
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
File: HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json)
Hash identifier: zQXPMVan2kk52zi86FztYSNyKlRPEf+0XovIz3AsD3g=
Subject key identifier: 21:34:D3:9F:37:F4:8A:41:12:7B:A7:2B:AE:D1:B4:3C:87:78:C4:63
Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71
Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
Certificate serial: 1A4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
Manifest number: 1A32
Signing time: Sun 20 Sep 2026 16:18:31 +0000
Manifest this update: Sun 20 Sep 2026 16:18:30 +0000
Manifest next update: Sun 27 Sep 2026 16:18:30 +0000
Files and hashes: 1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: fmGvvczzzVMMu8P3ouT79zFM3IXs+AZYnT6d57ydNYU=)
2: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: UVagvNv2xQNSD/DTi1pYnkPAd6yaMMHes6alyvk08Ew=)
3: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: whf91COmOS4nmBy8X3NCysn1mTlxA8VZykZt4Rg2IFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl
rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6732 (0x1a4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
Validity
Not Before: Sep 20 16:18:30 2026 GMT
Not After : Sep 27 16:18:30 2026 GMT
Subject: CN=6ab00757-d21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:14:a2:b4:c9:ec:4e:44:39:06:5c:9b:75:
d2:b6:8e:46:e8:4b:30:2e:ee:94:30:aa:d4:f0:bd:
7a:7c:3d:8c:fe:c0:ae:bd:1d:94:46:41:8e:04:d3:
f5:3b:df:7a:22:bc:cd:5a:d6:50:9b:35:22:6a:f0:
e1:05:ba:11:b5:3b:f8:6d:19:90:09:ac:af:8e:f7:
f4:94:58:67:e4:9d:36:77:0b:bb:9c:e8:94:23:92:
7e:12:ff:e4:b6:61:98:35:a8:43:06:5b:5f:f3:aa:
2d:83:8a:ab:f8:50:58:c2:f4:1b:69:45:4f:34:ed:
8f:8f:29:10:45:83:4f:f7:4b:1e:e4:93:70:55:15:
5c:96:53:06:1d:86:c5:79:c5:63:5d:81:62:ab:47:
44:9c:4d:9e:dc:b9:e7:17:a6:ee:69:b7:88:06:5a:
d9:89:4e:93:0d:36:88:c5:d5:7b:e5:7a:a6:01:cb:
9c:ca:0c:f9:9f:a8:25:a8:b9:5b:5d:cf:75:05:72:
c8:06:31:c5:e9:36:26:d7:5a:a3:1e:67:2c:bd:47:
6e:8a:ec:79:64:5a:bf:80:2e:b4:c4:90:0d:6e:d2:
fd:e7:78:0b:dc:2b:e7:d6:08:7f:d0:76:26:e6:f4:
f3:7b:0e:71:68:8b:3c:52:e8:68:53:ec:55:c3:a8:
10:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:34:D3:9F:37:F4:8A:41:12:7B:A7:2B:AE:D1:B4:3C:87:78:C4:63
X509v3 Authority Key Identifier:
keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:62:a2:41:26:2f:46:9c:bd:70:c6:d6:d0:f8:5b:c2:e9:2c:
44:af:61:f6:01:ee:f3:03:0d:18:b6:d0:09:a9:1d:71:77:0f:
a5:17:d1:30:81:82:18:c9:b7:a4:28:ce:0c:3a:48:33:80:40:
db:97:f9:93:2e:fb:52:9c:23:9c:f4:b5:8e:bf:76:61:32:51:
b9:bd:3b:ff:cf:08:2f:39:d1:16:f7:3a:07:83:10:84:68:54:
ff:80:7b:25:cc:9a:33:a2:49:64:0b:5b:c1:a8:76:6d:b5:e9:
8d:3c:8e:2b:28:a1:72:fb:1f:37:d8:50:02:da:19:7d:85:4d:
9e:2f:62:66:2e:aa:19:b7:cc:cc:d9:3d:e8:e4:c1:d1:68:ed:
62:76:15:50:65:b2:03:3c:29:18:1c:22:e7:2c:4c:5d:cd:7a:
e2:64:32:c5:29:38:09:74:e3:9a:89:5a:31:5f:d8:4a:b5:e8:
5a:2e:c4:bc:8a:4f:5b:ff:80:8c:32:29:4b:c7:0a:ca:25:1d:
7d:36:87:10:f4:5f:60:91:14:f9:ac:2f:83:6b:4d:09:9e:c8:
08:f8:f3:21:cb:b5:83:90:2a:38:8a:e8:98:4b:5b:b6:b6:92:
3f:16:78:2d:d1:2c:67:f3:d6:df:11:ba:64:49:fe:08:c4:61:
65:2a:67:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:04:26 2026 by rpki-client