
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft
File: HLS_2cCnMryPSmDIaUyR-DTKvBM.mft (raw, json)
Hash identifier: r155OSGfPWqd4iRtAEeiw9hN1E1jH71eQXq6qY+IKBw=
Subject key identifier: EF:24:64:75:35:82:EE:02:0A:3D:BC:75:85:2D:12:88:4B:00:0E:63
Authority key identifier: 1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13
Certificate issuer: /CN=A91D83D0/serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13
Certificate serial: 099A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft
Manifest number: 0991
Signing time: Tue 12 May 2026 20:04:32 +0000
Manifest this update: Tue 12 May 2026 20:04:32 +0000
Manifest next update: Tue 19 May 2026 20:04:32 +0000
Files and hashes: 1: HLS_2cCnMryPSmDIaUyR-DTKvBM.crl (hash: z3dlLMVagZYL5KJT1G+vAFfkTRQQsAx8NpKTkLuWhPs=)
2: 3C52563E781F11EE9787607FC4F9AE02.roa (hash: IPSlPyfz0+bJclfH4V522k6JGFoLnfNN2pg5rNIteNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl
rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2458 (0x99a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D83D0, serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13
Validity
Not Before: May 12 20:04:32 2026 GMT
Not After : May 19 20:04:32 2026 GMT
Subject: CN=6a0387d0-5788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d7:88:2a:89:87:6c:88:72:19:73:bb:91:6d:
1e:78:07:98:15:d4:c8:1d:43:a9:13:7e:17:b5:76:
c6:6b:d5:77:23:ab:56:f2:39:cd:99:d9:e8:a5:06:
52:93:20:2b:05:30:02:a7:98:f7:ee:c3:1a:d0:24:
b3:d5:65:56:d5:e7:de:5b:48:19:a7:23:88:01:33:
50:08:bf:26:21:5f:11:8b:ab:f1:a7:ee:1a:6f:e5:
22:e4:76:fe:0a:3f:d2:ff:9e:1e:63:52:6e:e1:a7:
06:d7:16:dd:c1:62:05:4b:32:ab:bd:89:c8:80:a3:
a6:36:e9:4f:6e:99:ee:73:40:d3:e0:87:48:b4:db:
8c:1f:2a:2d:40:04:4b:00:0a:53:f0:2b:d3:2a:83:
61:42:d2:49:94:1c:1a:56:82:7f:7e:5e:42:3e:73:
08:03:80:4a:9d:6a:ee:2d:f3:7c:c7:42:24:cd:eb:
32:e7:af:82:f8:5b:d2:aa:ee:dc:ab:b2:ba:c2:d4:
fb:af:f3:9e:74:25:36:e6:50:fd:ea:6e:7e:3e:64:
29:95:a8:a5:62:77:34:ab:4b:b3:43:a9:93:d4:e2:
e6:c8:fb:06:5a:b1:ac:af:a9:8a:8c:cc:d0:dc:fb:
83:8b:fe:ea:e4:e1:3b:19:4d:79:d9:da:52:9e:03:
7f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:24:64:75:35:82:EE:02:0A:3D:BC:75:85:2D:12:88:4B:00:0E:63
X509v3 Authority Key Identifier:
keyid:1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ec:6a:7d:8f:b8:1f:7c:be:27:5b:bc:7e:35:91:39:f3:a1:
83:1f:87:b4:89:aa:52:4d:48:a9:7d:4f:71:19:d3:c0:ee:ee:
72:33:d5:70:e4:e2:52:01:c3:a7:5a:80:52:d6:f3:98:c9:78:
71:e8:ca:3d:23:7e:5a:fc:31:8d:67:7c:19:45:05:40:cf:3e:
38:e9:b4:70:d6:cd:01:d3:19:8e:58:55:38:3d:c7:c1:9d:f5:
c1:8f:2f:9e:9e:f7:80:65:7a:1e:e8:ad:ff:7a:cb:28:9d:70:
41:ad:98:e6:cc:e4:7c:78:3c:44:3b:83:8a:44:c3:7a:0b:29:
d0:36:cd:e0:4f:f0:e3:8e:e2:f1:41:54:55:80:9b:03:52:66:
c4:38:89:d2:00:91:c1:d1:79:b7:24:51:c4:0e:d9:ba:cc:a1:
67:5e:ad:c5:b4:48:fa:c6:e0:0f:f1:d0:d8:e5:ca:48:b6:d3:
80:65:27:e0:c3:2e:cc:e5:97:90:05:46:02:bf:e0:1d:2d:2c:
30:7b:5a:9f:35:f2:61:5b:c9:29:5b:a1:43:e7:9c:25:a6:a7:
26:b1:3c:62:13:17:08:1f:81:d7:0c:cb:bb:8d:e5:70:9d:a7:
80:c8:dd:6b:51:2c:ab:f9:4e:69:99:5f:19:72:d0:78:25:30:
4c:19:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:10 2026 by rpki-client