
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
File: HlpjIbEaoIRvqJvxObzs2604vjc.mft (raw, json)
Hash identifier: iCqUzl+pHvam5VLCgyynlsq3/7SIYFudGfEjQwKzY5s=
Subject key identifier: 20:44:02:09:5D:2F:77:44:B0:62:52:29:47:66:2D:6F:42:2C:98:37
Authority key identifier: 1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37
Certificate issuer: /CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
Certificate serial: 3639
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
Manifest number: 35EA
Signing time: Sun 04 Oct 2026 14:16:07 +0000
Manifest this update: Sun 04 Oct 2026 14:16:06 +0000
Manifest next update: Sun 11 Oct 2026 14:16:06 +0000
Files and hashes: 1: HlpjIbEaoIRvqJvxObzs2604vjc.crl (hash: YH21G5L8QpjO96hqhXZWmKXUTl/gQrB1YM5LBSWnFlE=)
2: 0997A5828A1511F09F6EBD2BC4F9AE02.roa (hash: fh/tVUPGS+UXg+acYtuJo5G4hja8nzeWl7IkiWlXYc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl
rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13881 (0x3639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9D76, serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
Validity
Not Before: Oct 4 14:16:06 2026 GMT
Not After : Oct 11 14:16:06 2026 GMT
Subject: CN=6ac25fa7-ffe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:1c:6c:80:3d:e2:e1:a3:b0:15:6d:f7:88:
c6:35:8e:88:14:3a:35:3b:47:85:00:61:78:bb:f1:
a9:8e:6f:1c:6e:cc:13:74:9f:ab:44:5c:e1:08:d1:
95:f3:99:0b:8a:6e:7b:69:78:33:89:55:87:d5:7e:
92:83:32:db:24:69:f3:e4:81:81:1a:65:34:66:fd:
6b:f5:1b:b5:48:3e:2c:ed:2c:52:1e:36:e0:16:4f:
6e:50:65:1b:68:3f:dd:89:96:96:e2:e1:fe:15:e4:
59:24:ca:ab:f6:0f:c5:bb:7a:f4:e0:86:aa:55:5e:
b3:03:3c:47:7b:58:89:a6:35:b0:ba:13:d0:dc:00:
0c:b0:8e:85:90:ec:f2:4a:e9:8f:71:19:8e:c0:a3:
f5:67:39:8b:9f:b2:d4:f8:c3:0b:22:14:e4:99:1e:
4a:0d:51:98:2f:52:48:c0:9a:8f:66:80:88:b6:b2:
44:81:94:11:e8:df:82:58:66:06:4d:55:13:18:c2:
75:8a:e6:49:09:5d:8d:3a:f3:29:20:31:d2:b4:3f:
ec:ca:4c:4a:76:9f:0b:a4:7e:7f:ff:c3:4d:2b:cd:
a9:f5:5e:67:17:dc:45:22:7f:cf:20:12:08:7f:28:
78:b0:62:70:50:0e:1e:af:b2:80:d7:65:bf:e1:3f:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:44:02:09:5D:2F:77:44:B0:62:52:29:47:66:2D:6F:42:2C:98:37
X509v3 Authority Key Identifier:
keyid:1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3c:f2:b2:3b:65:a1:1b:45:9f:7b:01:87:66:2f:df:b4:41:
fc:a8:cb:41:2c:46:c3:6c:af:c2:96:e5:0b:90:b3:a5:d2:ed:
69:57:e0:46:ec:35:6d:ad:c8:50:09:26:9c:21:a5:97:fc:93:
b1:41:92:61:92:f2:e6:3b:00:df:20:a5:e5:22:a2:91:84:43:
3c:d2:77:13:1a:41:1d:07:e0:af:3f:a6:2c:b4:c6:c2:f1:63:
0d:64:5b:e2:9c:d3:c1:07:71:bb:81:49:07:90:e8:55:a9:61:
75:ad:9c:b6:61:d6:f8:74:d2:49:64:29:12:80:fd:24:55:58:
37:4b:ea:61:05:ce:f1:f4:10:ee:ba:3a:9d:82:70:b4:65:57:
e8:42:cc:3b:6f:df:2e:4c:01:43:fb:53:87:40:49:f1:dd:38:
e1:73:5a:c3:74:83:75:15:bb:00:02:ca:76:ad:60:e2:34:f7:
69:dd:21:b8:e0:ac:8e:b8:10:37:1a:16:06:16:39:e3:39:56:
b6:1a:a7:64:88:f0:87:d8:c4:ff:4e:5a:df:8c:5a:58:72:25:
1d:1f:6e:04:da:b9:d0:35:4e:de:7c:c4:86:55:60:03:09:ee:
34:7a:d5:00:8e:60:cc:47:f9:20:68:50:a0:ba:d6:d2:06:50:
6e:35:24:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:14:45 2026 by rpki-client