
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
File: HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json)
Hash identifier: FrFVTODXVR2A19NZP2oyooZpCn4kFjpCh14gD2uIHJg=
Subject key identifier: 90:16:FC:C5:B5:8D:0B:0C:EA:54:AF:C0:1B:70:21:E2:E0:D6:78:AA
Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Certificate serial: 149B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
Manifest number: 1491
Signing time: Mon 02 Mar 2026 02:05:42 +0000
Manifest this update: Mon 02 Mar 2026 02:05:40 +0000
Manifest next update: Mon 09 Mar 2026 02:05:40 +0000
Files and hashes: 1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: SThROXFFospgNkH7Rx/J9COrteNhupLD3mq6SMENN5o=)
2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: wDjfOh8609HdFw/YVyLAqOmKGoMVNeZ+2qVSszT55y4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl
rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5275 (0x149b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4286, serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Validity
Not Before: Mar 2 02:05:40 2026 GMT
Not After : Mar 9 02:05:40 2026 GMT
Subject: CN=69a4f075-13a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:07:6e:74:ac:48:52:5b:2c:84:32:0a:3e:
ae:59:ed:a7:6c:26:21:0c:b0:fc:9f:e5:b7:fe:3b:
dd:0f:09:c4:81:85:17:9a:21:e3:b1:ea:ed:b0:fe:
3b:72:7a:56:4e:58:b5:ff:90:2d:98:89:9a:77:ad:
0a:be:37:47:62:20:61:74:4f:1c:45:81:48:d2:05:
4c:00:b4:56:63:22:38:17:38:e0:b6:4a:e0:86:b2:
fb:e3:b2:10:c1:83:37:25:24:79:75:2c:e5:b7:af:
ac:0b:52:87:89:71:be:83:80:ef:ff:78:95:ff:e6:
82:42:66:c2:ab:7b:4d:30:4c:9e:40:db:92:15:a9:
72:88:3f:a4:e8:61:10:12:48:22:0e:7e:b3:f4:84:
ae:6c:33:45:78:ba:41:c3:de:78:b8:1f:4a:b9:43:
2a:58:78:19:75:9b:fd:c4:01:ae:82:38:5a:d5:2c:
f6:fe:1a:ab:49:fa:43:a2:bf:f5:8e:56:a4:ff:45:
2d:2b:7f:82:af:34:f5:88:e3:f8:79:60:00:e6:a7:
e1:61:40:52:90:5a:1c:89:2d:b8:e9:71:93:d8:07:
d0:97:49:07:e6:15:23:bc:86:d7:3a:58:13:8d:e9:
49:d7:1f:f9:cd:ce:5d:0b:8f:2a:4a:2c:93:93:b0:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:16:FC:C5:B5:8D:0B:0C:EA:54:AF:C0:1B:70:21:E2:E0:D6:78:AA
X509v3 Authority Key Identifier:
keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:3b:89:cd:55:32:e4:b7:bb:32:6f:04:63:46:c7:ce:a2:c7:
f3:32:2f:ac:d0:21:05:d8:0f:27:ea:a8:a6:3e:86:42:d7:a5:
e2:f7:d9:a0:d2:04:dd:43:b3:1e:14:31:78:33:1c:a9:6a:c4:
b6:4a:c3:de:40:32:e2:5a:25:03:5b:43:54:a2:d7:d8:61:7b:
74:78:28:05:0e:99:84:dd:c6:19:57:da:c9:87:bd:ec:26:4b:
d8:ad:cd:d1:bf:91:fc:24:3c:d7:d6:1f:87:ff:47:ea:df:02:
bb:db:66:b3:43:20:55:b0:fc:2e:69:60:41:8e:71:bb:5c:ac:
32:e9:1c:df:3d:2a:44:07:df:3e:7c:b1:58:24:ee:ba:d2:76:
ce:c9:6c:4b:33:17:3b:e3:9f:7b:6b:c9:c4:a1:92:55:81:33:
d5:e4:b4:20:f0:60:a3:e9:4d:60:f1:dc:25:a2:3e:8d:48:9f:
4f:38:cd:b0:e7:8a:57:bb:40:87:42:e8:22:e6:fe:6a:04:0b:
31:66:82:06:05:06:9e:af:9b:e7:3a:55:e7:21:42:e4:39:3d:
b6:62:7d:61:f7:91:c3:2a:e8:db:98:1b:17:d2:ec:c9:42:c6:
ae:ca:e1:ed:a3:8c:ab:a7:bc:17:62:26:c1:80:5d:d0:61:0b:
e5:44:ab:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:32 2026 by rpki-client