
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json)
Hash identifier: oqz1kQ8URlZEX0bmHBWh5jrQc+rdyNQFNWW9gaLdYH4=
Subject key identifier: BE:83:47:BD:F8:70:94:95:5C:ED:CD:4D:D5:0B:56:1D:1C:A3:41:C6
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial: 0985
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
Manifest number: 095B
Signing time: Thu 04 Jun 2026 20:09:29 +0000
Manifest this update: Thu 04 Jun 2026 20:09:29 +0000
Manifest next update: Thu 11 Jun 2026 20:09:29 +0000
Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: TWHRUrdO5sIxbhtc+ZDui7n8y9rcJLCx+PJsdWIYofU=)
2: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: rixxFEhhporEowEcKJ0zMfY5DGdFHoWYuPowdcyFr5A=)
3: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: UJmyzSzozDENX7jF+64gEj4E6QBieKxXCaJ+JGRYbs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 20:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2437 (0x985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Validity
Not Before: Jun 4 20:09:29 2026 GMT
Not After : Jun 11 20:09:29 2026 GMT
Subject: CN=6a21db79-5d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:aa:a0:1e:2a:2b:f9:e1:7c:83:83:bc:dc:
6d:1d:46:65:f9:ff:1b:32:dd:c0:68:2e:34:af:69:
d6:81:36:cf:f8:0c:ae:bd:67:bb:23:81:ab:33:51:
07:ab:92:4c:a7:52:b9:5d:3d:f8:1c:b0:c4:d1:88:
46:f7:a3:89:26:b9:86:cf:f5:f9:79:16:1c:11:cb:
6b:19:9c:f5:6a:c4:d5:ca:7f:f9:f8:39:37:02:77:
4e:77:cb:a6:e1:57:90:e4:41:de:81:4c:75:d1:5e:
01:99:0f:a3:89:e9:d7:1b:bf:2b:f9:8e:c9:23:14:
97:69:d6:89:a2:82:63:a0:34:5e:eb:98:cb:2a:f7:
20:bf:03:75:ba:42:5d:9e:38:3d:5e:5e:70:07:42:
1a:fa:a7:e6:1b:48:d1:2c:db:29:cf:44:15:e3:74:
47:b9:08:8d:dc:5b:54:6e:67:f1:15:09:a6:b4:d1:
0e:f8:ff:c1:6b:fd:d2:19:fb:2c:2b:c7:e7:ba:6f:
50:6f:a1:b2:a4:43:a8:c7:19:a7:6e:2b:89:55:40:
a7:d5:13:28:21:27:0f:14:84:54:eb:62:14:46:bd:
8b:b7:84:c5:80:06:94:b0:fe:13:fb:43:17:95:9b:
b2:f9:45:02:ca:85:47:68:90:70:aa:1f:af:56:41:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:83:47:BD:F8:70:94:95:5C:ED:CD:4D:D5:0B:56:1D:1C:A3:41:C6
X509v3 Authority Key Identifier:
keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2a:50:c8:8a:a4:c5:02:d2:0d:1a:91:2a:9a:57:12:de:b4:
c6:c4:53:e4:ba:93:20:69:cd:16:f3:2f:ba:e0:4f:4c:b3:50:
6e:00:cb:bc:aa:e7:cb:ba:c1:1e:ec:de:a9:e7:9d:5e:71:dd:
d3:25:d5:a4:d6:76:b1:48:26:67:cc:41:16:be:35:d3:94:2f:
18:0c:c1:ec:eb:02:5c:40:49:4b:c2:f6:5f:b4:df:0f:c9:98:
69:68:f5:cb:69:39:a4:e8:d9:b2:73:33:e0:28:79:79:92:a8:
cc:1a:27:55:eb:72:bc:46:11:31:27:32:0d:f1:73:cd:0f:2c:
14:b5:30:7a:5d:f5:e2:7d:62:23:5d:0d:73:5d:d8:14:71:06:
f5:49:e3:ce:6c:4a:a4:1f:c7:f8:72:db:70:86:9b:e6:20:9c:
85:d7:1d:d8:12:2a:06:be:88:b7:4b:e8:a0:69:5f:2c:00:71:
98:50:8c:c8:64:45:65:16:42:42:e9:43:1c:55:cf:35:c7:12:
14:88:a4:ae:17:fe:f8:de:f5:0c:7a:76:0b:81:c6:7e:04:f2:
a6:46:e0:9f:52:08:9f:b6:7a:b0:d9:4b:49:7c:9f:d6:3e:c9:
7b:73:85:44:05:bb:4e:b5:1e:55:1a:1e:de:97:a0:85:e0:9c:
ac:80:08:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:26:17 2026 by rpki-client