
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
File: HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json)
Hash identifier: ggG1Y13CK9BJcPaGO1h17bBPLXribv02Tl1N8S75JOQ=
Subject key identifier: 67:19:1F:7D:9C:8D:29:09:86:9C:0D:EA:96:F6:DA:58:84:B5:FC:0C
Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Certificate serial: 14E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
Manifest number: 14DC
Signing time: Wed 22 Jul 2026 16:56:24 +0000
Manifest this update: Wed 22 Jul 2026 16:56:23 +0000
Manifest next update: Wed 29 Jul 2026 16:56:23 +0000
Files and hashes: 1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: gHn3h6ssDQI8hAW1w+bBOCPmwIPoCbyhOLSv3jaVHF4=)
2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: WIOTnnHZpCOfxDVsg8g5aDJ6JWSGnelmuPFVOIcEOGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl
rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5351 (0x14e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4286, serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Validity
Not Before: Jul 22 16:56:23 2026 GMT
Not After : Jul 29 16:56:23 2026 GMT
Subject: CN=6a60f638-4426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:3f:70:a6:3e:32:ea:ee:b4:71:c3:31:d4:
99:12:fa:88:fd:e1:6d:fb:2b:ad:d0:9b:6d:dc:68:
fa:74:b0:f1:c8:23:56:b8:18:bc:04:09:7f:44:cf:
8c:7f:79:78:20:15:fe:89:fa:e2:04:2c:a9:f1:f1:
df:34:73:9e:31:12:b7:bf:c5:53:a4:87:e3:b3:cf:
25:a6:54:db:9e:23:0a:ec:da:8a:7e:65:94:56:6a:
1e:6f:0b:bd:d4:d7:75:cb:7d:fd:e6:21:ff:34:82:
9e:8f:77:71:2e:c4:fc:5e:7e:54:07:19:68:42:61:
db:25:2b:d0:40:b1:eb:80:e2:c1:ef:1c:1e:44:37:
d3:45:8b:a7:9d:89:b4:0e:99:c5:0e:09:0e:b0:82:
19:a5:cc:08:71:59:0f:a9:f0:9e:ea:ea:dc:e8:fc:
3e:53:cf:e7:3d:a9:db:15:21:8d:ea:62:c7:95:44:
c5:89:76:98:94:13:3f:cf:27:72:b7:c8:35:03:e1:
15:48:68:9f:65:49:ea:04:cb:2b:46:2f:45:4d:fe:
db:ea:53:d8:bc:bc:f0:86:25:30:52:48:65:87:97:
56:1b:1e:a3:df:12:73:fd:c7:d7:ae:d5:f4:97:5c:
4f:6b:e8:ca:f4:70:a9:e4:42:65:6d:e5:c0:43:2e:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:19:1F:7D:9C:8D:29:09:86:9C:0D:EA:96:F6:DA:58:84:B5:FC:0C
X509v3 Authority Key Identifier:
keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3a:5b:4b:00:02:9b:60:9c:f9:ed:9b:16:8d:6b:3c:9f:ff:
a5:ac:bc:0f:8e:8f:28:8d:7f:34:0e:57:2a:bc:d9:f7:91:21:
50:35:fb:3f:ae:b9:b7:c3:75:f0:fc:1f:03:d0:c1:0a:15:4b:
9f:7c:9d:18:87:37:ec:f0:e3:5c:25:d5:83:55:e2:a6:89:69:
71:12:17:13:41:51:24:a2:ac:53:91:3e:8b:60:05:8a:dc:ff:
00:d7:6d:07:4d:cd:b3:1e:cb:07:f0:b4:9c:66:29:44:b9:3f:
8a:bb:95:81:1c:3b:e6:8e:53:c2:2f:c3:d2:da:ca:bf:c8:8e:
62:9f:68:84:1d:33:cd:8d:8d:fb:6d:d1:db:4d:df:20:ab:b9:
c6:79:78:48:1e:0a:f7:87:7d:0f:86:ac:22:b2:6a:ce:e7:2a:
65:a5:3b:8f:4f:85:49:07:e0:86:a5:6a:2d:a9:8f:fb:ed:ee:
46:e4:4e:7f:bc:8c:ce:e8:b5:3d:c4:ce:9b:af:c2:34:28:42:
be:a3:30:da:dc:f8:6e:f0:dc:82:84:ce:37:d8:d5:3e:2a:c7:
f3:2b:ac:dc:d3:b8:93:ef:a4:f9:90:e2:05:0c:b8:8c:11:02:
8b:10:9c:ea:33:a7:55:bf:65:b8:fc:55:9d:27:f7:93:4f:7f:
8f:b3:f7:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQyODYxMTAvBgNVBAUTKDFDQjQzMDRFRDY2OEM4RjcxNjQxM0VGRDY2MTc0QzM4
NjcwQzg5Q0IwHhcNMjYwNzIyMTY1NjIzWhcNMjYwNzI5MTY1NjIzWjAYMRYwFAYD
VQQDEw02YTYwZjYzOC00NDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuA8/cKY+MurutHHDMdSZEvqI/eFt+yut0Jtt3Gj6dLDxyCNWuBi8BAl/RM+M
f3l4IBX+ifriBCyp8fHfNHOeMRK3v8VTpIfjs88lplTbniMK7NqKfmWUVmoebwu9
1Nd1y3395iH/NIKej3dxLsT8Xn5UBxloQmHbJSvQQLHrgOLB7xweRDfTRYunnYm0
DpnFDgkOsIIZpcwIcVkPqfCe6urc6Pw+U8/nPanbFSGN6mLHlUTFiXaYlBM/zydy
t8g1A+EVSGifZUnqBMsrRi9FTf7b6lPYvLzwhiUwUkhlh5dWGx6j3xJz/cfXrtX0
l1xPa+jK9HCp5EJlbeXAQy7tJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcZH32c
jSkJhpwN6pb22liEtfwMMB8GA1UdIwQYMBaAFBy0ME7WaMj3FkE+/WYXTDhnDInL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Ni9CMjFBQTA5NDdG
NDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQY1dRVDc5WmhkTU9HY01p
Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hMUXdUdFpveVBjV1FUNzlaaGRNT0djTWljcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDI4Ni9CMjFBQTA5NDdGNDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQ
Y1dRVDc5WmhkTU9HY01pY3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHDpbSwACm2Cc+e2bFo1rPJ//pay8D46PKI1/NA5XKrzZ95EhUDX7P665t8N1
8PwfA9DBChVLn3ydGIc37PDjXCXVg1XipolpcRIXE0FRJKKsU5E+i2AFitz/ANdt
B03Nsx7LB/C0nGYpRLk/iruVgRw75o5Twi/D0trKv8iOYp9ohB0zzY2N+23R203f
IKu5xnl4SB4K94d9D4asIrJqzucqZaU7j0+FSQfghqVqLamP++3uRuROf7yMzui1
PcTOm6/CNChCvqMw2tz4bvDcgoTON9jVPirH8yus3NO4k++k+ZDiBQy4jBECixCc
6jOnVb9luPxVnSf3k09/j7P3+w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:47:32 2026 by rpki-client