
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
File: HlpjIbEaoIRvqJvxObzs2604vjc.mft (raw, json)
Hash identifier: kgu/zD6Ku+w+a6KRE6adaiaBQSo27xuVuxCSgnSB1Dk=
Subject key identifier: CB:E9:54:43:17:47:70:CD:41:14:DD:B4:A5:21:D9:AD:9A:31:57:F2
Authority key identifier: 1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37
Certificate issuer: /CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
Certificate serial: 35C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
Manifest number: 3579
Signing time: Mon 02 Mar 2026 01:54:51 +0000
Manifest this update: Mon 02 Mar 2026 01:54:48 +0000
Manifest next update: Mon 09 Mar 2026 01:54:48 +0000
Files and hashes: 1: HlpjIbEaoIRvqJvxObzs2604vjc.crl (hash: 23vB9AxManAmzrhhwtk6HGcr2wf7fzzWc5Ti5owAoc0=)
2: 0997A5828A1511F09F6EBD2BC4F9AE02.roa (hash: ODWKcUe3z5vKtDIj0xaFZ5y/WUcNqtmAta/zMVOpKQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl
rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13767 (0x35c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9D76, serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
Validity
Not Before: Mar 2 01:54:48 2026 GMT
Not After : Mar 9 01:54:48 2026 GMT
Subject: CN=69a4edea-f351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:38:46:36:ba:37:fb:89:25:2a:26:7a:da:
83:6e:14:49:6f:f0:36:a9:71:48:dc:29:a0:fd:31:
b1:53:16:73:67:f8:5c:9d:d6:a6:dd:45:48:72:2f:
a2:52:49:ed:bf:a2:cb:7f:9c:c2:65:00:4d:83:83:
5d:f1:7c:f2:2a:b8:4a:cc:a2:e3:2c:af:3b:3b:cc:
4e:ed:da:0b:78:e2:09:1b:9d:73:cf:64:d5:00:ff:
c5:18:97:70:5f:c0:1c:94:32:d2:8a:5d:ba:07:3a:
7d:6e:60:2b:8b:5f:a9:1f:14:2c:8b:7c:e1:60:58:
a2:41:82:50:2c:ab:38:ba:e6:c2:1e:e3:88:32:a5:
44:f5:e0:44:eb:35:24:90:e2:54:9b:69:3d:43:08:
a4:04:26:2f:2f:5b:0b:86:5c:b0:4d:ac:cc:07:91:
40:ea:fe:12:15:ac:8d:f8:69:46:91:84:f5:69:64:
f4:43:a1:48:13:d7:f7:7e:46:7b:f1:83:01:5c:4c:
a7:71:8a:93:47:e9:25:59:c4:d9:67:25:ed:a7:db:
ea:a9:28:9f:61:0b:1c:92:fe:12:8a:a2:32:cc:67:
88:55:01:41:34:d4:a0:82:48:db:18:81:0c:c8:1f:
7d:7d:d4:4b:af:8a:dd:41:00:44:e6:8d:13:5a:61:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E9:54:43:17:47:70:CD:41:14:DD:B4:A5:21:D9:AD:9A:31:57:F2
X509v3 Authority Key Identifier:
keyid:1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:57:b1:0f:02:a3:8c:08:c3:91:e3:9e:d9:2e:5a:cb:01:23:
d6:30:76:9b:ad:f0:f5:ce:06:df:9a:4a:92:e5:f2:ff:10:37:
7d:6c:a6:22:47:2f:25:4a:04:f9:03:af:7a:91:42:43:a5:df:
7a:af:6e:50:29:c1:b3:4a:a7:fb:4e:4e:54:5d:e5:f8:30:05:
11:85:44:c8:3d:02:16:ac:37:63:84:ef:9c:b8:cb:e9:5a:03:
9e:4c:92:58:2d:53:b3:1a:e1:2b:f0:fc:f3:c9:ea:f2:c2:e7:
e5:94:3a:0f:e7:93:4b:24:9b:18:28:15:35:7b:1c:03:7e:ce:
f7:aa:31:ef:3b:af:65:de:12:0e:8a:5f:f4:ab:00:b3:35:d1:
47:dc:f0:8d:b9:20:2b:d4:3a:e0:2b:27:a2:ca:c6:91:91:87:
84:7e:b2:2f:09:3b:81:3b:42:ef:d4:fa:d4:ef:a5:5d:7c:48:
ec:46:29:70:d8:fb:1f:ec:22:4c:cc:a7:32:10:10:8e:1e:97:
89:1e:95:af:72:ff:b4:33:5e:30:37:16:b0:3f:2c:1c:93:da:
61:bd:81:3f:39:31:77:9b:0d:2b:6f:3e:7c:a1:6d:53:be:90:
fa:06:c8:0f:ae:19:45:84:13:10:c2:5f:4e:40:bb:ff:74:51:
f7:67:74:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:37 2026 by rpki-client