
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
File: HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json)
Hash identifier: B2JDw1dgQT3CxdZiVCLgnGPwDv3o0z2wZgyBBtpOTuA=
Subject key identifier: B4:97:E4:92:F7:D8:CD:F6:BD:BF:94:B7:6B:65:A0:E7:9C:2B:1D:D8
Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71
Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
Certificate serial: 19DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
Manifest number: 19C6
Signing time: Sat 28 Feb 2026 16:25:43 +0000
Manifest this update: Sat 28 Feb 2026 16:25:42 +0000
Manifest next update: Sat 07 Mar 2026 16:25:42 +0000
Files and hashes: 1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: 0u2j73uJf5e7yzu/t6p+OcazgWX72uQDmX8vmq2VpUM=)
2: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: NzsKwICfagzX9T3AahXgeWsHOEBVdu2eB1iizPCz1SA=)
3: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: 3hzCzmgLP0OteAC7KDBKKCAso9LvkCWYyHJfJCTMisY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl
rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6620 (0x19dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
Validity
Not Before: Feb 28 16:25:42 2026 GMT
Not After : Mar 7 16:25:42 2026 GMT
Subject: CN=69a31707-36c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:7a:49:bf:f8:60:6e:77:e3:04:78:fe:c2:
3b:4f:91:9a:46:90:28:fa:16:1f:2e:a1:05:90:ec:
d0:fa:c6:f0:d9:f5:a4:ba:32:03:b2:6e:4a:25:e4:
d7:4a:11:13:35:ea:81:80:ca:0f:8b:c5:12:f5:35:
97:2b:33:03:64:c7:fd:59:17:64:07:bd:04:3e:a5:
67:97:d6:f2:42:a8:92:94:f5:8a:7f:db:0a:ec:81:
f9:cd:5d:43:ca:73:63:a3:52:f8:48:d1:9a:ac:6b:
ef:85:63:4e:4c:ca:64:2b:d6:26:e2:fe:70:1a:84:
8f:db:12:6b:80:8e:a5:f9:32:22:6b:4a:d9:21:0f:
0d:ef:5e:83:5d:ec:e7:8e:f0:bb:44:24:54:45:04:
57:81:fb:48:3b:9f:f5:6f:5b:54:3d:6e:7e:28:f1:
cc:6c:f6:12:74:fe:80:e8:5b:d0:6b:94:45:4c:7c:
21:2f:fc:49:eb:d2:c3:b0:dd:5b:6f:72:7b:2f:e1:
4e:a8:57:2a:7c:14:80:02:1a:7e:ee:70:e5:aa:89:
23:63:a0:e6:8e:70:10:c3:05:be:38:9a:f7:d3:c4:
0e:09:41:96:e8:1c:70:cf:23:53:21:56:df:4d:c1:
37:d5:6f:ff:54:f9:f2:57:f0:f8:95:ac:0f:66:9c:
84:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:97:E4:92:F7:D8:CD:F6:BD:BF:94:B7:6B:65:A0:E7:9C:2B:1D:D8
X509v3 Authority Key Identifier:
keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:21:8e:99:1f:96:c8:d9:6a:fc:f1:94:dd:79:bd:d6:38:04:
f0:3d:0e:f6:a3:6f:50:f7:9c:98:9e:99:8d:81:d5:37:3e:72:
f9:8e:72:74:aa:5b:d4:65:34:28:42:f4:2b:9b:00:e5:ce:28:
a4:c0:c3:03:aa:e3:17:4c:a6:e6:39:c9:63:c8:6a:86:3e:53:
d8:1d:20:98:e7:43:2f:53:d8:7a:86:6e:21:bf:38:3b:4e:ac:
0a:eb:af:51:c5:b4:54:6d:e0:34:8e:02:fe:50:da:4f:a2:8c:
3c:1f:75:fa:8c:09:dc:6e:20:76:18:ec:df:95:be:ac:53:59:
3b:24:ff:0b:d2:72:1f:4b:df:81:44:e4:04:89:11:05:7f:46:
24:35:41:01:41:a0:57:fb:a3:57:86:73:04:de:3d:f8:e7:45:
88:34:be:75:11:5b:9f:1c:74:d9:ac:1d:0b:42:b9:29:54:92:
26:fc:33:67:10:20:9d:bd:72:0b:36:2e:e5:b7:93:ac:fd:e7:
9e:cd:39:42:0e:4c:46:c1:02:ba:f0:21:47:bd:48:6e:8d:32:
32:66:b7:72:00:25:aa:34:5c:78:e4:08:ef:79:6d:e7:66:32:
62:b7:e4:b2:19:f2:0b:28:90:0d:74:c9:98:f0:c6:31:9d:1e:
58:75:46:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:26:26 2026 by rpki-client