
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json)
Hash identifier: CxfQEAXs0smxl+oxHffXloQWEiDlQ3+woXwHhcohqwo=
Subject key identifier: 45:1A:50:06:68:9E:DF:4A:AC:46:9A:56:92:FA:A5:BD:D7:59:3B:F7
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial: 099C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
Manifest number: 0972
Signing time: Mon 20 Jul 2026 20:31:30 +0000
Manifest this update: Mon 20 Jul 2026 20:31:29 +0000
Manifest next update: Mon 27 Jul 2026 20:31:29 +0000
Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: A5YGLNbth2uoPV6YVhwEm+XLZ5r2TfI//tECyipc5pc=)
2: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: rixxFEhhporEowEcKJ0zMfY5DGdFHoWYuPowdcyFr5A=)
3: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: UJmyzSzozDENX7jF+64gEj4E6QBieKxXCaJ+JGRYbs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 20:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2460 (0x99c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Validity
Not Before: Jul 20 20:31:29 2026 GMT
Not After : Jul 27 20:31:29 2026 GMT
Subject: CN=6a5e85a2-3a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bf:69:f8:ad:f5:8b:33:b2:16:7c:96:b2:9d:
6f:17:a2:4b:78:1d:54:cc:da:3c:bb:5f:47:9f:a7:
cf:46:5e:d9:fd:e5:b4:48:d6:77:9d:29:68:df:14:
52:49:e0:c9:cb:a2:9d:46:b7:82:16:4e:e9:ff:d7:
97:c1:4f:90:89:fa:be:2d:5d:88:c8:b7:9d:0a:f5:
b8:8b:cb:6d:ce:a5:3b:21:56:17:bf:61:96:50:43:
7b:fe:37:13:13:4e:04:10:d3:33:89:8b:58:f7:68:
77:82:73:27:79:a5:13:a2:1b:0c:0f:ca:4e:2c:b5:
9d:5b:49:6a:f1:2a:df:2b:44:b2:0b:af:c7:af:64:
9c:75:80:06:91:b5:89:e8:f1:07:f4:81:cb:3a:d8:
65:32:77:ac:18:7d:ec:32:45:2a:12:47:4c:96:41:
bc:e2:23:96:41:bd:20:78:0a:98:0c:2a:2e:54:27:
4b:c1:a6:72:a8:6d:e2:23:99:e8:3b:43:7b:ad:ff:
aa:ea:f6:97:98:96:5e:37:a2:43:ef:09:0c:53:27:
7c:1f:10:82:1b:5c:f0:64:82:fb:5f:18:cf:27:47:
b3:f9:49:46:53:60:76:76:3d:98:c8:c6:ee:8e:3a:
65:56:f9:09:6c:75:96:47:b7:f7:67:62:20:16:39:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1A:50:06:68:9E:DF:4A:AC:46:9A:56:92:FA:A5:BD:D7:59:3B:F7
X509v3 Authority Key Identifier:
keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2d:9c:6b:c7:78:54:60:20:34:65:10:a9:16:67:28:fa:46:
6c:03:f4:81:d6:92:d6:c2:84:f8:51:14:49:f2:87:73:6c:53:
d2:da:34:12:0c:26:b8:df:15:3f:83:86:53:51:ee:ae:cc:34:
66:a5:de:e8:b8:88:6d:2a:2b:fe:31:55:24:9b:ae:55:42:f9:
29:15:fc:c9:81:a8:b0:4d:c2:1b:7a:8d:9b:40:9e:4a:93:f9:
51:b3:02:6c:6a:43:a6:b3:ee:a8:f4:a7:ea:7d:ca:8b:89:bb:
df:2c:ab:63:86:88:ff:dd:2e:e8:ba:4b:d0:64:df:55:7b:c3:
6c:4a:8d:d3:e0:94:36:cf:18:df:d3:00:4d:62:e4:8d:b6:86:
a0:32:10:4b:91:d6:2b:f9:d4:c2:e2:82:0a:6c:2b:3a:3c:15:
77:82:45:29:14:ad:d8:f0:c4:67:26:82:dc:02:39:c4:97:b2:
37:f3:28:5c:02:57:a5:4b:02:64:f8:c8:5b:fd:00:2d:11:bb:
9b:e1:7e:f3:e8:24:1a:57:60:b4:a0:98:81:0c:0e:ef:4b:1b:
22:1f:3d:52:c2:60:57:e9:a9:44:57:55:f0:b3:c5:ad:e8:29:
7b:e7:10:9b:63:16:26:ab:9a:be:0e:9f:2d:3d:96:ba:fa:7f:
d6:9b:b6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:46:33 2026 by rpki-client