
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json)
Hash identifier: kgRb37BLj46j+2GXthzQ5Ne8w+kJUBG37VUCNFY3juI=
Subject key identifier: E3:77:2E:34:C4:19:1A:5A:83:B8:F9:DA:93:AB:1E:78:21:AC:B3:76
Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4
Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
Manifest number: 017C
Signing time: Wed 19 Aug 2026 05:14:19 +0000
Manifest this update: Wed 19 Aug 2026 05:14:19 +0000
Manifest next update: Wed 26 Aug 2026 05:14:19 +0000
Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: fuyvIJMvhoQRjr2S3FBcZWGMkqost+Q6UjqPWsLfPNM=)
2: 06F73C70ABD011F0977C9F10C4F9AE02.roa (hash: vgtGXqZIotP7XALpdVVLNGiNYGh7f99bKJBaiOXmSGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl
rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4
Validity
Not Before: Aug 19 05:14:19 2026 GMT
Not After : Aug 26 05:14:19 2026 GMT
Subject: CN=6a853bab-e9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5c:c4:46:09:3e:fd:88:af:ce:0b:c0:a1:7a:
e2:28:60:8c:3c:37:9e:2e:d0:19:fb:b4:5a:6e:c2:
19:8b:bc:66:4c:45:0f:06:78:69:fc:98:fa:71:00:
cf:bd:8b:e2:34:26:c5:5a:a5:29:06:6e:49:e7:01:
1c:9b:be:0d:c9:71:cd:48:d7:f3:76:71:49:84:39:
ad:72:0b:b5:06:81:21:66:92:4c:f3:ee:12:24:fb:
a8:44:a8:0d:fa:a6:a9:5b:94:58:a0:d6:b2:87:ce:
88:8f:89:8e:e0:b5:ee:40:9c:40:b6:28:2e:61:6c:
5b:c9:54:68:1e:ec:48:29:6c:09:43:97:a9:20:4c:
c7:16:36:32:14:ee:06:6c:cb:a4:f2:27:27:b5:fa:
f7:8a:99:7f:7f:e2:4c:04:ac:78:12:d0:5f:bb:f3:
1d:6d:49:42:23:51:27:9c:0f:65:f4:ff:72:24:21:
d3:43:3e:60:a1:e7:54:e6:a3:c9:8f:8d:f7:73:a3:
6d:f4:55:db:56:fd:c2:70:85:72:e3:75:99:ff:59:
e2:67:d0:96:0f:06:27:27:10:07:8d:46:42:a0:44:
5d:d8:cb:77:4f:c2:8b:ff:d2:b1:e5:8c:26:7b:24:
63:08:c8:01:26:c0:43:43:c3:f3:3a:bd:67:a0:ea:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:77:2E:34:C4:19:1A:5A:83:B8:F9:DA:93:AB:1E:78:21:AC:B3:76
X509v3 Authority Key Identifier:
keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:cf:ae:1e:71:90:5f:65:ed:3b:12:59:d9:86:a4:05:28:c9:
5b:f3:17:e8:1c:96:94:9c:3f:94:da:78:d6:97:37:5d:56:63:
68:cc:5e:d0:d5:7d:84:67:53:87:98:63:71:6d:8a:5e:43:94:
80:07:eb:76:f1:37:36:97:b4:f5:43:47:3e:29:04:79:4d:ec:
98:3d:67:3a:76:03:ef:69:e7:eb:9d:e9:e4:21:c3:c1:72:a8:
0a:35:53:3a:2c:84:59:c9:7c:8b:e9:e8:97:a8:0e:18:71:43:
9c:55:db:c5:d6:df:99:74:02:24:e1:92:54:4f:e2:3d:17:a2:
8e:d1:e3:ec:e8:28:6d:51:d1:ee:9a:1b:62:b0:ec:94:ac:25:
b5:1c:f1:72:f3:61:3e:ff:f7:98:9a:d7:93:c2:f3:99:fb:22:
a0:df:24:4f:d1:30:5d:4f:c3:83:d1:3b:5b:60:99:fd:0d:0a:
d5:6a:0b:99:f7:de:62:4e:1c:e6:27:30:39:84:5d:32:2e:8b:
93:82:7e:ea:91:99:4b:57:8a:ed:51:84:1f:94:fb:19:df:c9:
23:23:6f:b4:60:e8:c6:2c:f1:b5:cd:6c:d8:d0:ba:3a:35:f9:
a4:19:a8:bd:ba:8b:e9:01:47:f7:44:f9:a2:7c:3e:9f:d4:3f:
95:58:00:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:55 2026 by rpki-client