
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
File: HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft (raw, json)
Hash identifier: zjtxSVDi393tohiUgZ2IskzIPzZYGElqgfzOWfn6zJ8=
Subject key identifier: 9E:CF:B9:7D:71:5E:BA:59:CB:EA:FD:99:E8:E4:29:54:4C:32:B9:97
Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
Certificate issuer: /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
Certificate serial: 61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
Manifest number: 59
Signing time: Mon 11 May 2026 08:22:36 +0000
Manifest this update: Mon 11 May 2026 08:22:35 +0000
Manifest next update: Mon 18 May 2026 08:22:35 +0000
Files and hashes: 1: HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl (hash: a0/sMXOi9C97UkY5myc2UZYoZmk6pTZl+kPV1+c/ZTI=)
2: C598E8DCD0EB11F08228F063C4F9AE02.roa (hash: Hi6se8LEGyhgp/b0G+d22teZcTwcQ2maa7DY8eg/6Bw=)
3: C673BB1AD0EB11F088F8F063C4F9AE02.roa (hash: +lTLwLrmEGRpnIGIwjJCBRzNe7yk7RhMSey/Pk+Y8/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl
rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
Validity
Not Before: May 11 08:22:35 2026 GMT
Not After : May 18 08:22:35 2026 GMT
Subject: CN=6a0191cc-d5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:a2:2c:b5:65:91:7d:e6:c4:b5:e1:cb:76:
1f:fb:27:3a:84:79:b7:51:0b:8e:fc:28:a3:90:23:
eb:3a:ea:6e:87:7e:8a:9f:ef:c2:ee:55:7f:bb:93:
ab:cc:fc:9a:8d:3a:97:b8:8a:ad:b9:80:eb:ce:10:
3e:50:7f:c9:48:16:3b:2a:fd:cf:24:df:2e:b4:77:
0f:38:45:42:22:45:f9:02:04:0c:10:a5:e8:b2:7f:
80:7e:1a:e2:fe:9f:ef:c8:14:a6:63:07:ae:16:d6:
4b:d8:9a:f0:be:16:23:34:c3:02:56:b4:47:74:20:
19:ec:55:b3:01:83:86:4f:64:c7:4a:d3:42:da:e1:
f6:a5:bd:b1:33:d0:c9:93:f7:c1:37:0f:97:87:8e:
73:c9:8a:3c:4e:3e:d1:d2:02:45:be:65:98:49:81:
70:68:53:ff:9f:17:0d:33:e6:48:4a:48:86:95:fc:
f6:47:f9:de:b0:21:43:8b:5f:4c:17:62:41:7f:5a:
79:da:24:87:e1:2f:69:c4:3f:cb:02:4b:bb:bb:45:
45:37:63:97:29:83:3c:ca:f6:dd:26:2b:34:73:d0:
63:51:09:06:4a:36:6b:54:4b:c5:d3:37:8b:9b:cb:
5d:95:0e:dc:ef:b6:5d:f7:67:06:ab:77:38:b0:fb:
43:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CF:B9:7D:71:5E:BA:59:CB:EA:FD:99:E8:E4:29:54:4C:32:B9:97
X509v3 Authority Key Identifier:
keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ba:b2:f1:a1:f1:ae:b8:85:47:08:6f:dd:88:42:22:b5:ec:
82:92:e7:0a:c1:d0:fc:49:18:eb:28:82:c3:1f:e5:e2:31:bb:
d6:53:0d:29:24:b5:65:6a:e8:45:4c:f1:b1:35:6e:6e:e4:8d:
b3:35:cc:be:f0:c2:a7:f3:44:f2:16:b8:20:f7:d9:22:ab:65:
43:0f:ba:4a:a8:e8:37:d3:25:54:01:cd:6a:45:28:84:5d:cd:
2f:b6:b3:bc:21:8f:17:61:14:e1:19:61:9d:cc:8d:ee:71:6a:
21:95:27:06:c6:31:18:60:6e:b8:96:dc:f5:80:d2:37:63:ad:
62:b4:f9:ea:e0:49:8c:1a:60:ad:f5:e5:96:19:20:51:b6:e7:
b8:02:4d:2f:db:ea:5e:b6:14:7b:34:a5:0b:6a:98:53:40:05:
a1:80:19:49:d7:03:ec:13:03:78:aa:d3:53:b3:21:38:9e:18:
47:09:e7:94:f1:e3:20:73:23:a2:54:cb:dd:cc:8b:32:76:e5:
d9:d5:53:0b:18:de:5e:68:b6:c8:17:1b:2e:ba:8d:a1:0e:8b:
48:ba:06:d2:fb:0a:a6:01:97:21:9f:9f:37:cc:15:ae:72:f6:
28:c2:d8:0a:fe:ef:b1:2b:8b:89:4a:be:cb:22:02:06:c0:4b:
24:79:08:89
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MzgwNTExMC8GA1UEBRMoMUU1MzBGQTlGNjYwQThEQzE3MzhDN0FBMEM4QUZDNzdG
NEYwQkJCMzAeFw0yNjA1MTEwODIyMzVaFw0yNjA1MTgwODIyMzVaMBgxFjAUBgNV
BAMTDTZhMDE5MWNjLWQ1YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7ZKIstWWRfebEteHLdh/7JzqEebdRC478KKOQI+s66m6Hfoqf78LuVX+7k6vM
/JqNOpe4iq25gOvOED5Qf8lIFjsq/c8k3y60dw84RUIiRfkCBAwQpeiyf4B+GuL+
n+/IFKZjB64W1kvYmvC+FiM0wwJWtEd0IBnsVbMBg4ZPZMdK00La4falvbEz0MmT
98E3D5eHjnPJijxOPtHSAkW+ZZhJgXBoU/+fFw0z5khKSIaV/PZH+d6wIUOLX0wX
YkF/WnnaJIfhL2nEP8sCS7u7RUU3Y5cpgzzK9t0mKzRz0GNRCQZKNmtUS8XTN4ub
y12VDtzvtl33Zwardziw+0N1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUns+5fXFe
ulnL6v2Z6OQpVEwyuZcwHwYDVR0jBBgwFoAUHlMPqfZgqNwXOMeqDIr8d/Twu7Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzODA1LzQwMEM1REVDRDAx
MDExRjA5RjBERDgxQ0M0RjlBRTAyL0hsTVBxZlpncU53WE9NZXFESXI4ZF9Ud3U3
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSGxNUHFmWmdxTndYT01lcURJcjhkX1R3dTdNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz
ODA1LzQwMEM1REVDRDAxMDExRjA5RjBERDgxQ0M0RjlBRTAyL0hsTVBxZlpncU53
WE9NZXFESXI4ZF9Ud3U3TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDBurLxofGuuIVHCG/diEIiteyCkucKwdD8SRjrKILDH+XiMbvWUw0pJLVlauhF
TPGxNW5u5I2zNcy+8MKn80TyFrgg99kiq2VDD7pKqOg30yVUAc1qRSiEXc0vtrO8
IY8XYRThGWGdzI3ucWohlScGxjEYYG64ltz1gNI3Y61itPnq4EmMGmCt9eWWGSBR
tue4Ak0v2+pethR7NKULaphTQAWhgBlJ1wPsEwN4qtNTsyE4nhhHCeeU8eMgcyOi
VMvdzIsyduXZ1VMLGN5eaLbIFxsuuo2hDotIugbS+wqmAZchn583zBWucvYowtgK
/u+xK4uJSr7LIgIGwEskeQiJ
-----END CERTIFICATE-----
Generated at Wed May 13 02:58:12 2026 by rpki-client