
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
File: HAF157M3En5uwlH0Og0qxhMRv04.mft (raw, json)
Hash identifier: Ksn6OKveS1ru25X0A9O7AtFIBYDNqj0be5ZZcUOI7nc=
Subject key identifier: 54:B0:53:8F:8E:06:5B:8F:FC:D9:3B:61:06:37:2F:3C:91:C4:E3:09
Authority key identifier: 1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E
Certificate issuer: /CN=A91E3584/serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E
Certificate serial: 353F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
Manifest number: 353C
Signing time: Wed 20 May 2026 14:26:22 +0000
Manifest this update: Wed 20 May 2026 14:26:22 +0000
Manifest next update: Wed 27 May 2026 14:26:22 +0000
Files and hashes: 1: HAF157M3En5uwlH0Og0qxhMRv04.crl (hash: 40ZhVCRQIRN4y5/03A91RKCi5DRutzsfXtxbAmw4E1A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl
rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 14:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13631 (0x353f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3584, serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E
Validity
Not Before: May 20 14:26:22 2026 GMT
Not After : May 27 14:26:22 2026 GMT
Subject: CN=6a0dc48e-7210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:77:2a:08:97:c3:28:7b:53:28:63:ef:4c:
9c:25:37:ea:ca:46:84:f7:bd:5a:d4:d6:9a:b8:06:
4f:25:2e:85:53:4e:83:24:81:81:9f:2e:83:5b:16:
e9:bc:1a:54:a7:49:0f:62:29:d2:12:57:66:d4:69:
b8:05:23:39:5b:30:69:63:ce:a2:8a:d4:99:25:4d:
53:b8:5d:86:e5:4d:13:7c:03:d1:43:13:ff:88:13:
43:f0:ba:12:57:79:91:94:8e:2f:50:a4:72:13:3b:
15:e5:56:4c:38:ce:41:ed:63:7f:5f:9d:f1:8a:2f:
16:35:24:18:c3:c6:9e:0a:47:48:43:62:c2:69:a4:
d8:cc:5a:56:56:b2:32:08:89:b6:3a:17:de:f7:ab:
82:4a:85:71:19:28:6c:32:f3:ed:52:99:74:f0:3e:
a1:ca:18:89:85:1f:de:e0:24:1c:2e:31:42:79:0b:
86:41:9e:a0:82:5b:57:e3:a7:9a:ce:7d:fa:64:fc:
d4:d0:a6:e7:a3:33:8b:0f:6f:45:47:55:af:9b:00:
6a:63:94:f7:ee:37:4a:8b:1a:8c:81:4c:b5:63:56:
d7:c3:c5:7e:c0:a0:a1:d1:20:82:e5:a1:7a:86:3b:
d1:81:1a:e2:56:84:ca:d5:88:96:15:0f:a9:39:87:
38:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B0:53:8F:8E:06:5B:8F:FC:D9:3B:61:06:37:2F:3C:91:C4:E3:09
X509v3 Authority Key Identifier:
keyid:1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d9:5f:76:22:53:e4:0d:1c:55:8d:c3:a9:6e:c5:13:07:be:
54:20:18:5b:fc:50:f4:56:0a:33:f4:d3:f7:3d:18:5e:e4:81:
5f:c0:00:25:04:31:44:26:f4:f7:7e:45:87:7b:b6:8c:19:48:
2c:92:a4:71:82:3f:1c:75:07:27:07:2f:5d:7c:ea:f8:15:b8:
f2:01:e6:b0:2d:28:3b:fe:1a:0c:4f:cc:5c:81:09:7f:7f:58:
99:7c:60:a5:d7:80:ff:2d:4e:47:a6:73:7d:1b:70:0f:3e:6e:
18:67:c0:9e:5e:ed:1e:3e:68:cb:1e:6f:ef:77:44:da:15:92:
8d:5c:f2:83:32:69:00:6f:ce:4d:3c:ee:73:ee:82:16:83:91:
d7:d1:02:f4:fa:27:73:74:28:55:81:fe:ee:6e:d7:fd:ed:91:
5d:da:1b:11:15:9c:d0:32:f4:d5:78:f2:fd:72:29:74:c2:76:
52:79:98:4c:cd:a7:cf:8c:0d:42:bd:5d:a5:a3:a9:5b:e6:00:
02:9a:6d:8c:ff:fd:5f:7d:7e:c4:ef:40:1a:70:24:4b:bc:1f:
88:34:97:a6:87:62:5c:4e:70:6f:58:9d:91:e7:54:7a:bb:60:
19:67:f9:5f:be:14:6d:ea:bf:73:06:11:47:af:a1:30:c3:a6:
44:98:af:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTM1ODQxMTAvBgNVBAUTKDFDMDE3NUU3QjMzNzEyN0U2RUMyNTFGNDNBMEQyQUM2
MTMxMUJGNEUwHhcNMjYwNTIwMTQyNjIyWhcNMjYwNTI3MTQyNjIyWjAYMRYwFAYD
VQQDEw02YTBkYzQ4ZS03MjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcN3KgiXwyh7Uyhj70ycJTfqykaE971a1NaauAZPJS6FU06DJIGBny6DWxbp
vBpUp0kPYinSEldm1Gm4BSM5WzBpY86iitSZJU1TuF2G5U0TfAPRQxP/iBND8LoS
V3mRlI4vUKRyEzsV5VZMOM5B7WN/X53xii8WNSQYw8aeCkdIQ2LCaaTYzFpWVrIy
CIm2Ohfe96uCSoVxGShsMvPtUpl08D6hyhiJhR/e4CQcLjFCeQuGQZ6ggltX46ea
zn36ZPzU0KbnozOLD29FR1WvmwBqY5T37jdKixqMgUy1Y1bXw8V+wKCh0SCC5aF6
hjvRgRriVoTK1YiWFQ+pOYc4lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFSwU4+O
BluP/Nk7YQY3LzyRxOMJMB8GA1UdIwQYMBaAFBwBdeezNxJ+bsJR9DoNKsYTEb9O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzU4NC9EMUExMjk0NjFE
ODUxMUUyQkI0RkE0REMwOEIwMkNEMi9IQUYxNTdNM0VuNXV3bEgwT2cwcXhoTVJ2
MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hBRjE1N00zRW41dXdsSDBPZzBxeGhNUnYwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzU4NC9EMUExMjk0NjFEODUxMUUyQkI0RkE0REMwOEIwMkNEMi9IQUYxNTdNM0Vu
NXV3bEgwT2cwcXhoTVJ2MDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsNlfdiJT5A0cVY3DqW7FEwe+VCAYW/xQ9FYKM/TT9z0YXuSBX8AAJQQxRCb0
935Fh3u2jBlILJKkcYI/HHUHJwcvXXzq+BW48gHmsC0oO/4aDE/MXIEJf39YmXxg
pdeA/y1OR6ZzfRtwDz5uGGfAnl7tHj5oyx5v73dE2hWSjVzygzJpAG/OTTzuc+6C
FoOR19EC9Ponc3QoVYH+7m7X/e2RXdobERWc0DL01Xjy/XIpdMJ2UnmYTM2nz4wN
Qr1dpaOpW+YAApptjP/9X31+xO9AGnAkS7wfiDSXpodiXE5wb1idkedUertgGWf5
X74Ubeq/cwYRR6+hMMOmRJiv7Q==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:30 2026 by rpki-client