
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json)
Hash identifier: jbN2Dvqt4FkEhxJDUFuIf8j2hBIewnyq0HMcqSBIJdM=
Subject key identifier: 78:34:DF:A3:1E:75:76:05:78:60:B6:02:F5:BD:D4:1F:74:08:13:08
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial: 09B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
Manifest number: 098C
Signing time: Fri 04 Sep 2026 19:54:35 +0000
Manifest this update: Fri 04 Sep 2026 19:54:35 +0000
Manifest next update: Fri 11 Sep 2026 19:54:35 +0000
Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: oVNmO8z9+dji3eYReG7QFP98/zxAcfSupajUk7Ml9dw=)
2: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: mH/kM+3rqWh6tWSsikS5qDnxx87ieq8dd2YHV0YNADM=)
3: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: zsuR744HDeiJUJylgCdTayAjz/Y4ffc8R/05GsGBd50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2488 (0x9b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Validity
Not Before: Sep 4 19:54:35 2026 GMT
Not After : Sep 11 19:54:35 2026 GMT
Subject: CN=6a9b21fb-2e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:2d:0a:a3:dd:ad:af:27:81:c1:00:fc:05:
ad:73:0a:d6:17:1d:90:bf:a3:7f:5a:73:7e:36:e7:
6b:00:1e:c0:1d:75:e9:da:60:f8:c8:cb:5b:20:0a:
9c:75:15:4e:4f:46:e6:f7:a3:f3:29:e1:24:67:b5:
0f:e0:88:2d:5c:13:0f:e8:01:4b:d6:ca:c2:a6:5c:
3b:4c:06:a7:b8:78:d8:9f:e6:1f:d4:f2:01:46:d2:
97:6e:b0:2d:bc:ca:e9:a5:fe:36:76:bc:fd:87:e4:
d9:9f:c7:fd:5d:79:9c:04:39:56:c4:7b:9c:6a:61:
b8:dd:aa:b3:8e:10:ef:c1:e2:15:3a:51:4a:45:d6:
b2:1f:c3:e9:49:d6:ff:9d:aa:b6:e1:d9:b0:6e:4f:
22:22:d6:73:6d:d8:45:85:f2:a0:24:e8:f6:bf:5f:
fd:22:6d:5a:f0:63:51:e1:74:a6:85:e5:82:1d:45:
88:96:25:4e:07:15:20:d5:49:ee:26:40:e6:bd:f6:
ac:a5:0a:57:b0:a3:cd:17:85:cc:15:88:0b:dd:63:
0e:31:ab:f4:19:ad:f2:9e:73:04:33:5c:9b:68:1f:
d6:49:0f:92:f4:a4:8d:e8:43:5d:b2:36:68:b3:3a:
e9:99:f0:1b:09:9c:2d:6c:0c:22:bf:ce:a5:aa:1a:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:34:DF:A3:1E:75:76:05:78:60:B6:02:F5:BD:D4:1F:74:08:13:08
X509v3 Authority Key Identifier:
keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c7:91:12:d9:f9:af:6d:cb:a2:89:41:b6:f4:c3:84:85:55:
64:2e:5f:8f:b0:de:e5:e0:1d:15:09:46:02:02:75:5d:b9:be:
5a:3d:b3:53:92:da:8a:c9:eb:f5:69:3c:76:e5:56:ee:c8:d0:
a2:f2:a7:f2:f7:19:41:a2:61:43:43:7c:45:74:5d:1f:92:4f:
84:0e:1f:93:7c:af:c1:5e:c2:e6:67:d8:7c:0d:47:26:c5:ab:
42:e7:d2:74:10:ee:24:06:29:2f:4d:d9:1f:2a:bc:d6:09:19:
40:2a:06:33:46:1f:9d:2f:59:ac:93:72:55:b3:94:b1:54:d4:
47:7b:e1:3a:1e:e9:da:ae:f3:50:6d:2b:71:cc:48:18:77:eb:
49:83:7a:f3:4c:ae:86:1a:8d:40:34:ed:75:45:dd:a6:47:85:
98:1a:6f:0c:c7:53:08:89:20:a8:07:0b:6b:ee:5b:57:f2:6d:
c9:f9:13:0d:ca:9e:63:70:c2:93:58:d0:ee:58:89:33:59:63:
15:4c:5f:98:de:9f:17:ec:b6:ec:d5:f6:b9:7c:34:9c:10:35:
e9:ae:94:a9:86:e0:0b:09:60:ca:30:46:c0:39:bf:ec:dd:a9:
ff:c2:c7:93:f4:80:87:c8:1a:13:13:b5:47:b0:9b:62:39:3d:
86:51:91:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTExQjQxMTAvBgNVBAUTKDFDMEQyREJBNUFCMzZDMkY5NjcyQzE0REQ4NzdCOUVF
QTA2Q0NBQzcwHhcNMjYwOTA0MTk1NDM1WhcNMjYwOTExMTk1NDM1WjAYMRYwFAYD
VQQDEw02YTliMjFmYi0yZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtUAtCqPdra8ngcEA/AWtcwrWFx2Qv6N/WnN+NudrAB7AHXXp2mD4yMtbIAqc
dRVOT0bm96PzKeEkZ7UP4IgtXBMP6AFL1srCplw7TAanuHjYn+Yf1PIBRtKXbrAt
vMrppf42drz9h+TZn8f9XXmcBDlWxHucamG43aqzjhDvweIVOlFKRdayH8PpSdb/
naq24dmwbk8iItZzbdhFhfKgJOj2v1/9Im1a8GNR4XSmheWCHUWIliVOBxUg1Unu
JkDmvfaspQpXsKPNF4XMFYgL3WMOMav0Ga3ynnMEM1ybaB/WSQ+S9KSN6ENdsjZo
szrpmfAbCZwtbAwiv86lqhqhpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHg036Me
dXYFeGC2AvW91B90CBMIMB8GA1UdIwQYMBaAFBwNLbpas2wvlnLBTdh3ue6gbMrH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFCNC9CMTk5M0M0MEJD
MkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJDLVdjc0ZOMkhlNTdxQnN5
c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hBMHR1bHF6YkMtV2NzRk4ySGU1N3FCc3lzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTFCNC9CMTk5M0M0MEJDMkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJD
LVdjc0ZOMkhlNTdxQnN5c2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbceREtn5r23LoolBtvTDhIVVZC5fj7De5eAdFQlGAgJ1Xbm+Wj2zU5Laisnr
9Wk8duVW7sjQovKn8vcZQaJhQ0N8RXRdH5JPhA4fk3yvwV7C5mfYfA1HJsWrQufS
dBDuJAYpL03ZHyq81gkZQCoGM0YfnS9ZrJNyVbOUsVTUR3vhOh7p2q7zUG0rccxI
GHfrSYN680yuhhqNQDTtdUXdpkeFmBpvDMdTCIkgqAcLa+5bV/JtyfkTDcqeY3DC
k1jQ7liJM1ljFUxfmN6fF+y27NX2uXw0nBA16a6UqYbgCwlgyjBGwDm/7N2p/8LH
k/SAh8gaExO1R7CbYjk9hlGR+Q==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:01:48 2026 by rpki-client