
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
File: Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json)
Hash identifier: Oep3LKgqGmfi2DkT6/L1fNeEWEVPjpjW/SWq1XJaeSg=
Subject key identifier: F6:7A:24:10:A5:B9:BE:3A:B4:87:F1:D6:02:1E:32:38:8B:CD:11:0C
Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
Certificate issuer: /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Certificate serial: 0214
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
Manifest number: 020D
Signing time: Tue 03 Mar 2026 02:43:50 +0000
Manifest this update: Tue 03 Mar 2026 02:43:49 +0000
Manifest next update: Tue 10 Mar 2026 02:43:49 +0000
Files and hashes: 1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: /a+V/uXUN63V3XV6ukrO3PV9zluP3d1uZYlaFL68Da0=)
2: C369BA98260D11F082934618C4F9AE02.roa (hash: cXQDcqjGHQK7UALmkZP5e0hc3VzG0s7yGBDOUKs2gKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 02:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Validity
Not Before: Mar 3 02:43:49 2026 GMT
Not After : Mar 10 02:43:49 2026 GMT
Subject: CN=69a64ae6-b6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:73:54:2c:3e:cf:46:20:e8:2f:91:ac:54:
2d:1c:44:c2:92:d2:24:2e:ab:9d:02:c1:60:51:8f:
00:63:0d:0e:de:fa:9a:15:b3:a4:25:13:fa:60:1a:
db:66:65:0b:4e:49:66:09:99:ac:26:70:b7:97:79:
d6:88:aa:bb:55:57:e9:9b:87:77:1b:f8:47:9d:8a:
56:6f:56:d1:0a:48:5e:7c:21:ae:7e:58:2c:3a:73:
11:3b:d8:ae:1e:cd:e5:bc:62:72:e0:e4:eb:06:d5:
8a:09:0f:ec:47:91:50:6f:9d:1e:13:49:48:89:df:
9c:0b:dd:ef:45:ce:18:c7:ad:b6:b3:c3:06:d1:65:
06:b7:a1:60:62:ec:0e:d3:88:70:c2:f0:01:1b:f9:
f3:c9:d8:52:0f:be:a7:b1:91:04:37:21:eb:99:02:
b5:cb:30:76:38:75:9f:61:8e:34:03:92:e7:86:a5:
98:59:be:8c:ff:35:d6:17:37:53:a3:ed:f8:5f:01:
d7:be:e5:8f:60:09:ae:ae:ea:e0:90:26:cc:1b:fa:
66:b3:87:d4:93:14:f4:32:37:46:ab:6a:dd:34:36:
1c:3d:58:70:ef:d4:15:29:22:77:73:c6:64:78:0a:
7c:ea:e3:08:01:ec:3d:d0:fa:bf:53:42:7e:72:10:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7A:24:10:A5:B9:BE:3A:B4:87:F1:D6:02:1E:32:38:8B:CD:11:0C
X509v3 Authority Key Identifier:
keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:fc:6b:28:de:61:ae:29:66:2a:a2:cf:62:b5:13:b4:73:78:
70:b8:fc:e0:9e:7d:14:c8:54:55:af:41:5b:b9:6f:57:63:6d:
33:77:2e:7c:08:ae:9a:1f:5a:95:98:bf:7a:ea:2c:1a:57:8a:
04:56:73:eb:bc:12:8e:e3:fe:ae:e5:fa:9c:83:48:c8:af:34:
c1:8e:21:41:06:da:11:d1:75:e1:a6:bf:bd:fe:fd:22:06:67:
3f:0b:2e:37:a3:cd:4f:25:a0:df:ad:42:5c:32:13:c3:55:0c:
0f:23:b3:79:8a:67:d9:49:1e:0f:ef:0e:f1:62:b9:4e:29:29:
6f:95:44:65:c8:a8:b5:b9:c6:dd:a4:fe:b2:c3:81:11:bd:4b:
9c:7f:3f:70:ba:40:7f:5a:60:8f:d6:1a:c9:15:da:77:cf:34:
3c:2c:e6:9d:44:6d:78:51:fd:bc:21:b8:1d:38:a1:1b:dd:7e:
a7:5c:29:a2:88:cf:15:85:03:e1:14:37:9a:61:de:86:55:0e:
ce:27:2d:56:c4:76:75:6c:03:0b:7c:ce:c3:e1:65:0a:b6:d7:
31:42:69:80:95:ab:1a:49:a5:d3:8a:90:d4:90:d8:9b:05:64:
d5:52:79:67:8f:77:fa:44:85:75:0a:24:19:58:62:5c:30:39:
3f:15:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:22:38 2026 by rpki-client