
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
File: HAF157M3En5uwlH0Og0qxhMRv04.mft (raw, json)
Hash identifier: DiANzMiV6KM+luaR9X6q7yXzLptUg8GA2rT9ATSfGWU=
Subject key identifier: 48:91:28:EC:FF:59:FD:E3:73:A7:C5:74:EC:5A:B9:86:27:75:78:AD
Authority key identifier: 1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E
Certificate issuer: /CN=A91E3584/serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E
Certificate serial: 3587
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
Manifest number: 3584
Signing time: Tue 06 Oct 2026 14:26:48 +0000
Manifest this update: Tue 06 Oct 2026 14:26:47 +0000
Manifest next update: Tue 13 Oct 2026 14:26:47 +0000
Files and hashes: 1: HAF157M3En5uwlH0Og0qxhMRv04.crl (hash: QD6t6KCExgxNW/NlqOeYpDMtA6r/J2SpWda6ztopDWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl
rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13703 (0x3587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3584, serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E
Validity
Not Before: Oct 6 14:26:47 2026 GMT
Not After : Oct 13 14:26:47 2026 GMT
Subject: CN=6ac50528-7818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:4a:15:ba:aa:cc:f1:2e:33:8b:fa:2c:9d:
4c:5d:61:85:3f:c0:e1:1b:d5:e1:28:32:b5:b5:44:
6b:3d:62:24:5b:01:08:6f:53:84:c7:b0:b8:28:59:
3d:7a:02:c5:67:7b:54:7a:4f:03:b2:a1:87:25:00:
96:0a:1f:d4:90:a9:b9:b6:bc:44:9c:ac:85:67:58:
fe:bd:b5:f2:f7:3b:25:72:3b:2b:4f:29:76:2a:83:
c3:81:30:7d:09:d7:ae:14:87:ca:fe:4b:3f:f0:3d:
43:f6:e0:37:13:e0:d2:dc:db:1c:07:a3:98:d2:0f:
fe:91:7d:f4:1f:40:ef:2f:99:23:12:84:16:97:95:
69:5b:bc:fa:c1:43:e2:11:d5:8c:cc:7c:48:55:23:
5d:9d:42:13:e6:09:95:0a:70:0d:cf:61:ad:ca:1a:
66:5b:d0:54:0e:91:b4:dc:7d:0b:52:5e:56:d8:57:
89:c7:fa:35:a9:d1:d9:ab:0d:44:12:74:0d:9d:6c:
45:39:a8:d5:0e:04:0e:81:16:a8:62:3e:af:81:f1:
e5:22:ba:e7:cf:18:9b:ed:de:66:c6:80:99:92:20:
02:9c:54:64:e7:cd:48:24:5a:23:a1:d7:4f:84:4e:
2a:4c:c2:28:19:b7:ae:fc:30:dc:ab:84:58:57:b3:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:91:28:EC:FF:59:FD:E3:73:A7:C5:74:EC:5A:B9:86:27:75:78:AD
X509v3 Authority Key Identifier:
keyid:1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9e:c5:a6:4e:75:af:d3:06:8e:b3:ef:2d:a5:8f:37:ba:e4:
87:d5:b5:2b:5c:cb:0c:af:2b:b9:3b:ea:0f:6b:8e:7c:d0:ee:
43:05:4a:dd:e2:98:b7:ea:28:c4:aa:f2:b6:70:b8:fc:52:7f:
c9:a7:d8:43:3a:85:2e:75:5f:28:ff:c8:6e:98:fb:b1:dd:18:
21:1b:b5:98:83:b8:1e:09:44:d2:bc:c1:a2:59:2a:d4:c0:8e:
de:60:7f:78:c0:b1:3b:e6:98:01:20:cb:91:63:ae:fb:36:c6:
3d:5f:da:b9:67:90:99:4c:2b:13:6a:ea:13:45:3a:27:b0:ec:
80:b1:7e:81:0e:d6:00:16:2b:a5:e4:af:d9:e0:f9:46:ba:bb:
0b:4e:70:22:9b:47:19:47:e8:5e:c9:32:4d:e8:6d:4b:a7:62:
96:cc:35:b6:12:cd:d1:86:15:14:13:13:df:49:d4:a7:ab:f5:
d5:7b:93:b1:22:16:93:65:e3:bb:1d:2c:8d:cd:db:92:18:7a:
ca:c9:c1:cd:97:32:3e:40:b0:9d:be:ba:9f:74:5b:e0:ca:c5:
59:be:62:cc:ac:e8:91:57:3c:74:d3:f8:6a:27:78:c6:a4:9d:
00:a6:f9:0f:4e:8a:6d:72:dc:8d:e3:81:b4:78:aa:6e:bd:7e:
9e:39:48:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:32:04 2026 by rpki-client