
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
File: hlng_trNtpATntXTNVh0di16GJ0.mft (raw, json)
Hash identifier: s69HZq1mz5Z3aWpLAxGj3PrZBh08tQI8l0rdUkE3x3U=
Subject key identifier: 4C:3C:C8:D9:34:47:B1:C7:92:6F:B6:09:44:C8:84:37:5B:1B:A5:8D
Authority key identifier: 86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
Certificate issuer: /CN=A91AC0BB/serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
Manifest number: 53
Signing time: Sun 23 Aug 2026 07:55:51 +0000
Manifest this update: Sun 23 Aug 2026 07:55:50 +0000
Manifest next update: Sun 30 Aug 2026 07:55:50 +0000
Files and hashes: 1: hlng_trNtpATntXTNVh0di16GJ0.crl (hash: lgleyrW6xjS3107dMJHHkpT6ONUnAYy3eRxaXYPOVJw=)
2: 76DAAFAA251911F182F11CF1C0833773.roa (hash: uwccILNOfn3op7dK+stqfjkg9anKckOvjcXt+VX9yxw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl
rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC0BB, serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
Validity
Not Before: Aug 23 07:55:50 2026 GMT
Not After : Aug 30 07:55:50 2026 GMT
Subject: CN=6a8aa787-52bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:05:3a:72:62:9c:30:34:8c:d5:d3:8d:db:
e0:25:ef:76:90:3e:d2:64:84:b1:d5:4e:1c:00:e0:
ed:96:22:8c:18:bb:46:ab:a5:44:80:aa:11:0b:fa:
87:f2:af:43:b2:07:6d:2f:ac:a5:c3:41:a9:7a:1b:
a0:89:3d:fb:89:c1:b7:19:6b:bb:43:04:9d:6c:10:
9c:94:d7:9a:6e:85:da:b4:7d:8d:86:56:ff:05:c5:
5f:35:0e:3b:22:aa:c6:08:55:6a:8c:8c:ff:60:30:
e8:63:26:aa:e3:f9:87:d6:0b:2e:61:e3:a6:43:d4:
0e:c7:57:3a:60:c8:58:33:71:5f:7c:61:23:f8:ce:
90:fc:13:fa:b6:4e:81:b8:23:0e:bb:5c:f3:25:aa:
0f:d6:93:41:52:ae:4c:1d:7e:04:b8:09:e7:61:82:
b1:cf:36:b1:97:97:0e:c1:15:bf:d6:47:6e:b9:40:
40:45:f8:1e:f0:c4:91:b1:da:dc:09:65:a2:63:39:
0b:50:c7:c5:63:16:ae:04:6f:78:b6:be:e4:0b:ca:
e6:69:a2:cf:1e:90:3a:23:c9:f9:7e:76:e1:9c:db:
36:e2:60:d2:38:f1:8a:e4:a7:11:17:5e:aa:a6:6c:
e3:8c:83:e7:78:0a:2e:13:70:27:51:97:b1:a2:8b:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3C:C8:D9:34:47:B1:C7:92:6F:B6:09:44:C8:84:37:5B:1B:A5:8D
X509v3 Authority Key Identifier:
keyid:86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:e9:1e:3c:73:da:44:fb:11:36:82:75:8c:ef:cb:13:d9:67:
51:a1:d1:2c:50:55:6f:12:49:58:af:44:c2:b3:dc:c6:5a:fe:
f3:31:44:19:b4:a8:0e:b7:bc:24:4c:66:9c:dc:45:5f:6d:0e:
2e:7f:f2:83:bf:b7:9e:b2:3d:15:55:92:1d:6c:11:1a:61:6c:
5c:c9:f7:dd:5f:92:00:4c:d0:36:72:d7:41:d9:4d:99:de:8a:
5c:b7:76:54:47:8e:0b:47:29:12:e4:ad:69:45:fb:b9:bd:2b:
fa:93:5c:d0:91:1e:f9:bb:85:3f:ba:8b:18:e2:95:53:95:69:
ab:95:15:cf:e3:1c:69:54:fb:cd:2e:a7:cc:1e:c7:a0:46:f2:
c2:11:41:fe:0f:65:1b:6b:62:9e:69:a1:32:59:55:d4:45:1f:
1f:cc:a0:03:87:45:1d:d0:77:50:34:5a:95:ee:16:5b:c0:7b:
a9:d8:20:2d:67:d5:37:62:a7:25:30:25:d6:7f:4a:d9:48:37:
03:b6:ac:18:3a:bf:ec:fe:fa:1d:95:55:44:3f:b0:5b:ab:94:
99:c3:73:e1:84:66:c6:dd:0c:76:d4:9d:45:16:69:f7:64:63:
8e:6d:58:b0:2a:c6:52:1a:09:42:75:a8:73:55:da:03:c4:cd:
0e:59:c4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:43:35 2026 by rpki-client