
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
File: HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json)
Hash identifier: PqmIysk8u4nrtR0bcp+pJ/4MU3BJZkMiORhVV7QM42M=
Subject key identifier: 36:D2:87:92:60:B3:07:8C:66:A5:31:7B:DE:BF:4B:C8:B0:60:DA:EA
Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71
Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
Certificate serial: 1A4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
Manifest number: 1A33
Signing time: Tue 22 Sep 2026 16:16:59 +0000
Manifest this update: Tue 22 Sep 2026 16:16:58 +0000
Manifest next update: Tue 29 Sep 2026 16:16:58 +0000
Files and hashes: 1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: OKth7VMR3TwhiAs/TAeFpWIMK29vPrBmqiJxHlgHJ4g=)
2: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: whf91COmOS4nmBy8X3NCysn1mTlxA8VZykZt4Rg2IFU=)
3: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: UVagvNv2xQNSD/DTi1pYnkPAd6yaMMHes6alyvk08Ew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl
rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6733 (0x1a4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
Validity
Not Before: Sep 22 16:16:58 2026 GMT
Not After : Sep 29 16:16:58 2026 GMT
Subject: CN=6ab2a9fb-99bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:e7:06:aa:2f:21:4c:00:16:cb:46:39:0b:
3e:00:77:3e:57:f8:17:ed:4a:4f:e5:d9:35:76:2c:
c0:ca:34:c9:a3:78:6a:b1:70:e6:2d:b6:0a:f9:15:
f1:d4:eb:64:e1:ec:d7:3c:9b:8c:f6:df:b7:f5:f1:
ab:9b:6e:ad:19:f3:0e:cb:25:c2:09:96:07:23:47:
63:ad:fc:9f:57:be:03:bd:39:6c:11:77:9e:3c:9e:
03:60:7b:d1:c6:87:dd:58:a7:24:51:33:2b:14:f7:
e4:68:86:7a:c8:3f:f3:da:2d:66:5c:40:0e:b7:2c:
58:81:e0:bf:46:e3:6e:08:70:64:a4:b7:97:cd:49:
9f:08:41:63:b7:23:49:8f:6e:5a:14:66:d4:37:fa:
fa:43:f1:00:43:ed:31:43:10:2d:a7:0d:a2:6e:ad:
a2:d3:16:6c:bf:fa:36:d1:b8:25:7c:95:c1:08:fe:
e6:09:1c:f1:ce:55:27:8b:d2:c0:b2:1c:ba:c6:9d:
de:d3:9e:c2:4e:0a:5f:fb:bd:7d:5d:3c:9c:90:0d:
2f:49:09:ef:e0:c5:43:d5:80:77:38:aa:04:50:53:
3e:e1:e2:63:69:a4:59:93:fd:69:6a:06:54:2d:84:
32:95:85:08:6a:d2:07:0b:d7:06:02:85:c8:b0:b9:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D2:87:92:60:B3:07:8C:66:A5:31:7B:DE:BF:4B:C8:B0:60:DA:EA
X509v3 Authority Key Identifier:
keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ba:a9:0c:f7:23:fe:c9:cc:57:87:20:34:fb:64:8f:f4:6b:
e0:c3:1e:18:34:ce:ee:f6:3f:81:3a:83:a9:c3:9e:6b:90:6f:
31:db:cd:ee:46:f7:d2:fc:70:7c:68:a2:d2:2c:56:74:89:7d:
41:4d:71:12:29:4f:d0:7f:82:a8:58:e5:7f:b1:54:8c:cf:7a:
bb:55:c3:b5:3f:82:c7:86:f2:51:c6:3e:3a:09:4f:ed:85:ed:
79:2f:31:c4:ee:34:49:89:61:57:e1:91:f2:68:56:24:36:88:
a6:43:54:8e:35:1f:98:44:36:f3:4a:f2:c8:8d:28:6c:2e:27:
19:86:4a:d9:cc:37:87:d4:b0:bf:13:3e:fb:5d:6b:89:c3:16:
6a:0a:ba:05:86:9e:15:b6:dc:7e:69:8b:96:ad:a8:ab:87:02:
79:d8:14:a3:2a:d3:7d:b1:bf:35:d3:22:d1:2a:77:4a:03:16:
35:7b:8f:c2:c0:7b:fc:a8:f2:0b:86:6e:7d:c2:d0:a5:26:c6:
4f:f6:48:ff:73:46:38:29:7e:8c:de:e0:c5:79:b5:93:20:2a:
31:70:ab:e1:b2:13:0e:69:3a:11:b6:77:67:fb:5b:de:0e:d2:
62:c5:a4:4e:f8:d3:08:cf:ea:9c:15:2d:dc:a6:aa:a4:f5:01:
bf:c7:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:09:03 2026 by rpki-client