
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
File: HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft (raw, json)
Hash identifier: peBWDX3UK+s+Z2sq1ojlIkBVCOxECYBGD4dA2fv72X0=
Subject key identifier: 37:EC:46:12:CF:73:81:24:57:B7:35:84:4B:0A:A7:10:2D:FA:8F:22
Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
Certificate issuer: /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
Manifest number: 64
Signing time: Mon 01 Jun 2026 08:52:23 +0000
Manifest this update: Mon 01 Jun 2026 08:52:23 +0000
Manifest next update: Mon 08 Jun 2026 08:52:23 +0000
Files and hashes: 1: HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl (hash: h5xDvC/f06QT/ueWaXf2X0SKI91oXVYaslrfjwETmdI=)
2: C673BB1AD0EB11F088F8F063C4F9AE02.roa (hash: +lTLwLrmEGRpnIGIwjJCBRzNe7yk7RhMSey/Pk+Y8/E=)
3: C598E8DCD0EB11F08228F063C4F9AE02.roa (hash: Hi6se8LEGyhgp/b0G+d22teZcTwcQ2maa7DY8eg/6Bw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl
rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
Validity
Not Before: Jun 1 08:52:23 2026 GMT
Not After : Jun 8 08:52:23 2026 GMT
Subject: CN=6a1d4847-d2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:1a:69:26:25:2f:a2:50:1e:74:db:ea:a6:
6c:e0:01:c1:01:82:eb:ff:b4:45:aa:4e:ba:db:8d:
b6:f6:66:1d:e9:40:c8:a6:e2:65:5a:06:93:07:83:
9f:25:df:f7:7b:22:b1:33:dd:21:68:3f:16:ff:58:
8d:5d:27:9e:8f:5d:37:34:6b:ee:f3:3e:a8:84:10:
3d:25:77:9f:10:5f:53:ae:7a:fc:38:93:5b:ec:36:
13:3b:f7:09:92:ec:34:98:ac:b0:fc:63:f4:b9:53:
ef:a3:03:d9:26:3c:8b:a7:7e:ff:f2:65:fb:95:14:
35:f1:b2:4f:6e:af:39:b1:22:c7:69:a8:e2:44:d5:
a0:29:18:55:6f:6d:ee:a3:c1:d8:a5:ca:4b:cd:38:
3a:8f:eb:01:f9:3d:d0:21:46:95:1e:4a:f7:37:af:
6c:71:77:b3:f3:07:aa:ea:31:5c:63:4c:28:e3:f9:
b9:30:99:3b:b6:be:e9:56:40:c6:c6:53:02:e2:4c:
9d:84:25:f0:1b:24:02:10:bc:94:fe:e9:a0:da:e2:
c7:1e:88:33:90:c6:34:08:31:ac:fc:ca:4e:d4:72:
10:cc:e7:de:62:46:43:d6:9b:9e:22:a5:c2:ca:51:
3e:fa:fc:d4:6f:49:a6:22:92:0f:e4:8b:4c:99:78:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EC:46:12:CF:73:81:24:57:B7:35:84:4B:0A:A7:10:2D:FA:8F:22
X509v3 Authority Key Identifier:
keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:af:c2:a6:a6:20:11:81:30:34:f1:de:46:6c:50:cb:0b:a3:
9a:44:cf:04:39:b7:3d:f9:1f:19:d0:e3:6a:31:25:e4:cd:05:
f5:a3:99:72:44:8e:a4:9e:51:86:cd:9c:a3:90:db:38:f6:14:
ba:c8:f1:68:d4:0f:7a:4d:36:94:b5:27:26:43:bd:98:a6:b2:
bd:46:3d:5e:46:ab:96:78:58:01:e9:cd:1f:38:74:f9:06:74:
72:97:0a:6f:73:82:d0:d9:21:33:10:5d:f0:6e:a4:65:cf:1b:
ac:21:0d:d8:4b:b3:ef:f9:69:78:f7:00:ab:db:b3:3b:bb:d7:
62:63:bc:2c:21:0d:b4:b1:7b:05:ad:82:1f:f1:0e:b1:fa:f0:
15:48:51:bf:d8:0d:e4:05:50:f4:32:39:cc:c5:cb:40:56:36:
e0:26:91:47:26:ee:5e:ed:e1:da:e1:32:97:c2:ed:08:7f:36:
8f:a8:ef:6f:38:de:a9:96:04:d9:0d:47:dc:02:07:e2:a2:88:
12:8d:bf:c5:06:fd:fe:ac:79:f5:31:32:6d:e5:03:53:ea:73:
27:98:66:03:a0:51:b8:58:7a:d3:3e:f3:e0:24:48:96:ef:29:
74:b6:b8:6c:57:29:bf:83:1f:54:28:2a:4c:fc:b8:75:68:c2:
d1:c8:da:5a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MzgwNTExMC8GA1UEBRMoMUU1MzBGQTlGNjYwQThEQzE3MzhDN0FBMEM4QUZDNzdG
NEYwQkJCMzAeFw0yNjA2MDEwODUyMjNaFw0yNjA2MDgwODUyMjNaMBgxFjAUBgNV
BAMTDTZhMWQ0ODQ3LWQyZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4lxppJiUvolAedNvqpmzgAcEBguv/tEWqTrrbjbb2Zh3pQMim4mVaBpMHg58l
3/d7IrEz3SFoPxb/WI1dJ56PXTc0a+7zPqiEED0ld58QX1Ouevw4k1vsNhM79wmS
7DSYrLD8Y/S5U++jA9kmPIunfv/yZfuVFDXxsk9urzmxIsdpqOJE1aApGFVvbe6j
wdilykvNODqP6wH5PdAhRpUeSvc3r2xxd7PzB6rqMVxjTCjj+bkwmTu2vulWQMbG
UwLiTJ2EJfAbJAIQvJT+6aDa4sceiDOQxjQIMaz8yk7UchDM595iRkPWm54ipcLK
UT76/NRvSaYikg/ki0yZeCbjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUN+xGEs9z
gSRXtzWESwqnEC36jyIwHwYDVR0jBBgwFoAUHlMPqfZgqNwXOMeqDIr8d/Twu7Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzODA1LzQwMEM1REVDRDAx
MDExRjA5RjBERDgxQ0M0RjlBRTAyL0hsTVBxZlpncU53WE9NZXFESXI4ZF9Ud3U3
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSGxNUHFmWmdxTndYT01lcURJcjhkX1R3dTdNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz
ODA1LzQwMEM1REVDRDAxMDExRjA5RjBERDgxQ0M0RjlBRTAyL0hsTVBxZlpncU53
WE9NZXFESXI4ZF9Ud3U3TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBDr8KmpiARgTA08d5GbFDLC6OaRM8EObc9+R8Z0ONqMSXkzQX1o5lyRI6knlGG
zZyjkNs49hS6yPFo1A96TTaUtScmQ72YprK9Rj1eRquWeFgB6c0fOHT5BnRylwpv
c4LQ2SEzEF3wbqRlzxusIQ3YS7Pv+Wl49wCr27M7u9diY7wsIQ20sXsFrYIf8Q6x
+vAVSFG/2A3kBVD0MjnMxctAVjbgJpFHJu5e7eHa4TKXwu0IfzaPqO9vON6plgTZ
DUfcAgfioogSjb/FBv3+rHn1MTJt5QNT6nMnmGYDoFG4WHrTPvPgJEiW7yl0trhs
Vym/gx9UKCpM/Lh1aMLRyNpa
-----END CERTIFICATE-----
Generated at Thu Jun 4 17:23:08 2026 by rpki-client