
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
File: hlng_trNtpATntXTNVh0di16GJ0.mft (raw, json)
Hash identifier: Tq1ICdcHSnJ60NWBqXitPo8w/koGPkzunuDwaKU6Lsg=
Subject key identifier: DD:A8:65:7D:EF:CD:CF:B8:33:94:A2:42:00:8C:ED:37:31:1B:FD:29
Authority key identifier: 86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
Certificate issuer: /CN=A91AC0BB/serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
Manifest number: 6D
Signing time: Fri 09 Oct 2026 08:45:38 +0000
Manifest this update: Fri 09 Oct 2026 08:45:37 +0000
Manifest next update: Fri 16 Oct 2026 08:45:37 +0000
Files and hashes: 1: hlng_trNtpATntXTNVh0di16GJ0.crl (hash: r7FE4mQbXUegO0lPtVzRlWXz974591jiwuSSqHee6Lg=)
2: 76DAAFAA251911F182F11CF1C0833773.roa (hash: 6esaAykmvMcM9nd5KOv3yAwbdE8H9oSkUnwpS/MXy7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl
rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC0BB, serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
Validity
Not Before: Oct 9 08:45:37 2026 GMT
Not After : Oct 16 08:45:37 2026 GMT
Subject: CN=6ac8a9b2-fe09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:9f:86:89:a1:21:fa:2d:2f:23:3c:23:7f:
ff:83:fd:02:d3:a7:75:8e:6f:de:47:c9:6d:f2:f9:
a6:0e:19:41:85:79:32:d3:87:1f:78:bb:8e:8d:39:
26:66:6a:82:1a:45:1a:2a:55:59:5e:d9:42:4d:6e:
06:43:81:2d:dd:00:2a:50:d0:d1:af:51:d3:18:90:
0e:10:93:16:46:81:44:02:db:32:54:fd:54:f7:f4:
11:18:19:da:df:4a:12:3f:4e:7b:d3:c2:77:51:2c:
fb:69:5d:38:8d:96:68:e3:ab:25:ff:04:3f:be:46:
0f:b2:77:88:0d:e1:31:1b:a1:26:3a:e8:e9:ad:69:
1c:9c:64:40:83:4b:3f:32:e3:b8:cd:cb:c1:1b:39:
ca:e9:0a:b9:29:d6:5f:90:01:80:f7:7d:db:b3:1d:
25:6d:4f:a7:c1:7e:1e:58:07:7f:da:a8:cb:43:d1:
c5:04:13:59:27:3e:c4:50:7f:ca:2d:f7:e1:47:05:
6a:df:b8:a7:ff:ea:4e:7d:cf:a5:bb:73:bf:69:94:
5c:8a:af:48:12:e4:21:92:e5:43:28:98:1a:5c:6a:
c7:a0:ae:51:ab:1f:64:98:38:c4:e8:c2:f3:ee:5d:
49:07:9a:16:d3:62:dc:18:b5:d4:2d:f7:83:24:d5:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A8:65:7D:EF:CD:CF:B8:33:94:A2:42:00:8C:ED:37:31:1B:FD:29
X509v3 Authority Key Identifier:
keyid:86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:bb:d8:aa:31:90:f1:52:8f:db:fb:fc:9e:96:f1:82:f0:a6:
09:45:50:9a:11:37:ba:c8:02:42:2a:f4:62:f3:4a:ff:09:01:
3d:72:33:3c:a6:8f:25:8e:16:0e:59:b4:18:b0:ec:8e:c6:00:
8b:72:f2:56:e9:25:49:cc:69:90:95:2d:c1:02:46:d5:fc:20:
94:6a:78:13:4a:a2:71:d2:28:e4:26:d6:b8:c0:ee:77:d3:0c:
ea:b7:ae:6c:c0:c3:e1:ce:84:e2:d1:b9:f9:8b:ab:c3:a5:60:
a6:16:84:6e:3f:cc:ef:87:80:54:1e:37:e9:b2:fc:7e:d7:df:
e5:80:ca:5a:01:57:1b:7e:75:55:45:60:c5:be:13:1e:57:ce:
6a:73:35:9d:e9:76:c4:33:39:ff:dc:26:cd:cf:bb:22:99:53:
53:2c:5f:f1:32:40:3c:68:61:52:5f:c9:5a:e4:31:c3:fc:38:
d6:57:17:98:05:61:67:35:6d:16:09:2f:eb:7a:dd:62:aa:76:
c0:f5:a3:25:c8:f9:4f:df:74:3f:35:c7:74:86:1f:c0:a2:61:
10:af:84:fb:63:42:77:0b:68:d8:3a:c0:e5:e5:41:82:fa:72:
0b:33:b7:0b:a1:51:bf:62:d4:c1:57:0d:a9:4e:fd:56:d3:8a:
d1:79:c7:2d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QzBCQjExMC8GA1UEBRMoODY1OUUwRkVEQUNEQjY5MDEzOUVENUQzMzU1ODc0NzYy
RDdBMTg5RDAeFw0yNjEwMDkwODQ1MzdaFw0yNjEwMTYwODQ1MzdaMBgxFjAUBgNV
BAMTDTZhYzhhOWIyLWZlMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2wZ+GiaEh+i0vIzwjf/+D/QLTp3WOb95HyW3y+aYOGUGFeTLThx94u46NOSZm
aoIaRRoqVVle2UJNbgZDgS3dACpQ0NGvUdMYkA4QkxZGgUQC2zJU/VT39BEYGdrf
ShI/TnvTwndRLPtpXTiNlmjjqyX/BD++Rg+yd4gN4TEboSY66OmtaRycZECDSz8y
47jNy8EbOcrpCrkp1l+QAYD3fduzHSVtT6fBfh5YB3/aqMtD0cUEE1knPsRQf8ot
9+FHBWrfuKf/6k59z6W7c79plFyKr0gS5CGS5UMomBpcasegrlGrH2SYOMTowvPu
XUkHmhbTYtwYtdQt94Mk1dtlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3ahlfe/N
z7gzlKJCAIztNzEb/SkwHwYDVR0jBBgwFoAUhlng/trNtpATntXTNVh0di16GJ0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDMEJCLzA5OTEyNzI4MjRE
MTExRjE4QkNFMTJFMEE5ODMzNzczL2hsbmdfdHJOdHBBVG50WFROVmgwZGkxNkdK
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaGxuZ190ck50cEFUbnRYVE5WaDBkaTE2R0owLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD
MEJCLzA5OTEyNzI4MjREMTExRjE4QkNFMTJFMEE5ODMzNzczL2hsbmdfdHJOdHBB
VG50WFROVmgwZGkxNkdKMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA1u9iqMZDxUo/b+/yelvGC8KYJRVCaETe6yAJCKvRi80r/CQE9cjM8po8ljhYO
WbQYsOyOxgCLcvJW6SVJzGmQlS3BAkbV/CCUangTSqJx0ijkJta4wO530wzqt65s
wMPhzoTi0bn5i6vDpWCmFoRuP8zvh4BUHjfpsvx+19/lgMpaAVcbfnVVRWDFvhMe
V85qczWd6XbEMzn/3CbNz7simVNTLF/xMkA8aGFSX8la5DHD/DjWVxeYBWFnNW0W
CS/ret1iqnbA9aMlyPlP33Q/Ncd0hh/AomEQr4T7Y0J3C2jYOsDl5UGC+nILM7cL
oVG/YtTBVw2pTv1W04rRecct
-----END CERTIFICATE-----
Generated at Sat Oct 10 00:31:05 2026 by rpki-client