
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
File: HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json)
Hash identifier: aYfEoKHps2GwkrLa383JeCdaA/snaVay/H+wh57YHUQ=
Subject key identifier: 81:DE:7B:A2:BE:CD:67:12:C9:1C:B4:D5:4E:F8:81:44:EF:2F:A6:6D
Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Certificate serial: 150F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
Manifest number: 1504
Signing time: Thu 08 Oct 2026 16:52:40 +0000
Manifest this update: Thu 08 Oct 2026 16:52:40 +0000
Manifest next update: Thu 15 Oct 2026 16:52:40 +0000
Files and hashes: 1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: Y3HsazAh5hiWrsCUTv+TVBsEmIrWZDtQq/Q9/ajxYuE=)
2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: WIOTnnHZpCOfxDVsg8g5aDJ6JWSGnelmuPFVOIcEOGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl
rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 16:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5391 (0x150f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4286, serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Validity
Not Before: Oct 8 16:52:40 2026 GMT
Not After : Oct 15 16:52:40 2026 GMT
Subject: CN=6ac7ca58-2021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:10:f4:ab:3f:63:f4:b3:91:66:0b:77:b8:
d3:98:7b:c7:0b:5d:3e:d4:5b:2e:9e:a0:13:bb:af:
d0:e1:fc:c0:cc:11:9e:a4:e7:52:d8:44:6c:fb:7a:
9f:c2:c1:e1:9f:6b:58:13:48:b9:e9:20:8c:f8:7d:
34:29:75:40:ff:89:a7:fc:a2:24:82:8b:ef:62:e7:
82:d3:e8:e0:6d:e5:65:c6:0b:0c:5e:8d:65:f1:42:
ac:d2:d3:a8:75:ac:26:3f:95:2e:b2:91:32:a9:f6:
8d:d0:ee:d1:f6:45:f1:34:35:b9:22:3b:d2:d6:26:
8c:d0:82:f1:b1:e8:34:90:08:ce:82:11:df:c8:2a:
d0:19:92:b8:1a:2f:35:86:b3:c7:4e:8c:04:54:18:
18:52:4a:7b:91:02:ab:fd:1d:e4:90:0b:1c:af:f4:
83:e7:62:ae:e7:6f:ed:fb:f5:2a:b4:63:8e:92:af:
e0:bf:05:e0:a7:bf:0c:f5:f1:76:c1:2f:78:a0:76:
2b:48:96:b4:b9:16:3b:3c:03:0d:2a:57:82:3d:c0:
0b:77:a3:52:1d:b9:7d:36:40:2c:85:95:0c:ea:25:
8b:9d:5a:25:5a:e4:bc:2f:fe:b3:6e:90:54:c6:69:
b0:20:50:49:29:f0:b0:3d:07:90:31:be:d7:5d:f0:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DE:7B:A2:BE:CD:67:12:C9:1C:B4:D5:4E:F8:81:44:EF:2F:A6:6D
X509v3 Authority Key Identifier:
keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:a8:be:37:98:95:6b:e2:a9:ec:29:ca:d1:6f:92:c0:1d:56:
e4:18:4f:d2:43:5b:a5:fd:2f:b1:ab:6f:9e:fe:db:14:14:53:
22:75:07:de:95:c5:00:cf:78:d8:07:31:33:a9:ec:ef:d9:c3:
98:f5:2a:2a:0e:7d:0e:b6:99:cd:83:c0:c2:3e:be:0e:13:65:
cf:ac:9b:bf:8f:37:f1:53:91:c2:b5:bd:6c:31:4e:3f:68:30:
95:75:c9:bc:0b:8e:23:1a:92:a3:1e:a6:c0:90:1c:d6:09:8e:
c1:c6:03:42:06:65:43:57:22:cc:1c:49:68:5c:bf:9a:3e:7b:
b6:f7:95:4a:6a:d5:ca:c0:88:b6:09:ff:02:9c:c4:6d:cf:b7:
06:9f:90:29:6e:e1:2b:fb:93:2c:12:c6:a8:9a:41:cf:3a:58:
c7:9e:f6:74:5d:ff:de:ed:7d:d1:48:4e:cb:bf:53:17:bc:30:
07:41:85:9d:9c:7d:80:21:0f:10:81:c0:5c:74:26:a0:69:0e:
5d:f8:e4:8a:35:d5:60:d0:73:93:0a:2a:2c:bd:a5:98:e0:68:
53:1c:67:b7:5b:b4:43:4c:33:4e:7e:9d:87:90:41:16:1b:34:
90:80:f7:25:65:5d:2f:e5:09:73:84:31:d8:09:8a:f7:d0:ce:
a9:27:91:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:28:36 2026 by rpki-client