
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
File: HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft (raw, json)
Hash identifier: n7hZRWz9UtvBYNeMs+5jZIFCGuBUQKJLUf6RZIqpxfA=
Subject key identifier: 43:FA:7C:C8:A1:50:77:D9:22:80:5C:FB:16:C5:8C:93:69:F5:BE:B3
Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
Certificate issuer: /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
Manifest number: 69
Signing time: Sat 13 Jun 2026 08:05:38 +0000
Manifest this update: Sat 13 Jun 2026 08:05:38 +0000
Manifest next update: Sat 20 Jun 2026 08:05:38 +0000
Files and hashes: 1: HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl (hash: DkoLFios3FNdDCuIvDPLKnEPiZONCeVnauWJFKIyUoo=)
2: C673BB1AD0EB11F088F8F063C4F9AE02.roa (hash: +lTLwLrmEGRpnIGIwjJCBRzNe7yk7RhMSey/Pk+Y8/E=)
3: C598E8DCD0EB11F08228F063C4F9AE02.roa (hash: Hi6se8LEGyhgp/b0G+d22teZcTwcQ2maa7DY8eg/6Bw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl
rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
Validity
Not Before: Jun 13 08:05:38 2026 GMT
Not After : Jun 20 08:05:38 2026 GMT
Subject: CN=6a2d0f52-bb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b1:e2:46:19:a1:80:58:9d:f9:05:b8:aa:b9:
a5:56:b3:e8:58:af:30:2f:2d:04:77:5b:fa:85:53:
9a:6f:d8:b6:4b:8d:61:89:18:1b:ab:86:55:ed:52:
73:b0:bd:bd:fa:5b:d8:1f:40:77:11:72:6e:1c:ac:
5c:72:5d:06:c9:29:e0:bd:7a:15:f7:d0:0e:25:6d:
03:cb:72:13:e1:9c:9d:bf:90:2f:58:98:c7:e2:85:
26:82:42:f7:df:1c:8c:1a:7a:38:dd:17:87:a0:76:
80:74:f3:7e:59:26:dd:5f:92:0c:ce:64:d4:70:c7:
3c:f4:54:c0:cc:2c:da:d6:87:92:e6:d0:df:1c:92:
97:32:af:1e:60:5d:29:26:0e:e4:e5:85:5d:1a:28:
08:98:ab:44:0a:57:f5:33:fe:f0:f6:8b:45:f6:0b:
95:db:0f:64:6d:b8:50:26:4b:05:36:c1:a1:2e:bd:
2e:2d:33:db:02:7b:b4:ca:03:57:98:8f:85:55:3f:
dd:e4:2a:0d:5d:0b:93:f3:c8:b6:a9:51:a3:6d:23:
32:4f:ee:2f:67:ff:1e:28:99:be:da:fc:22:90:79:
f1:01:13:f8:d8:8f:fd:6a:cc:1d:0e:2f:ed:86:15:
4d:aa:31:e4:52:44:51:b8:d7:b5:c3:03:d9:8d:b2:
66:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FA:7C:C8:A1:50:77:D9:22:80:5C:FB:16:C5:8C:93:69:F5:BE:B3
X509v3 Authority Key Identifier:
keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:a5:cc:92:6c:2e:af:c3:66:ec:e2:55:df:cc:48:21:a5:29:
fb:05:6c:24:ae:1c:15:95:9d:7f:50:e5:fa:bb:2a:53:08:0f:
54:ea:a3:db:0e:42:f7:3f:c7:63:d7:d9:4d:c8:6f:c6:07:81:
a0:ca:1b:d6:06:fc:bb:22:4d:62:c8:de:82:e1:68:f8:34:9e:
6b:17:44:fc:12:0f:d9:af:9c:85:66:0d:92:f1:f7:37:f9:87:
fa:d0:53:23:63:ab:12:30:84:d9:dd:67:3d:6f:cd:e9:1d:4a:
15:78:47:ba:a1:05:fc:27:76:ad:64:18:9c:bc:e5:b6:ae:01:
02:cf:fb:53:c7:f0:da:3a:b0:c5:6e:ee:3c:42:4d:d7:fc:87:
f6:68:33:da:19:84:9a:e2:d1:e5:bb:9e:ab:00:4b:5b:40:0a:
5e:ca:b5:16:a6:da:5c:c8:4b:27:b5:0f:dc:46:f0:a2:37:5e:
1d:17:08:ed:d6:b6:79:31:0f:94:07:bd:3c:0a:61:6c:61:6c:
93:31:f4:6c:05:b1:4d:9e:ec:85:5a:38:07:53:17:3b:d7:2c:
1b:b4:a9:d6:4d:a3:74:c4:24:bf:46:c9:5b:53:6f:61:81:00:
fb:2b:de:c3:0b:0c:53:69:85:de:ea:5e:eb:f9:8b:bc:78:33:
d8:74:4d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:23:31 2026 by rpki-client