
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
File: hpBNLQLbigWb7ZOPL46u88Qgb9A.mft (raw, json)
Hash identifier: GrnIWJqFMEwacrAdBBWJ7x/NvgMwsuDG/AGPGamdelU=
Subject key identifier: 8D:E3:8B:9A:33:DB:1F:CF:2C:78:C1:1A:BE:80:7E:CF:48:30:06:08
Authority key identifier: 86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
Certificate issuer: /CN=A91D4ACD/serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
Manifest number: 0114
Signing time: Sun 01 Mar 2026 06:58:36 +0000
Manifest this update: Sun 01 Mar 2026 06:58:36 +0000
Manifest next update: Sun 08 Mar 2026 06:58:36 +0000
Files and hashes: 1: hpBNLQLbigWb7ZOPL46u88Qgb9A.crl (hash: 0sdqphblZAH1ElElySrc5kb3Z7w8V5hItJ31uPmpHhk=)
2: 388D7E38797D11EF8CA64711C4F9AE02.roa (hash: w4Rh9NpZ/IQ60xsdouCsCPn/eRzJ06RRF4GvfzZ5uwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4ACD, serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Validity
Not Before: Mar 1 06:58:36 2026 GMT
Not After : Mar 8 06:58:36 2026 GMT
Subject: CN=69a3e39c-2c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:4a:64:e9:e6:ff:d8:22:cf:3e:57:4e:8f:
98:c9:53:e9:71:37:48:4a:71:53:b0:ea:e1:5c:d1:
f8:1f:fe:bc:92:c2:38:c2:2d:01:4a:fc:92:28:00:
b8:c9:6c:e6:14:0e:d8:cd:b8:e1:27:81:f8:b0:44:
61:88:e3:71:1b:99:10:66:06:be:29:5b:41:d0:8c:
af:5e:46:8c:a0:83:53:b5:2e:fb:5a:57:28:f5:71:
e1:7a:30:18:5b:ff:14:90:1c:ef:65:ac:19:d7:71:
ae:8f:fd:c1:78:3a:cf:c6:96:2e:23:42:7d:41:00:
1f:cf:1a:1a:90:d8:5e:ed:88:98:06:7c:dd:17:5f:
82:35:8a:39:bc:4a:cb:dd:72:c0:00:1d:39:7c:cd:
76:ca:56:5c:f6:90:71:34:28:8a:cf:32:16:8a:7b:
09:9e:d9:4f:17:c2:87:a7:db:03:20:03:0c:ec:82:
10:31:83:3e:33:3e:89:ec:7b:73:cb:62:66:7c:b1:
f5:eb:87:bf:5c:aa:cb:ea:ba:41:f6:14:2f:bd:1a:
38:fe:66:bb:4e:18:c2:b2:99:1f:7f:72:99:d4:68:
46:86:37:46:c2:38:9d:27:ca:4f:a4:1e:1d:07:5c:
43:71:95:52:2c:d5:74:c3:ba:85:b2:c2:b5:cc:16:
b6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E3:8B:9A:33:DB:1F:CF:2C:78:C1:1A:BE:80:7E:CF:48:30:06:08
X509v3 Authority Key Identifier:
keyid:86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:6f:67:28:df:9c:24:10:69:27:4a:57:b1:c5:88:25:d5:c8:
aa:7d:c5:ea:e6:d4:8d:bc:38:ca:c2:d6:0c:56:cb:42:20:50:
38:4a:75:1b:a7:0f:e6:5c:70:45:1b:14:84:98:9a:6b:42:b0:
00:4e:36:2b:0e:de:1e:21:a5:ea:34:13:ce:6a:0c:b2:ed:8c:
87:1e:43:a5:f4:aa:98:2c:32:63:11:0d:5a:72:a3:5a:66:7a:
18:38:73:2a:01:c5:4c:3c:66:c7:12:95:c7:1a:ab:14:71:d2:
07:a7:1c:44:5d:57:53:71:49:b9:29:fb:3c:f4:ec:55:9f:c8:
e2:ae:05:35:bc:ac:39:f3:e5:6d:29:b6:05:a0:78:4a:36:44:
fc:26:98:ea:26:c8:2c:f8:1a:ea:5f:b6:c8:39:1d:29:ba:d3:
bd:d9:33:d7:38:90:49:82:b8:3b:58:5d:6c:21:8f:41:fd:c2:
3b:81:8a:ae:83:1a:f9:f8:b5:fe:60:6e:bd:84:6a:69:13:d5:
e4:4a:72:dd:e4:42:d0:2c:1e:1f:50:ef:b8:09:cc:78:b5:69:
a1:bd:25:19:cc:71:61:ae:d5:cc:f8:49:c4:2d:32:18:66:df:
80:d1:91:cd:b8:4a:0f:aa:4a:23:be:a2:72:bf:9c:f6:c5:fc:
26:2f:6c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:00 2026 by rpki-client