
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
File: HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json)
Hash identifier: JyzlqTm4EH/eOusJZbnMKiG/y3wWdm0akZ1hNC6wT+E=
Subject key identifier: 58:AA:C6:02:09:B6:3E:CB:33:63:87:85:95:AF:95:C5:6A:24:EE:61
Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Certificate serial: 14B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
Manifest number: 14A9
Signing time: Thu 16 Apr 2026 16:47:55 +0000
Manifest this update: Thu 16 Apr 2026 16:47:55 +0000
Manifest next update: Thu 23 Apr 2026 16:47:55 +0000
Files and hashes: 1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: YmXSk7UGnCtyuhDL/RWDwPXdp1Re1QqK6uRuaqL6GyU=)
2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: wDjfOh8609HdFw/YVyLAqOmKGoMVNeZ+2qVSszT55y4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl
rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5299 (0x14b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4286, serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Validity
Not Before: Apr 16 16:47:55 2026 GMT
Not After : Apr 23 16:47:55 2026 GMT
Subject: CN=69e112bb-c0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:e7:aa:e7:f6:04:5b:3e:e4:22:48:b8:58:
43:4a:3c:55:bb:39:12:73:d9:00:3f:5e:c3:de:16:
02:81:d1:a0:92:7f:cb:1a:c5:a4:bc:d7:e9:c7:4f:
89:b8:93:be:b9:89:b4:3c:b6:04:a8:62:9c:3c:da:
09:cc:66:74:99:9c:84:16:36:ee:86:53:02:32:7c:
6b:a7:84:4b:c5:81:76:67:7e:de:55:89:65:7f:a4:
5f:aa:85:1e:3d:52:42:2f:a0:f5:44:ea:4a:73:39:
01:ad:a0:7a:45:0d:a9:6d:a4:d6:49:be:be:61:c3:
af:13:5b:23:be:76:a0:94:9b:f2:2b:51:8a:d1:f6:
40:5c:0f:fd:2a:2b:d2:df:9b:aa:eb:1d:ee:12:db:
ed:f5:70:88:c6:1b:f0:6c:e3:8d:db:85:1d:1a:24:
39:28:0f:c0:1d:4f:ff:2c:3d:ae:b7:da:11:8e:27:
ec:09:25:83:a1:68:db:1b:3a:e8:32:25:14:a5:e0:
be:f7:e3:10:d3:8a:7b:fe:df:d6:81:39:fb:4c:ee:
7a:56:51:18:ed:b0:3d:84:22:f5:50:7a:45:1f:bc:
c0:54:74:94:02:5b:36:5f:78:9b:48:dc:f4:63:bb:
a8:62:d9:d3:83:97:b0:04:18:6d:da:87:e2:f3:d3:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AA:C6:02:09:B6:3E:CB:33:63:87:85:95:AF:95:C5:6A:24:EE:61
X509v3 Authority Key Identifier:
keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:14:16:8b:57:ec:9c:c1:96:6d:7e:25:d5:29:27:07:87:e0:
92:38:a1:12:51:ba:13:67:bb:07:e3:b8:5e:c2:a7:a1:2b:e0:
ed:aa:99:88:77:e8:2a:b1:3b:0e:ee:24:7f:ae:7e:09:02:44:
f4:8f:0d:f4:65:6d:81:0f:c3:38:72:0c:cd:41:8a:ba:9f:fa:
7f:18:fe:59:9f:70:d0:10:5a:6d:39:fa:64:7d:a4:d0:4a:72:
66:76:d4:22:37:46:d8:fb:c5:61:1f:30:df:26:4c:82:f2:4c:
81:27:6c:18:ca:19:0b:c1:c7:b9:8c:4d:b1:64:1d:96:3a:16:
e7:dc:1e:c5:c8:1b:fe:db:c3:95:03:85:da:af:22:95:1d:32:
de:6d:00:fc:ba:35:20:cc:27:d8:e7:2b:d9:55:7f:53:b8:a1:
c3:91:ee:c1:aa:9a:5f:f2:fd:06:a8:8b:5b:4c:f7:65:c6:18:
56:9e:56:7f:1c:05:5d:40:41:5d:f9:b1:ee:50:b8:1d:f0:87:
ed:d0:d3:43:cd:1c:ae:df:15:fa:20:8c:7f:84:74:58:41:26:
f3:97:57:31:62:5c:02:1e:0f:5b:49:41:42:81:aa:21:e2:35:
d6:5c:b1:4e:b7:5d:b3:62:24:cd:fc:0d:9b:33:9a:f6:9e:03:
ca:94:a9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:36 2026 by rpki-client