
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
File: hpBNLQLbigWb7ZOPL46u88Qgb9A.mft (raw, json)
Hash identifier: Vjv++hXfLMfE5iE6XfR+owH2XtHkflpHX2cyGpfYfs8=
Subject key identifier: CD:55:9B:5E:57:74:42:8E:6C:DD:B9:DC:96:59:AD:40:D0:39:B5:5F
Authority key identifier: 86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
Certificate issuer: /CN=A91D4ACD/serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
Manifest number: 0180
Signing time: Wed 23 Sep 2026 04:31:21 +0000
Manifest this update: Wed 23 Sep 2026 04:31:21 +0000
Manifest next update: Wed 30 Sep 2026 04:31:21 +0000
Files and hashes: 1: hpBNLQLbigWb7ZOPL46u88Qgb9A.crl (hash: covTzFetynPl9jmBPwhFcuigQgDB5DKVuP+NusZHyCA=)
2: 388D7E38797D11EF8CA64711C4F9AE02.roa (hash: jDnZhDcL3845Secu0bR+V2OD0F1RLl9nEAFhwuxNGGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4ACD, serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Validity
Not Before: Sep 23 04:31:21 2026 GMT
Not After : Sep 30 04:31:21 2026 GMT
Subject: CN=6ab35619-b80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:d9:08:07:2f:2c:fc:6c:d9:92:4f:df:20:
42:0a:cd:ea:ed:fb:f4:3e:b8:84:36:20:16:51:a9:
b5:95:93:26:d1:92:d5:03:c0:0f:b6:82:39:1e:0d:
1f:ed:73:06:69:2a:a2:43:ae:b8:3f:a9:a6:e7:06:
d0:21:f3:42:43:51:00:7b:02:d0:d2:5f:42:60:87:
da:12:20:a0:95:63:fe:b1:5f:8f:31:d7:06:ad:e8:
71:a3:f2:84:19:41:c4:57:d4:59:6f:f6:97:97:23:
a0:9b:eb:ec:46:6e:c8:28:e9:9f:6d:d0:90:08:ff:
3e:7b:1f:a2:e4:a7:11:77:a8:2b:23:26:2c:6c:d1:
f0:97:b6:c8:d7:34:64:3d:73:68:aa:ff:82:d6:ce:
df:1c:c4:7c:10:25:17:8f:48:92:68:76:0b:0b:34:
42:84:4a:94:69:bf:9b:f0:f2:66:28:1b:3b:ec:1f:
a7:ef:30:b3:b8:6b:58:16:e7:49:a0:f5:cd:fb:dd:
10:b6:8a:17:b0:69:ec:f9:99:b7:b2:f6:0d:be:70:
6e:cc:fe:07:79:8c:2f:fc:2f:98:a7:3e:57:5b:ef:
94:74:22:55:19:67:64:8b:ca:76:0c:e8:89:54:e1:
60:3b:04:46:9a:1c:27:0c:91:c6:15:be:74:79:48:
1a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:55:9B:5E:57:74:42:8E:6C:DD:B9:DC:96:59:AD:40:D0:39:B5:5F
X509v3 Authority Key Identifier:
keyid:86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:09:cb:c4:0e:64:d1:a7:d2:9f:06:5c:cf:be:ca:3e:f7:61:
70:f3:c0:c3:5d:10:9d:96:c6:84:0a:b3:3e:81:50:7d:cc:7f:
8b:14:63:06:66:8c:07:28:e2:f0:d4:b7:1e:f4:14:2c:b1:b9:
fe:2e:f1:c9:ed:f5:b1:07:7a:75:26:a1:0e:d6:7d:28:ea:1d:
29:07:84:cd:bf:ab:f2:ad:98:46:57:e4:3c:d4:49:3d:2a:7d:
04:9b:ae:99:a9:39:fe:e2:7d:49:01:00:38:61:d8:62:41:74:
5f:cd:08:2d:67:91:53:e7:49:68:d0:2f:12:ea:b2:d9:ec:75:
0a:b3:c5:6d:55:d0:9f:9c:6d:9f:80:34:fe:b1:91:2a:36:28:
8f:b3:f8:ac:07:3e:2e:65:27:f9:34:f2:9e:fd:1d:e9:69:cc:
03:cb:cf:d7:9e:9f:45:a5:ca:b3:01:d1:fc:a6:77:b8:8d:23:
f6:bd:f6:0c:de:ed:39:35:82:df:ee:12:92:36:be:3b:59:eb:
3f:b2:a6:84:ba:78:63:13:b9:af:af:67:e5:bd:ae:5a:b2:2f:
cc:af:81:a1:1d:54:0d:0c:03:ca:3a:7a:e0:1c:a4:a2:54:de:
a3:2c:a7:f4:bf:63:4f:3b:fa:3b:1e:58:3d:0b:59:9a:76:2b:
d7:b3:20:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:53:59 2026 by rpki-client