
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json)
Hash identifier: bB26A8FLsuaVebneqR8hj8swCnAUwJMuLDa5xbuD4Mw=
Subject key identifier: 7D:C0:06:71:B6:B8:E2:57:30:3D:F7:A9:F3:5E:9F:99:EA:78:6B:6A
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial: 0957
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
Manifest number: 092D
Signing time: Fri 06 Mar 2026 19:56:29 +0000
Manifest this update: Fri 06 Mar 2026 19:56:28 +0000
Manifest next update: Fri 13 Mar 2026 19:56:28 +0000
Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: g87yCgNSIMJhnBzKXqIqK3ctkH93fWjw8T+oBx79MKM=)
2: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: rixxFEhhporEowEcKJ0zMfY5DGdFHoWYuPowdcyFr5A=)
3: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: UJmyzSzozDENX7jF+64gEj4E6QBieKxXCaJ+JGRYbs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 19:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2391 (0x957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Validity
Not Before: Mar 6 19:56:28 2026 GMT
Not After : Mar 13 19:56:28 2026 GMT
Subject: CN=69ab316d-66d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:f3:f5:95:15:60:ba:2e:2a:ba:ce:18:eb:
9c:ae:07:62:e7:04:7a:33:44:7e:5d:a9:86:25:eb:
66:bb:87:6b:85:13:af:53:a4:ec:14:c3:81:04:cc:
d2:1b:91:c3:b4:de:18:81:37:fc:f2:71:29:26:01:
c4:29:79:cc:4c:18:26:eb:cb:ca:55:09:33:8c:70:
db:57:93:c0:23:ac:20:79:d5:8a:6f:f6:b1:f3:ef:
96:22:4d:a4:6d:46:64:14:d4:5c:87:d5:9d:9c:49:
83:84:39:77:c9:7b:45:db:6e:b2:89:0a:db:c3:60:
ff:21:38:60:e1:d5:73:02:9a:8d:9a:6f:35:74:1a:
c1:3e:6e:c2:ff:7f:25:66:36:2e:a1:b4:d9:02:c7:
b3:c1:62:65:51:9f:ea:42:ee:cc:6d:98:50:23:53:
20:47:73:8a:4d:aa:fa:ae:4e:2f:ee:c0:01:a2:72:
be:b6:9a:bd:65:04:e8:f3:a2:12:e0:73:9c:9c:e9:
7c:30:74:5e:24:1e:4b:b0:9b:72:c7:e4:f5:7d:11:
02:70:1c:6e:4d:a1:b1:b7:96:81:b1:e7:b6:bf:21:
20:b0:0f:c1:3f:51:b4:32:88:68:18:e9:6e:91:89:
43:d3:73:c1:2c:a7:bc:4d:f4:27:86:a1:ad:67:de:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C0:06:71:B6:B8:E2:57:30:3D:F7:A9:F3:5E:9F:99:EA:78:6B:6A
X509v3 Authority Key Identifier:
keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:15:17:78:b8:e5:cf:78:86:f8:88:12:ca:83:16:fb:e4:50:
25:5f:d8:55:ea:fc:3e:c5:63:97:4b:fe:21:fe:9d:ca:e3:47:
26:b5:dd:8e:3e:04:b0:d7:4b:7e:4d:4b:92:c7:bd:54:f3:64:
ac:ab:cb:17:c5:2b:ca:a3:73:f4:46:95:93:56:e0:67:6f:7a:
71:70:13:35:52:02:ad:d6:d4:3d:3c:6a:de:e2:3a:57:e6:71:
92:3d:a3:88:71:66:4e:fb:99:e8:8a:0d:91:98:72:07:2e:f3:
bb:9a:45:6d:8f:50:04:75:eb:4d:bc:80:94:1f:14:d9:96:71:
de:d8:b7:f7:47:64:a1:bf:c2:10:e6:b2:e5:db:97:18:2c:d2:
a2:b0:da:fc:31:b6:3b:16:e9:0b:df:5d:b2:06:c0:cd:71:de:
b8:f3:fa:1d:43:6b:2f:94:40:98:73:d9:ed:d3:67:4f:9d:3a:
3c:b3:ad:35:4d:9d:32:af:d6:8a:1e:94:7c:fb:98:43:76:93:
f0:68:f7:5a:a4:54:33:df:ab:7a:78:01:41:85:b1:74:82:86:
0d:13:93:f1:f0:79:8d:e2:23:c5:c2:e5:7b:ff:73:f2:19:71:
6a:b6:69:93:9d:89:88:2b:7e:45:c7:a9:f8:44:b7:38:63:46:
74:6d:8e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 04:54:18 2026 by rpki-client