
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
File: hpBNLQLbigWb7ZOPL46u88Qgb9A.mft (raw, json)
Hash identifier: mqaScRwfqeFw10Cwo2BuV53AbS6LBLgiIs9irKicYQ8=
Subject key identifier: 7A:89:82:A8:F5:6D:CD:B3:99:30:B8:EE:5A:DF:DB:1A:A3:1F:D8:32
Authority key identifier: 86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
Certificate issuer: /CN=A91D4ACD/serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
Manifest number: 017F
Signing time: Mon 21 Sep 2026 04:42:15 +0000
Manifest this update: Mon 21 Sep 2026 04:42:15 +0000
Manifest next update: Mon 28 Sep 2026 04:42:15 +0000
Files and hashes: 1: hpBNLQLbigWb7ZOPL46u88Qgb9A.crl (hash: nMUIqwu8z87/PjaSG1pisvnHrw4i5O34Jbr1Kln/a7g=)
2: 388D7E38797D11EF8CA64711C4F9AE02.roa (hash: jDnZhDcL3845Secu0bR+V2OD0F1RLl9nEAFhwuxNGGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4ACD, serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Validity
Not Before: Sep 21 04:42:15 2026 GMT
Not After : Sep 28 04:42:15 2026 GMT
Subject: CN=6ab0b5a7-cfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:56:94:7f:bc:a7:9f:bb:d3:36:19:d2:2f:
14:ba:08:b1:68:5b:a9:3a:b5:9c:c0:af:5c:f8:98:
a7:e1:56:d3:bb:47:fa:40:56:3b:6e:d0:19:55:a1:
68:4d:22:ea:a3:1a:c6:2b:96:7f:fd:9f:4c:ef:88:
70:30:3c:7b:46:f0:93:1a:f8:ab:85:99:23:57:d3:
20:63:c4:c2:45:d4:98:67:ef:04:33:a0:c4:f7:72:
19:c0:03:46:5a:88:16:b2:87:d6:7a:cd:a5:43:fe:
ed:93:a2:95:d9:bf:3f:7e:2f:57:f5:30:a9:92:e5:
6b:e9:7e:bc:e5:cf:e7:54:41:02:97:c4:55:67:10:
aa:9a:63:a2:e7:f4:5c:ab:bb:25:38:bd:40:4c:06:
ad:53:62:f4:6f:c3:69:3a:08:dc:31:c1:59:e3:fe:
77:82:9f:30:e9:e6:db:c2:9f:46:76:d0:38:d2:1b:
56:04:53:6b:52:73:74:b7:78:5f:55:08:91:ae:9d:
f6:4a:ee:27:d7:d4:4a:26:3b:95:bb:ad:db:6b:a1:
78:d8:ba:74:85:89:1a:df:1a:cd:c7:19:56:17:c9:
00:65:c0:03:7a:ad:eb:1e:ec:0a:93:d1:91:32:74:
8f:f9:df:98:e7:86:b9:17:55:d0:0c:67:fa:e1:f0:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:89:82:A8:F5:6D:CD:B3:99:30:B8:EE:5A:DF:DB:1A:A3:1F:D8:32
X509v3 Authority Key Identifier:
keyid:86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:59:3b:39:a9:51:b5:d2:ae:4b:5c:13:ad:3e:f4:32:d5:24:
f7:c0:dc:d4:86:de:b2:8c:aa:15:0f:97:68:2e:c8:ca:1c:7d:
54:2b:d1:44:e2:30:95:6e:46:2d:a8:54:bd:da:c8:df:ab:78:
9f:cc:27:25:03:f1:7b:cd:e2:03:09:d4:f0:86:4b:8b:9d:c3:
2c:81:7c:91:2d:d6:c9:f9:60:86:9c:9c:c9:cc:bc:b7:47:6c:
94:8d:b4:46:3b:59:86:55:96:45:d4:4b:5d:44:e9:37:53:ca:
b1:9e:13:e4:99:da:79:ea:a7:88:5a:1a:ce:f1:87:c3:9e:c4:
87:ef:d9:26:2a:b3:58:b7:b3:fb:c3:5a:3b:b9:b6:e1:4f:55:
cc:89:b7:d9:46:29:18:93:52:85:7c:ca:12:40:06:68:2b:f7:
b3:97:48:b0:65:df:f8:cc:63:62:cc:82:a3:17:8b:ce:0c:be:
db:1f:fa:f3:06:4e:e0:c5:25:36:fb:d1:ba:b7:d4:9b:53:c0:
43:14:0f:ec:44:a9:57:a0:8e:b6:2a:15:95:67:18:b0:6d:5d:
00:e7:55:1a:0b:e7:94:ac:17:89:35:5d:26:9b:1a:5f:ad:16:
dc:8a:4e:2e:fb:3d:76:93:e2:54:6a:01:e6:7d:ca:17:98:da:
88:1d:8c:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDRBQ0QxMTAvBgNVBAUTKDg2OTA0RDJEMDJEQjhBMDU5QkVEOTM4RjJGOEVBRUYz
QzQyMDZGRDAwHhcNMjYwOTIxMDQ0MjE1WhcNMjYwOTI4MDQ0MjE1WjAYMRYwFAYD
VQQDEw02YWIwYjVhNy1jZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzURWlH+8p5+70zYZ0i8UugixaFupOrWcwK9c+Jin4VbTu0f6QFY7btAZVaFo
TSLqoxrGK5Z//Z9M74hwMDx7RvCTGvirhZkjV9MgY8TCRdSYZ+8EM6DE93IZwANG
WogWsofWes2lQ/7tk6KV2b8/fi9X9TCpkuVr6X685c/nVEECl8RVZxCqmmOi5/Rc
q7slOL1ATAatU2L0b8NpOgjcMcFZ4/53gp8w6ebbwp9GdtA40htWBFNrUnN0t3hf
VQiRrp32Su4n19RKJjuVu63ba6F42Lp0hYka3xrNxxlWF8kAZcADeq3rHuwKk9GR
MnSP+d+Y54a5F1XQDGf64fCAewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqJgqj1
bc2zmTC47lrf2xqjH9gyMB8GA1UdIwQYMBaAFIaQTS0C24oFm+2Tjy+OrvPEIG/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEFDRC8xRjUzNTY5RTc1
NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi9ocEJOTFFMYmlnV2I3Wk9QTDQ2dTg4UWdi
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2hwQk5MUUxiaWdXYjdaT1BMNDZ1ODhRZ2I5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NEFDRC8xRjUzNTY5RTc1NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi9ocEJOTFFMYmln
V2I3Wk9QTDQ2dTg4UWdiOUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfFk7OalRtdKuS1wTrT70MtUk98Dc1IbesoyqFQ+XaC7Iyhx9VCvRROIwlW5G
LahUvdrI36t4n8wnJQPxe83iAwnU8IZLi53DLIF8kS3Wyflghpycycy8t0dslI20
RjtZhlWWRdRLXUTpN1PKsZ4T5JnaeeqniFoazvGHw57Eh+/ZJiqzWLez+8NaO7m2
4U9VzIm32UYpGJNShXzKEkAGaCv3s5dIsGXf+MxjYsyCoxeLzgy+2x/68wZO4MUl
NvvRurfUm1PAQxQP7ESpV6COtioVlWcYsG1dAOdVGgvnlKwXiTVdJpsaX60W3IpO
Lvs9dpPiVGoB5n3KF5jaiB2MKg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:30:41 2026 by rpki-client