
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
File: HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json)
Hash identifier: el9HZBQ6oxKNNL6f3xDYuKnwiTdJsEqqly3gL1f7xbc=
Subject key identifier: EB:F0:03:C6:C2:4C:75:34:3E:15:12:BB:C9:6E:94:45:F0:1F:A7:D6
Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Certificate serial: 14D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
Manifest number: 14C8
Signing time: Fri 12 Jun 2026 16:48:36 +0000
Manifest this update: Fri 12 Jun 2026 16:48:36 +0000
Manifest next update: Fri 19 Jun 2026 16:48:36 +0000
Files and hashes: 1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: IOulbAngLEtjD+mKDYP8kmtXUy0eouH/I9HupfNzYec=)
2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: WIOTnnHZpCOfxDVsg8g5aDJ6JWSGnelmuPFVOIcEOGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl
rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5331 (0x14d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4286, serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Validity
Not Before: Jun 12 16:48:36 2026 GMT
Not After : Jun 19 16:48:36 2026 GMT
Subject: CN=6a2c3864-174b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dc:37:bc:27:91:a6:8d:f8:cb:08:36:2b:9e:
68:5f:9a:ba:a6:cb:19:3f:e1:f4:b1:1a:b9:e0:65:
c0:09:94:36:5c:f5:85:79:61:19:8f:d4:8d:e8:64:
30:5c:3e:d5:8b:6c:74:54:2e:0b:1e:83:e6:62:68:
0e:84:d7:81:75:77:b7:6e:9e:79:0a:e9:c8:a8:ec:
b5:b7:ad:eb:b3:26:63:b5:7a:93:85:1c:17:cb:38:
e1:89:16:cd:5d:14:dc:cf:ca:d0:79:fb:fd:01:29:
39:dc:78:a9:47:64:fe:c6:74:53:6c:64:6e:c4:58:
92:6d:43:1d:5c:36:43:40:e5:fc:2e:7a:00:09:b4:
e0:67:6b:47:f7:4a:1d:f8:69:7f:ca:61:f4:45:1f:
3f:06:f2:96:4e:a2:11:cc:9c:4c:b6:fe:f4:32:d3:
4d:f3:c4:aa:9f:8b:1e:d3:08:6c:9d:7a:a2:9d:fd:
23:17:17:c2:d3:e9:7f:4e:c9:c0:13:71:b2:de:58:
47:62:d0:e3:e0:b7:a2:28:37:bb:de:f8:79:02:79:
48:37:5e:cc:b0:91:20:99:b0:dc:53:ea:13:64:ad:
cf:ad:5a:7f:d0:41:55:cb:f1:4b:9b:ed:d1:02:cc:
b3:f1:d5:7e:f4:58:23:34:7a:90:9d:58:05:3f:d8:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F0:03:C6:C2:4C:75:34:3E:15:12:BB:C9:6E:94:45:F0:1F:A7:D6
X509v3 Authority Key Identifier:
keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:bb:b3:3d:dc:23:99:88:d3:51:78:1a:2b:44:04:a8:d0:9c:
14:21:27:07:47:49:f4:94:20:14:9a:87:be:48:e1:a5:64:a3:
e5:a8:ba:cc:f7:17:61:f4:ee:21:56:aa:e8:e9:4f:d3:1f:d9:
f1:85:18:d5:59:0a:9e:ec:c2:b5:a0:f6:e0:01:e6:ac:b9:21:
7b:ba:c3:b8:0d:83:17:d5:cc:7d:4a:0e:77:8a:a4:ad:d3:fc:
f2:c7:51:35:03:c8:71:41:f9:6c:c4:8d:9c:18:1f:b9:fb:93:
c1:f2:21:2f:88:2d:7d:f0:ff:e0:0e:e4:0e:eb:b5:4a:a3:c2:
a9:57:f5:42:06:67:a7:0c:d6:08:9a:8d:2d:a4:0b:82:99:8a:
77:44:3e:00:10:7a:22:86:8e:eb:f4:0a:28:b5:7f:9c:79:05:
ee:9e:53:71:5f:3a:70:7a:9c:9e:e0:33:68:d0:cd:e9:d0:94:
65:a4:4b:86:c8:af:5e:4c:af:c2:3a:68:28:89:b5:2e:75:c0:
fe:29:d8:1b:09:d2:1a:79:59:94:11:4c:eb:3d:b1:80:f1:17:
fc:c1:d2:1e:25:28:75:58:a7:15:44:f7:31:6b:64:31:6b:9f:
68:37:26:2e:ae:56:91:44:3d:60:e3:f0:52:59:63:cf:ae:8e:
ff:94:68:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:53:00 2026 by rpki-client