
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
File: HdM6aLwLXJMQ__Uq1zlBINECpic.mft (raw, json)
Hash identifier: LMGXyqlEU+gjoQCcIUkjQLFrC0yHnCOktbTpUulhjrY=
Subject key identifier: D6:F1:67:99:74:B0:85:AF:96:70:30:F0:3E:E6:92:27:9B:90:87:77
Authority key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27
Certificate issuer: /CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
Manifest number: 016C
Signing time: Mon 21 Sep 2026 04:54:24 +0000
Manifest this update: Mon 21 Sep 2026 04:54:24 +0000
Manifest next update: Mon 28 Sep 2026 04:54:24 +0000
Files and hashes: 1: HdM6aLwLXJMQ__Uq1zlBINECpic.crl (hash: uQczCtXf6F/g4DcC//pm5Wh5ElPld2NGCMHkSJVVroo=)
2: C7500EC88C2F11EF82B2F55CC4F9AE02.roa (hash: wRT9sM0qBqJTw3W+Zz9nGxaklW3kwpSgScv5I5RXTWo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl
rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5319, serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627
Validity
Not Before: Sep 21 04:54:24 2026 GMT
Not After : Sep 28 04:54:24 2026 GMT
Subject: CN=6ab0b880-e37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:5a:c4:b5:0d:9e:a2:27:86:cb:2c:c8:e2:
ee:ed:9b:82:6c:3f:43:75:39:94:8d:2d:91:0b:32:
ab:3c:f5:86:6e:f1:3f:5a:df:a1:a9:ed:9a:95:2b:
da:0f:1f:0a:57:81:4e:d8:ef:f7:72:d6:9d:51:e3:
9f:7f:9b:4a:d3:8a:42:d6:55:0a:b8:35:4c:d4:2e:
dd:9a:d7:e1:9b:29:90:59:6e:94:11:6e:81:42:27:
08:bb:ee:8a:dd:5d:27:da:33:e5:51:df:2e:b0:63:
42:97:fd:52:e8:c5:27:a3:9e:48:e8:a7:0b:fb:40:
f5:a7:1a:cc:36:dc:70:c6:b5:56:48:b3:c6:eb:aa:
4a:ed:92:1b:d6:51:3a:ca:15:eb:3f:a8:60:58:71:
ff:cc:60:04:6f:35:92:d2:ad:f7:1b:2f:a9:d1:f1:
ef:98:37:bd:c8:0f:1f:12:77:56:62:dd:96:77:c6:
17:3d:7f:69:b8:2e:b4:4a:63:be:aa:f7:9a:da:9e:
11:cd:cc:6d:66:5b:c0:61:c7:bf:1e:f3:ed:5b:af:
82:1d:13:e7:4d:88:f5:58:7a:cb:25:a7:ee:bd:d5:
d8:23:68:67:21:51:eb:7c:d0:37:bb:30:ff:20:e6:
a6:82:b4:2f:aa:17:0e:e3:bc:75:a6:54:07:78:ae:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F1:67:99:74:B0:85:AF:96:70:30:F0:3E:E6:92:27:9B:90:87:77
X509v3 Authority Key Identifier:
keyid:1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:46:e2:da:73:3d:a6:59:87:9e:9e:34:97:cb:c0:50:d1:2b:
85:23:04:f2:88:d4:d8:38:4f:88:0e:3c:a1:2e:75:ce:66:0c:
22:f6:b5:ff:af:ee:1f:1d:f4:45:73:47:c7:d2:12:3f:3f:4c:
a7:4b:7d:28:57:f7:0a:a4:97:16:89:86:ca:3f:85:e8:5b:84:
81:3c:fa:68:a0:31:e1:f0:0e:b7:75:ae:6f:26:f0:30:de:6a:
64:18:7b:4b:d3:17:ad:c2:2c:d0:da:87:d1:3a:71:79:8f:26:
86:02:98:8a:bd:f8:a9:e9:a0:f0:96:b9:9a:76:dd:e8:8f:21:
8d:a0:33:2e:cd:54:e0:44:ed:f7:3a:68:67:c7:94:9c:8e:ca:
36:50:1d:ed:74:3f:86:83:f2:8d:45:fe:16:e1:31:9e:4e:e5:
4c:e6:11:3c:25:35:b9:c1:78:df:f4:9f:b9:bf:c7:fb:31:d4:
36:96:02:9a:8c:4f:de:6f:09:5d:ad:cd:78:ed:74:5d:39:35:
b6:c5:d0:b1:ed:98:a4:d5:f6:23:b9:be:a5:9a:94:b3:35:d0:
ec:1d:ef:3d:ba:ab:37:c9:9d:58:60:09:96:53:84:47:27:75:
84:e8:bf:23:48:9f:39:d9:13:9f:62:1e:b4:96:44:dc:fb:72:
db:f8:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:01:06 2026 by rpki-client