
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
File: HAF157M3En5uwlH0Og0qxhMRv04.mft (raw, json)
Hash identifier: 1fA8Sh7GWDBGX3T5BwC+6tZbtWcR1MAZX0KueWWQwNQ=
Subject key identifier: A6:6C:50:21:BD:3E:F3:FE:C1:83:8C:1B:EF:B9:B7:11:38:05:BA:2F
Authority key identifier: 1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E
Certificate issuer: /CN=A91E3584/serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E
Certificate serial: 356E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
Manifest number: 356B
Signing time: Tue 18 Aug 2026 14:27:26 +0000
Manifest this update: Tue 18 Aug 2026 14:27:25 +0000
Manifest next update: Tue 25 Aug 2026 14:27:25 +0000
Files and hashes: 1: HAF157M3En5uwlH0Og0qxhMRv04.crl (hash: tztdoExxXyo7s6zDYTb+gFNHsoTNR+xtFCdda1Rm3oI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl
rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 14:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13678 (0x356e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3584, serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E
Validity
Not Before: Aug 18 14:27:25 2026 GMT
Not After : Aug 25 14:27:25 2026 GMT
Subject: CN=6a846bce-d74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:4a:34:2b:b7:e3:d0:43:a5:94:aa:fd:f4:
3e:4b:c3:b6:b9:8d:4a:6b:0b:11:c2:cf:14:4b:f1:
f8:a7:c2:e5:56:d5:e8:46:6e:a2:a1:c2:2e:90:94:
33:f6:44:d6:ae:76:37:5b:35:58:e3:26:f6:a8:04:
b8:b2:c7:b1:37:60:8d:4a:74:66:ed:19:a4:e1:9c:
97:e9:23:40:0a:ad:af:3a:1d:1f:b1:28:58:69:3a:
ff:a6:ab:77:9a:fc:0b:28:cc:e9:a2:ee:2f:b2:4a:
a7:58:94:78:66:d2:00:e2:3c:69:5a:3c:ee:50:c8:
76:3d:c9:90:12:c2:8b:42:a9:19:60:3b:da:99:38:
34:c9:8f:b1:aa:ce:dd:cf:7d:f7:97:a7:0f:be:62:
92:cb:31:5c:3a:e7:bb:21:a4:40:62:43:30:6e:6f:
0d:a9:7a:14:19:66:20:fe:38:ab:54:41:de:6d:e9:
23:9f:df:65:a1:0c:26:bd:61:4d:91:4f:91:e1:95:
0e:73:38:16:7e:e8:74:55:cf:b2:74:c8:46:d8:83:
62:96:ea:00:5a:b4:f7:53:29:59:be:1b:fc:55:ae:
56:0c:8e:87:18:b3:c4:ff:34:d5:0e:ea:bf:cd:7e:
0a:1a:ce:fd:12:86:23:88:fb:5c:16:a2:e7:4a:2d:
72:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6C:50:21:BD:3E:F3:FE:C1:83:8C:1B:EF:B9:B7:11:38:05:BA:2F
X509v3 Authority Key Identifier:
keyid:1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6b:cf:f2:fb:60:ea:06:4f:08:c1:a2:38:5c:4d:25:bb:7f:
b9:db:01:04:4e:d2:a9:0a:73:aa:2f:35:4c:97:cf:d6:ef:16:
c1:8f:53:29:36:52:13:de:8a:af:86:b4:43:37:ff:01:ab:61:
c4:1b:2f:42:7c:ef:74:2c:61:61:34:e2:b5:bf:9e:3d:be:c7:
cc:a0:cb:02:2d:85:a8:da:cf:c7:55:d6:a8:d4:d0:21:16:3c:
95:31:23:b9:68:06:7e:b6:32:b0:21:2e:5c:39:4a:ae:5e:de:
ef:53:31:c5:0d:e9:f9:73:31:f7:b1:2e:fc:07:28:67:b1:d7:
98:98:70:80:f2:95:ee:cd:79:d9:e1:ac:2b:a0:5f:a0:ce:34:
91:47:50:df:30:44:f3:36:48:99:25:4d:3f:e6:30:58:d5:e9:
86:f9:3d:5d:4c:2c:3e:3d:10:8a:d0:d7:e4:6d:65:d3:f1:05:
5e:4c:f9:8a:b5:35:96:b9:22:85:d5:fa:17:4b:9b:3c:a0:33:
4c:27:95:87:4f:79:77:38:e4:62:b9:a1:ba:d1:15:91:5a:47:
a2:80:1d:08:6d:0a:7a:46:ca:75:8e:8f:93:1e:de:d8:ae:27:
e1:b6:f7:64:8d:8a:71:e2:43:7a:63:09:54:65:57:f1:8d:8e:
e5:55:b3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:36 2026 by rpki-client