:c5:80:e9:4e:a9:ec:3c:c4:03:8d:81:d9:47:15:46:5a:20:
15:3b:72:3b:05:85:da:90:f0:ca:46:e5:8e:92:3a:4a:55:e1:
9e:65:c5:bb:d5:95:e0:89:d9:e2:0b:5f:f3:7d:a3:e7:64:f7:
9c:5e:55:c1:e2:12:80:8b:25:5b:88:88:39:1f:89:1e:18:11:
23:50:15:ef:9f:f6:74:80:db:5b:49:fa:3d:db:79:5e:fb:b3:
eb:9c:87:29:b2:49:37:19:2d:37:4c:7b:6c:b2:f3:8a:07:13:
88:87:ec:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:35 2026 by rpki-client