
$ rpki-client -vvf rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
File: HaAa_AiIyqYXHgoOdBz8kE7S328.mft (raw, json)
Hash identifier: itGMpJgNGwlukG77eSqxaBxE90s4BSuk/KAPS8eco9M=
Subject key identifier: 00:4C:8A:46:07:13:DE:93:81:FD:96:5C:6C:3E:5B:1A:9C:8E:0A:85
Authority key identifier: 1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F
Certificate issuer: /CN=A91352C6/serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F
Certificate serial: 09AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
Manifest number: 09A5
Signing time: Wed 22 Jul 2026 20:24:35 +0000
Manifest this update: Wed 22 Jul 2026 20:24:34 +0000
Manifest next update: Wed 29 Jul 2026 20:24:34 +0000
Files and hashes: 1: HaAa_AiIyqYXHgoOdBz8kE7S328.crl (hash: 0Ig8f0AaFp5tFXy1sW65QiT/TszzbfSZr6e07Z71kJ4=)
2: 939AAE78B1D511EA8E3DAE1CC4F9AE02.roa (hash: V81dD3x6Xu9JhvlyqWC7cihyerGfmzPLwxY1DFEcyJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl
rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:24:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2477 (0x9ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91352C6, serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F
Validity
Not Before: Jul 22 20:24:34 2026 GMT
Not After : Jul 29 20:24:34 2026 GMT
Subject: CN=6a612703-f969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:69:78:b5:31:18:a3:63:6c:cf:d1:89:e0:
56:c9:52:a9:ef:5c:03:25:0f:49:31:c5:81:4d:36:
a8:85:97:a0:88:c9:85:8a:9b:e8:92:2a:20:11:b1:
44:83:79:57:dd:62:8f:ca:a8:94:a4:3a:bf:f1:0f:
35:80:bf:3c:00:0e:2a:8c:97:8e:94:d0:ec:b9:da:
53:6d:6f:b5:c2:7f:79:a2:35:7b:dc:c7:16:20:c6:
64:21:b1:64:ed:d9:b8:3d:08:6e:3f:8a:3e:f9:77:
79:ac:d5:85:3a:55:85:2e:c2:73:c3:11:b4:7d:03:
0f:7b:3d:bb:5d:9b:f3:83:bc:6d:a4:93:59:d5:01:
9b:d8:ab:93:c3:d6:9c:b5:9b:2a:30:a6:fb:aa:af:
c4:dd:42:92:7e:ba:23:14:ce:36:e8:fe:72:17:98:
84:ad:ff:93:d3:82:36:fa:96:30:2a:50:39:a7:b5:
0e:67:e0:8b:0f:ed:1c:8e:6b:07:b8:91:ae:84:95:
c3:b6:8e:11:58:48:35:79:b1:85:94:09:b2:35:4a:
8c:99:48:6e:16:1a:07:b1:b7:13:39:4e:2b:25:bb:
fc:3f:e2:61:e7:9f:e5:ba:3f:b7:0e:ec:3b:9f:2b:
2e:4a:7a:d7:51:4d:8c:87:83:6a:88:0d:6f:54:32:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4C:8A:46:07:13:DE:93:81:FD:96:5C:6C:3E:5B:1A:9C:8E:0A:85
X509v3 Authority Key Identifier:
keyid:1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:73:c7:48:6c:4f:03:69:e6:1d:a1:9c:be:5f:60:ba:00:28:
f6:97:ac:fe:cf:76:b4:7a:27:c9:5a:f4:0e:7c:a6:5a:80:02:
8b:58:fb:27:6b:ef:ff:25:71:cb:1c:95:5c:06:c4:c6:0e:8a:
2d:a7:3c:de:82:f7:19:51:fa:55:d9:0e:db:a0:8f:52:7f:90:
a4:e3:0f:b7:e0:8d:fe:f2:61:21:be:f8:dc:0b:db:03:3d:43:
b2:3d:27:e9:6a:c6:6a:5e:5b:2f:c7:cc:6b:fb:67:8d:32:62:
0e:5d:2d:96:56:21:df:39:a0:21:cf:88:37:e3:c0:5c:79:74:
7c:79:7d:e8:b9:6c:b9:e0:18:6f:29:fe:8f:ef:5d:06:0a:43:
a1:17:bd:f9:7d:f4:a4:88:e2:e5:f6:07:05:b6:5a:05:83:24:
ae:8b:f8:76:fb:48:92:b8:e3:10:e8:bd:5d:e7:b8:38:b9:d0:
1a:cd:6b:a1:2d:06:0a:80:2e:0d:b5:84:a6:c3:24:f6:25:58:
ae:d6:01:b5:03:36:80:c1:65:6f:c8:0a:0b:d0:2a:fd:03:a8:
cf:9f:bb:b3:53:74:07:27:93:e6:c6:68:77:fb:48:6d:6d:a8:
d8:9d:0b:5a:dc:12:8a:76:ca:c8:bf:64:ed:19:a3:eb:f5:03:
ed:3c:11:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:12:29 2026 by rpki-client