
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
File: HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json)
Hash identifier: xN2ZhIQ0GoiWiCslb2qDTFhq36ATprpgP0AROGeAH7s=
Subject key identifier: 5F:8C:F2:EB:E4:03:CF:0E:24:AB:29:49:5E:63:AF:A8:A9:DC:7D:D9
Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Certificate serial: 14C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
Manifest number: 14B8
Signing time: Tue 12 May 2026 16:52:06 +0000
Manifest this update: Tue 12 May 2026 16:52:06 +0000
Manifest next update: Tue 19 May 2026 16:52:06 +0000
Files and hashes: 1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: 7nHCpcd+7JQQf8SEN1g4aRN3eNUQ4iYuBRyXbtFhUrI=)
2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: WIOTnnHZpCOfxDVsg8g5aDJ6JWSGnelmuPFVOIcEOGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl
rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5315 (0x14c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4286, serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Validity
Not Before: May 12 16:52:06 2026 GMT
Not After : May 19 16:52:06 2026 GMT
Subject: CN=6a035ab6-dc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:92:5f:fe:a0:8a:e5:5d:93:6e:16:c6:6b:
1a:c2:e0:7c:98:12:1c:38:2c:22:76:c7:f1:47:2b:
a9:bf:69:71:0f:64:67:72:63:31:19:1b:27:6c:f2:
d9:98:df:31:0a:c5:18:9f:9b:17:9d:5c:b7:06:89:
45:a4:47:29:12:13:0d:d5:18:4a:df:e7:37:31:a2:
32:6c:1c:c7:43:2c:25:50:7d:87:b0:77:87:09:1d:
c0:68:46:42:37:bf:cf:cd:fb:a0:6f:02:6f:e3:e4:
db:bf:cc:41:0d:d8:36:d6:3c:47:4c:e3:9c:57:b3:
75:85:9c:28:14:4e:cc:d2:a9:e9:69:8b:7f:5e:29:
3a:79:0b:91:fb:15:82:b4:db:6b:64:10:0c:94:69:
05:ac:ae:d6:cd:d9:93:0d:c7:1f:6b:6a:c2:84:11:
64:a8:2c:40:22:38:d8:29:a1:0d:65:60:1b:b7:61:
0d:e7:e5:fb:2d:3f:54:d5:96:1e:d5:e4:ef:9c:b4:
92:94:70:97:38:9d:de:39:6e:8c:ff:2a:3b:ae:90:
60:9f:8d:fe:2f:4e:0e:f1:be:b3:6e:85:ea:ed:79:
88:d7:56:62:60:35:5d:94:ee:11:85:63:b1:c3:84:
ca:b1:b0:ba:ec:e7:c4:8c:b7:2f:96:5b:9d:e0:d2:
e1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8C:F2:EB:E4:03:CF:0E:24:AB:29:49:5E:63:AF:A8:A9:DC:7D:D9
X509v3 Authority Key Identifier:
keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:2b:75:11:77:11:51:8b:7e:5f:aa:e7:f5:1f:04:7f:d2:26:
2a:d6:06:83:6f:b9:a1:40:b7:5a:96:c0:f7:fd:07:56:1f:58:
fa:94:5f:0c:87:6a:51:2b:d1:6b:4f:f3:b6:29:32:4a:38:b9:
c2:67:bc:3d:b4:35:bf:e9:98:97:eb:5e:86:b3:12:3f:ad:ea:
5b:8d:5d:80:fd:62:4e:1d:6c:fb:d0:ec:d1:79:1b:97:44:3e:
d3:a3:36:3a:f3:aa:0b:2d:7b:0f:05:8c:8d:71:40:ca:45:b6:
be:c7:28:b9:7a:ac:59:cc:ef:38:d6:ad:05:20:b0:ed:38:50:
fb:1e:c2:a5:9d:fa:b9:a2:53:77:34:5e:e6:65:a0:87:09:51:
2d:a5:b1:41:59:8d:fb:44:55:a8:d7:b5:c6:37:ab:02:66:c6:
b1:cb:3b:5b:87:b3:4d:f4:cb:d5:78:41:75:45:10:4d:aa:3a:
ac:96:33:7f:75:1d:a3:85:9c:0c:b4:84:69:d4:37:43:7a:e2:
38:54:b8:bd:ff:54:dc:a5:24:f7:3b:c4:10:18:7a:25:1f:34:
f8:92:c1:9c:83:62:9e:71:1a:ff:58:6e:1c:f0:cf:94:22:99:
13:b7:f8:31:e4:17:3f:d6:ff:54:4a:db:b4:68:4c:4e:2f:26:
53:6b:bd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:21:58 2026 by rpki-client