
$ rpki-client -vvf rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
File: HaAa_AiIyqYXHgoOdBz8kE7S328.mft (raw, json)
Hash identifier: fJT82mV+djWAq5DWoIOtHzefrrzgjh/6DD/9HlD0wKM=
Subject key identifier: 8C:17:09:31:5E:33:A4:9B:2E:5A:5F:E3:69:D1:8A:13:F6:6C:1F:F8
Authority key identifier: 1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F
Certificate issuer: /CN=A91352C6/serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F
Certificate serial: 0959
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
Manifest number: 0953
Signing time: Wed 18 Feb 2026 19:40:06 +0000
Manifest this update: Wed 18 Feb 2026 19:40:05 +0000
Manifest next update: Wed 25 Feb 2026 19:40:05 +0000
Files and hashes: 1: HaAa_AiIyqYXHgoOdBz8kE7S328.crl (hash: Vh2uwMIe07dC2wZAO1j8UaMClnBWTc+7LBPampDN/LM=)
2: 939AAE78B1D511EA8E3DAE1CC4F9AE02.roa (hash: KFIHw6tMuHLxcRTo8fAv1CEG7OYhkgzMk8UZPi5UKvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl
rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2393 (0x959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91352C6, serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F
Validity
Not Before: Feb 18 19:40:05 2026 GMT
Not After : Feb 25 19:40:05 2026 GMT
Subject: CN=69961595-03b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:84:3b:9f:f4:ad:8d:91:fb:1b:f2:8a:6f:
e4:de:c0:2e:d3:45:60:bc:bb:d8:40:34:cc:54:3d:
bf:b6:80:41:f4:90:12:5a:62:fe:57:68:3e:f7:a3:
ea:b5:70:01:b2:e1:96:76:7c:66:a3:5f:2f:58:72:
dd:6c:cc:d8:ac:90:a8:55:f5:82:8f:2f:30:2f:cc:
4e:af:f9:dc:d7:a1:9e:d5:25:f5:a4:97:1b:9d:98:
51:09:04:d5:7a:da:fd:4c:d1:36:55:1f:31:4d:f4:
ca:1a:47:72:aa:5c:53:08:bd:3a:77:b5:1c:d1:d0:
ff:96:78:d4:1b:20:55:5c:9f:a7:e3:8b:9c:58:cc:
76:1e:89:fb:29:88:ff:5a:6b:95:46:08:7e:ee:1f:
45:07:8f:dc:9b:8f:eb:b2:1e:49:ae:95:d4:36:23:
ec:a9:c4:c0:c9:76:0d:4d:0c:cc:3f:45:89:33:a3:
80:58:04:c6:e7:de:69:1c:5e:b0:1c:a0:a0:1d:c2:
1d:48:86:d8:f6:04:fd:03:7a:87:ce:a8:fe:a4:9c:
8a:57:bc:f5:70:21:e7:9b:a7:33:23:26:84:8c:72:
76:56:cf:b3:3e:1e:3e:1d:2b:86:9f:c0:a4:f2:bd:
2d:b5:04:a7:52:e4:ee:e6:fc:9d:cb:41:c0:c1:42:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:17:09:31:5E:33:A4:9B:2E:5A:5F:E3:69:D1:8A:13:F6:6C:1F:F8
X509v3 Authority Key Identifier:
keyid:1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9b:95:9e:6b:ac:2e:54:57:45:2d:de:6e:f9:85:11:1e:d6:
19:c6:4a:15:0f:74:00:bf:5f:24:55:e1:22:98:ef:94:41:c5:
c0:5b:6c:01:4f:9d:37:91:3b:07:86:b8:98:2c:ff:0b:fe:f2:
82:d2:c4:39:0b:6e:37:43:c7:ac:8b:f0:1f:77:98:63:95:ae:
56:16:4e:79:77:93:bb:de:45:9c:f3:09:8a:3c:86:2c:1d:c7:
80:80:75:d7:a1:3f:88:1f:ef:9c:84:64:38:e8:f7:6f:86:85:
96:68:c9:e0:fc:f1:aa:0e:66:52:e9:88:47:fd:4f:64:d1:35:
ed:36:01:17:2f:e0:97:37:ff:8f:0f:d5:18:16:c5:27:6f:cf:
cc:e5:01:c3:eb:fc:fa:9d:2b:a5:9f:ac:fa:7c:40:1b:c9:e5:
d5:b0:a1:f7:54:75:2d:e4:42:80:d5:15:fb:59:c0:e6:5f:9a:
12:4c:ca:31:3c:94:da:01:17:47:4c:b8:67:a1:55:b2:66:54:
8b:ba:14:ea:19:e6:98:bb:f3:eb:e0:e0:4c:2a:f6:18:8a:d7:
29:30:2e:2d:01:41:4f:03:50:fc:cd:15:2e:85:95:ef:13:05:
ab:83:ed:b8:4f:71:03:c5:2d:75:0c:09:8b:ee:ef:dc:0f:6a:
19:af:b1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:38 2026 by rpki-client