
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft
File: HLlfP3vebhmbdAuSgqxyKk7amZs.mft (raw, json)
Hash identifier: nOeaXywAtL3DwbmfIrOjECPJtcaqoAP2aU3XkS3XPNQ=
Subject key identifier: 2C:0C:60:4E:77:63:D9:CB:92:34:55:76:59:78:8B:71:75:94:8B:E6
Authority key identifier: 1C:B9:5F:3F:7B:DE:6E:19:9B:74:0B:92:82:AC:72:2A:4E:DA:99:9B
Certificate issuer: /CN=A91E4EEF/serialNumber=1CB95F3F7BDE6E199B740B9282AC722A4EDA999B
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft
Manifest number: 80
Signing time: Mon 27 Jul 2026 10:07:56 +0000
Manifest this update: Mon 27 Jul 2026 10:07:55 +0000
Manifest next update: Mon 03 Aug 2026 10:07:55 +0000
Files and hashes: 1: HLlfP3vebhmbdAuSgqxyKk7amZs.crl (hash: fTpiXVBW08vm3UQJK63Oav7Wc/Kn5oEIfuBDG+IzQ9U=)
2: 304D9EDEF13A11F0A5B04E41566F56BC.roa (hash: AC/jIeXBOHw70y2QOJSmCZ+NDE9I0e7M9WpwuYpLz9U=)
3: 0C1F9D8CF13A11F08789470C566F56BC.roa (hash: sgoDIUBe0jr7XN1MyW0ONqjTLm6kK+bIbhy55Li2/S8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.crl
rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EEF, serialNumber=1CB95F3F7BDE6E199B740B9282AC722A4EDA999B
Validity
Not Before: Jul 27 10:07:55 2026 GMT
Not After : Aug 3 10:07:55 2026 GMT
Subject: CN=6a672dfc-2c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:ff:90:b2:d7:ef:2f:50:e8:6e:4b:0e:51:
df:98:73:5e:10:6f:61:a3:ab:85:de:7f:37:34:ea:
53:34:15:cf:22:37:36:aa:48:ae:a5:ae:3f:e7:33:
c1:1f:d9:53:8a:54:da:6a:e4:b6:c1:4a:10:60:a3:
ad:0a:41:ba:25:76:72:2d:97:e6:6f:d7:e1:ab:28:
56:5a:35:17:66:23:ce:44:9e:9a:2a:73:74:07:45:
16:03:1a:28:34:46:02:10:d6:2d:0f:8d:18:a0:16:
97:0d:67:18:9c:4b:65:98:0a:46:66:31:0d:63:ca:
74:7b:8a:5b:99:12:d5:07:83:67:9e:34:01:5b:23:
68:85:0f:24:37:de:7c:ec:20:73:ec:85:d9:f8:3b:
de:d6:68:cf:e2:36:fc:46:4b:45:10:d2:0b:64:b6:
6d:3b:33:6b:38:77:c3:47:9a:89:b9:d5:27:eb:d7:
db:27:07:a3:d8:ff:9d:04:e8:53:31:64:78:21:fa:
03:65:fe:10:37:32:8b:6a:c5:7e:8e:19:f5:dd:ea:
08:8a:2a:34:7d:0d:10:99:4f:83:76:98:80:8e:8d:
32:25:1c:f4:6e:03:cb:fe:fd:cc:67:f6:8a:58:34:
97:e6:21:0d:70:ab:f1:d4:b8:ea:c0:b9:7a:ec:4e:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0C:60:4E:77:63:D9:CB:92:34:55:76:59:78:8B:71:75:94:8B:E6
X509v3 Authority Key Identifier:
keyid:1C:B9:5F:3F:7B:DE:6E:19:9B:74:0B:92:82:AC:72:2A:4E:DA:99:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:bd:7b:bb:65:9a:80:be:39:14:72:c7:1b:a0:cd:ae:17:21:
18:ec:4a:f1:5c:e6:ed:08:42:e7:c4:80:a3:0d:02:a5:36:ec:
49:cc:56:2b:3c:ac:0a:d9:fa:cd:5c:c6:b4:00:53:c9:81:79:
c4:55:36:04:6e:fd:7e:0f:3a:4b:90:a9:dc:cb:47:17:f3:54:
f2:6c:98:96:7d:82:b1:b0:d9:67:f9:3c:b1:2f:b7:14:ff:21:
b0:eb:73:bf:93:92:18:16:46:31:8e:ed:d2:54:6d:da:4f:19:
ed:a9:b9:ad:cd:ed:12:ca:44:5c:45:75:51:2f:2b:8a:14:20:
24:27:6c:ff:6a:80:33:cf:4e:b6:7d:7a:7f:fd:52:3a:d4:34:
fb:f6:04:02:b5:25:30:79:c0:5e:d0:06:5e:1b:14:09:0a:7d:
09:77:3d:0e:e5:a1:fd:55:6e:91:c2:61:61:a5:b8:2d:77:32:
a6:c4:64:cb:47:c9:57:ea:81:36:aa:94:32:8e:07:2f:66:c6:
38:ce:8f:29:49:38:e3:b6:10:0f:01:cb:25:54:0c:0e:7c:3a:
96:b2:81:88:56:43:a1:c4:75:c2:84:f4:0b:0b:92:d9:be:de:
f8:24:77:a4:ec:d3:85:fd:3e:7e:ea:e6:a1:b1:c1:3e:2b:5c:
2c:f2:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:43:30 2026 by rpki-client