
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
File: HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft (raw, json)
Hash identifier: 0QXXJj3M2MikGNJeCVDp0JrZsLYyQn1fHMz3jI+TNTI=
Subject key identifier: 49:AB:03:26:49:05:24:1A:5D:36:93:B4:AC:AC:54:53:9D:83:9B:49
Authority key identifier: 1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4
Certificate issuer: /CN=A919EF2B/serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
Certificate serial: 035E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
Manifest number: 035A
Signing time: Sun 01 Mar 2026 01:45:32 +0000
Manifest this update: Sun 01 Mar 2026 01:45:31 +0000
Manifest next update: Sun 08 Mar 2026 01:45:31 +0000
Files and hashes: 1: HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl (hash: mHVmWkWFlhlapDo+MDkk3f97mZMrsmPY+y8kch1+SFY=)
2: 830C9F90EBCA11ECA2A1747EC4F9AE02.roa (hash: i5bEFhc7shjBgj4Fert4VleTijIxiv1ZRXXWoyNF05s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl
rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862 (0x35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF2B, serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
Validity
Not Before: Mar 1 01:45:31 2026 GMT
Not After : Mar 8 01:45:31 2026 GMT
Subject: CN=69a39a3c-bfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:83:1d:3d:dc:33:9d:86:d6:b2:d4:37:ba:
5f:4e:fe:d3:0c:69:ca:a1:1e:24:e8:68:c5:37:6d:
ed:4e:c1:50:c6:45:41:22:5e:e2:52:f5:bb:41:65:
92:e7:25:09:e5:d6:0b:af:0c:9e:26:6a:0c:23:d6:
9c:57:8d:0e:ce:07:eb:e5:6b:ef:77:79:00:3b:bc:
2e:86:2e:4d:da:b6:7a:f6:1b:f4:58:c3:66:ee:b9:
96:58:64:db:c6:aa:37:9a:db:6a:38:c6:90:d9:16:
ab:bb:c1:25:b7:21:99:10:d7:b1:d7:81:13:7a:fb:
a6:1a:05:a1:be:79:2f:a5:91:75:2f:32:c3:6f:f5:
b1:20:b0:0e:e6:32:10:88:db:35:02:72:1f:41:e1:
26:e3:c1:b0:18:64:07:d8:27:91:df:53:2c:17:d6:
7e:bb:e2:cf:e5:e4:17:c8:5f:5b:26:0c:d9:a2:a1:
a7:79:52:93:35:7f:42:a2:41:b1:0d:66:e7:9f:73:
0a:5a:1b:83:e9:26:e9:9d:96:c1:91:d5:c5:2c:3d:
d5:6e:08:07:3a:ea:0d:4e:90:de:dc:ea:df:cf:48:
cd:6c:b0:87:4d:b0:70:45:fe:fa:45:8e:67:cb:8b:
e3:dc:7e:35:43:74:a4:10:e4:6c:6f:ef:64:0c:27:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AB:03:26:49:05:24:1A:5D:36:93:B4:AC:AC:54:53:9D:83:9B:49
X509v3 Authority Key Identifier:
keyid:1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d6:b5:cd:a4:ef:4d:d8:14:82:58:0b:e9:be:5f:00:47:04:
4d:b0:a1:bd:a6:66:d6:f9:13:14:aa:7d:ac:30:72:eb:96:84:
ff:4f:b4:6e:20:39:e7:ee:98:0e:c5:30:2b:91:43:96:28:4c:
a2:51:d0:9b:00:71:34:e4:9c:93:f8:e6:ed:8e:6d:ef:b1:71:
40:97:62:b5:1f:20:5b:1c:72:46:2b:31:81:1e:0e:56:69:20:
9e:f5:eb:45:4e:65:e1:7e:8e:35:ea:bf:8e:2b:69:19:9e:61:
3a:4c:8a:c5:bc:40:04:85:4a:7a:c7:ce:de:1e:08:c8:e0:b6:
a2:0e:f0:08:fb:ee:55:85:9b:6a:be:46:c2:c6:e5:1b:d2:43:
4a:3e:1f:68:5b:e6:75:80:5b:7a:eb:34:7a:15:97:cb:8e:dd:
02:2a:8e:36:ce:30:c3:f4:89:79:1e:47:85:19:92:a2:f6:a1:
cd:e5:c1:11:5a:aa:88:c0:1f:35:53:21:9d:ce:44:61:4c:46:
47:89:da:7e:23:02:9f:b8:0a:f0:bc:5c:8c:c3:81:5e:48:36:
67:7d:b5:87:5f:89:75:30:48:c1:9a:6d:1d:99:4d:6c:25:7d:
6f:01:8f:21:c2:c1:f9:98:e1:28:76:de:61:74:47:20:0c:66:
2f:97:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:09:30 2026 by rpki-client