
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
File: HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft (raw, json)
Hash identifier: eUWUAdoIKWH5RSHSEIkw/DmNFAkdGHJFZDG550W2X3I=
Subject key identifier: 17:6D:39:33:C1:B9:B7:4A:7B:AF:48:2A:61:AA:FF:A9:20:E9:9B:4B
Authority key identifier: 1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4
Certificate issuer: /CN=A919EF2B/serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
Certificate serial: 037A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
Manifest number: 0374
Signing time: Fri 17 Apr 2026 00:44:36 +0000
Manifest this update: Fri 17 Apr 2026 00:44:36 +0000
Manifest next update: Fri 24 Apr 2026 00:44:36 +0000
Files and hashes: 1: HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl (hash: 1ah9c65JCihoU8Sqez/rfe7X3h9l/ENHAtd60TUBcjA=)
2: 830C9F90EBCA11ECA2A1747EC4F9AE02.roa (hash: 3NxrjtF1LNJgYupbzMrriTN+tRYzA8aged2EpehvID4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl
rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF2B, serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
Validity
Not Before: Apr 17 00:44:36 2026 GMT
Not After : Apr 24 00:44:36 2026 GMT
Subject: CN=69e18274-8c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:56:68:13:af:6f:be:02:f1:70:53:40:32:
7d:6f:42:b0:1d:66:d5:fe:6a:f1:d2:ad:14:55:ff:
6b:80:8d:bb:f5:38:b1:51:36:17:63:02:3a:e8:49:
e0:b7:69:e3:44:c5:bb:49:af:7f:41:5d:ce:a4:4e:
f3:a6:cb:4c:42:1c:dc:86:83:ba:43:4c:2c:d5:9f:
e6:ab:98:19:f0:85:96:9a:7f:c5:77:8b:ae:eb:7b:
9a:7c:53:e3:af:19:bd:c7:ab:32:ef:18:e4:7b:0e:
b7:46:35:30:41:82:15:4f:b2:6c:b7:27:96:f7:8e:
f2:ce:e6:f5:9e:4f:91:59:0b:54:bb:7c:0b:ea:be:
b1:64:86:bb:e4:72:bb:bd:7d:de:94:e5:ba:f0:34:
5e:d8:ee:91:dc:32:a0:cf:4d:5d:91:e2:71:69:a5:
e5:4e:f4:4c:19:34:55:aa:a4:05:8a:93:17:41:63:
12:98:67:3d:a0:a5:0a:2d:1e:4c:81:48:72:e5:c1:
1e:87:d9:25:0c:50:bb:64:a3:9a:07:90:b8:87:2a:
8e:59:9e:2d:54:b6:62:1d:b8:1a:10:8b:40:d0:c1:
65:46:75:1c:2f:a7:4f:1c:10:f8:da:8b:57:0b:e3:
41:15:9f:de:44:98:c2:9f:e6:a7:0c:1b:2e:19:a6:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6D:39:33:C1:B9:B7:4A:7B:AF:48:2A:61:AA:FF:A9:20:E9:9B:4B
X509v3 Authority Key Identifier:
keyid:1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:55:a6:3e:2d:44:99:e0:8c:f1:76:52:14:9f:b8:db:39:c5:
5f:99:fa:44:16:b1:28:7f:05:88:b1:da:a8:d7:0f:1f:62:63:
ec:60:07:83:43:e3:73:e7:43:00:5b:ed:51:35:ca:68:7a:fe:
e4:f1:ce:f1:80:1e:fc:c1:fa:32:b4:6e:e4:99:62:fa:63:6e:
d1:57:8e:81:aa:56:0d:f3:78:55:a4:a2:8a:46:c9:db:e8:c7:
d2:96:cc:37:d8:24:25:ae:11:67:f9:9a:ee:40:3d:02:40:f8:
57:d0:4e:ba:b7:a6:9d:bf:5b:8a:b6:23:3d:4b:66:09:a2:c1:
71:dc:9f:70:ed:ad:f1:71:c7:ed:ec:ff:5e:2a:0f:8b:ab:1e:
3e:e1:5b:45:8c:c9:86:4c:f7:78:f6:9d:cb:df:3a:6b:d1:85:
15:c3:6a:58:b9:5e:53:a2:e6:c8:cc:aa:b9:5f:31:6d:51:44:
c4:00:94:68:d5:30:02:78:e7:ef:83:b9:49:90:6f:4c:fb:63:
48:79:14:a5:57:60:cc:01:4d:83:16:cd:95:32:02:40:8c:3b:
91:61:f7:4b:f3:60:d0:20:1b:b0:2e:fc:d0:dc:93:da:4c:00:
a2:e8:40:c0:10:98:07:d2:5f:49:d8:5e:a0:35:d1:8f:f7:36:
07:b9:e1:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGMkIxMTAvBgNVBAUTKDFDQkE4RDNEQUE4MDQ4ODkzMEE5OTI4QjE5NkVERUUw
NzVGNDA5QTQwHhcNMjYwNDE3MDA0NDM2WhcNMjYwNDI0MDA0NDM2WjAYMRYwFAYD
VQQDEw02OWUxODI3NC04YzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAviJWaBOvb74C8XBTQDJ9b0KwHWbV/mrx0q0UVf9rgI279TixUTYXYwI66Eng
t2njRMW7Sa9/QV3OpE7zpstMQhzchoO6Q0ws1Z/mq5gZ8IWWmn/Fd4uu63uafFPj
rxm9x6sy7xjkew63RjUwQYIVT7JstyeW947yzub1nk+RWQtUu3wL6r6xZIa75HK7
vX3elOW68DRe2O6R3DKgz01dkeJxaaXlTvRMGTRVqqQFipMXQWMSmGc9oKUKLR5M
gUhy5cEeh9klDFC7ZKOaB5C4hyqOWZ4tVLZiHbgaEItA0MFlRnUcL6dPHBD42otX
C+NBFZ/eRJjCn+anDBsuGaYxRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBdtOTPB
ubdKe69IKmGq/6kg6ZtLMB8GA1UdIwQYMBaAFBy6jT2qgEiJMKmSixlu3uB19Amk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUYyQi81MzczMjJGQUVC
QzQxMUVDOTM4NUVDNjJDNEY5QUUwMi9ITHFOUGFxQVNJa3dxWktMR1c3ZTRIWDBD
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hMcU5QYXFBU0lrd3FaS0xHVzdlNEhYMENhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUYyQi81MzczMjJGQUVCQzQxMUVDOTM4NUVDNjJDNEY5QUUwMi9ITHFOUGFxQVNJ
a3dxWktMR1c3ZTRIWDBDYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARVWmPi1EmeCM8XZSFJ+42znFX5n6RBaxKH8FiLHaqNcPH2Jj7GAHg0Pjc+dD
AFvtUTXKaHr+5PHO8YAe/MH6MrRu5Jli+mNu0VeOgapWDfN4VaSiikbJ2+jH0pbM
N9gkJa4RZ/ma7kA9AkD4V9BOuremnb9birYjPUtmCaLBcdyfcO2t8XHH7ez/XioP
i6sePuFbRYzJhkz3ePady986a9GFFcNqWLleU6LmyMyquV8xbVFExACUaNUwAnjn
74O5SZBvTPtjSHkUpVdgzAFNgxbNlTICQIw7kWH3S/Ng0CAbsC780NyT2kwAouhA
wBCYB9JfSdheoDXRj/c2B7nhRA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:13 2026 by rpki-client