
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
File: hlng_trNtpATntXTNVh0di16GJ0.mft (raw, json)
Hash identifier: eZcOAVe0lD2gMgktbi8LZJ4exYP57REFJ80A1xplx4I=
Subject key identifier: F3:8C:FF:68:E5:EC:A8:FC:2A:2B:C4:7D:32:D7:14:F9:98:B6:73:80
Authority key identifier: 86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
Certificate issuer: /CN=A91AC0BB/serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
Manifest number: 76
Signing time: Tue 27 Oct 2026 08:11:38 +0000
Manifest this update: Tue 27 Oct 2026 08:11:38 +0000
Manifest next update: Tue 03 Nov 2026 08:11:38 +0000
Files and hashes: 1: hlng_trNtpATntXTNVh0di16GJ0.crl (hash: pvrmiSMVz/uDIBZuvU80zYNOiSKrc4dqNHsHh283glY=)
2: 76DAAFAA251911F182F11CF1C0833773.roa (hash: 6esaAykmvMcM9nd5KOv3yAwbdE8H9oSkUnwpS/MXy7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl
rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:11:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC0BB, serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
Validity
Not Before: Oct 27 08:11:38 2026 GMT
Not After : Nov 3 08:11:38 2026 GMT
Subject: CN=6ae05cba-5d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:0c:44:c7:19:8c:c6:6b:55:32:4c:2f:b3:
4a:4f:08:8a:0b:85:0d:91:b7:5e:1d:9a:b2:2a:02:
9e:90:33:db:11:cb:9d:31:72:13:64:0d:2f:fd:c8:
29:26:92:90:55:c0:14:1a:2d:87:a0:53:bb:46:e1:
ae:7a:a6:9e:04:53:6c:75:9d:2e:5b:60:8f:fc:95:
c5:86:7a:e8:8c:1a:a1:c8:20:81:32:cf:67:1b:dd:
09:3f:b5:a7:1a:b1:ab:51:df:4c:a0:07:07:5f:0b:
41:f0:74:08:d8:a6:63:30:59:3d:e2:25:ca:34:73:
bc:42:83:c5:9f:f5:17:28:29:c3:94:0b:ac:05:50:
8b:29:d3:ea:9d:51:79:1e:ef:c1:cd:d2:a8:d7:2d:
9a:df:5a:70:e1:ff:1c:4c:e3:90:4a:9c:e5:5e:a4:
17:6b:5e:e8:3e:0d:8e:b3:1c:46:e8:30:33:6c:76:
48:1f:03:07:84:5c:ff:bc:82:52:17:79:60:87:e6:
59:e3:a1:b1:92:15:73:7f:5a:bf:20:27:9d:bd:09:
60:90:a6:d4:31:79:7c:c9:c8:0b:89:e6:3a:62:ef:
9f:05:32:a7:da:35:00:68:74:90:be:96:9d:a4:28:
5b:a3:fd:28:0d:63:05:1f:a9:50:26:e3:58:b2:5d:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8C:FF:68:E5:EC:A8:FC:2A:2B:C4:7D:32:D7:14:F9:98:B6:73:80
X509v3 Authority Key Identifier:
keyid:86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:87:78:8c:fd:12:d4:d7:e9:55:19:bf:1d:95:96:36:7f:b0:
e7:b5:b4:8e:a0:93:e9:54:93:3a:0f:9c:7f:a0:59:9f:42:7a:
8a:8f:a0:71:09:62:06:d9:e9:56:1b:58:86:6b:7a:16:64:ab:
fd:d0:66:99:36:14:f5:27:0b:e2:6d:d8:c6:14:bc:9d:7f:7b:
78:26:95:e7:a1:72:cd:2a:3c:7f:ae:03:f8:19:01:cc:cd:2e:
2a:15:e4:f2:d6:3a:ca:50:7f:e6:1e:63:37:7a:8f:87:69:c0:
5d:41:5e:46:84:8a:47:64:17:34:58:a1:65:b7:43:13:b5:1f:
6c:a5:0f:b8:1b:8c:95:00:c5:13:8c:e0:09:25:ed:ee:77:f4:
de:76:57:71:7d:6d:4d:75:c2:f2:e0:2d:9a:7f:22:db:1d:5e:
68:b8:64:e4:91:fd:cf:76:f4:1f:24:35:01:26:6a:4c:03:06:
00:6a:d0:d9:b7:9b:42:d4:99:4c:f0:fd:bd:df:8f:2f:45:0d:
2f:f9:9e:a9:5c:33:46:af:53:e2:59:5b:95:a9:47:0f:84:5d:
a2:ac:47:1a:a8:9f:76:39:cb:a5:ea:1e:df:02:bb:1b:67:2b:
b5:11:d3:3f:42:fb:15:d2:2a:eb:2a:04:e7:f0:a0:62:3f:09:
9d:6f:1d:bf
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QzBCQjExMC8GA1UEBRMoODY1OUUwRkVEQUNEQjY5MDEzOUVENUQzMzU1ODc0NzYy
RDdBMTg5RDAeFw0yNjEwMjcwODExMzhaFw0yNjExMDMwODExMzhaMBgxFjAUBgNV
BAMTDTZhZTA1Y2JhLTVkN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfrQxExxmMxmtVMkwvs0pPCIoLhQ2Rt14dmrIqAp6QM9sRy50xchNkDS/9yCkm
kpBVwBQaLYegU7tG4a56pp4EU2x1nS5bYI/8lcWGeuiMGqHIIIEyz2cb3Qk/taca
satR30ygBwdfC0HwdAjYpmMwWT3iJco0c7xCg8Wf9RcoKcOUC6wFUIsp0+qdUXke
78HN0qjXLZrfWnDh/xxM45BKnOVepBdrXug+DY6zHEboMDNsdkgfAweEXP+8glIX
eWCH5lnjobGSFXN/Wr8gJ529CWCQptQxeXzJyAuJ5jpi758FMqfaNQBodJC+lp2k
KFuj/SgNYwUfqVAm41iyXSBbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU84z/aOXs
qPwqK8R9MtcU+Zi2c4AwHwYDVR0jBBgwFoAUhlng/trNtpATntXTNVh0di16GJ0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDMEJCLzA5OTEyNzI4MjRE
MTExRjE4QkNFMTJFMEE5ODMzNzczL2hsbmdfdHJOdHBBVG50WFROVmgwZGkxNkdK
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaGxuZ190ck50cEFUbnRYVE5WaDBkaTE2R0owLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD
MEJCLzA5OTEyNzI4MjREMTExRjE4QkNFMTJFMEE5ODMzNzczL2hsbmdfdHJOdHBB
VG50WFROVmgwZGkxNkdKMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQByh3iM/RLU1+lVGb8dlZY2f7DntbSOoJPpVJM6D5x/oFmfQnqKj6BxCWIG2elW
G1iGa3oWZKv90GaZNhT1JwvibdjGFLydf3t4JpXnoXLNKjx/rgP4GQHMzS4qFeTy
1jrKUH/mHmM3eo+HacBdQV5GhIpHZBc0WKFlt0MTtR9spQ+4G4yVAMUTjOAJJe3u
d/TedldxfW1NdcLy4C2afyLbHV5ouGTkkf3PdvQfJDUBJmpMAwYAatDZt5tC1JlM
8P29348vRQ0v+Z6pXDNGr1PiWVuVqUcPhF2irEcaqJ92Ocul6h7fArsbZyu1EdM/
QvsV0irrKgTn8KBiPwmdbx2/
-----END CERTIFICATE-----
Generated at Thu Oct 29 00:50:25 2026 by rpki-client