
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
File: HaAa_AiIyqYXHgoOdBz8kE7S328.mft (raw, json)
Hash identifier: u+za3S1khWmGoj2Z9l2mNPpj0MVnS28pXxXSAZAXoP8=
Subject key identifier: 9C:38:50:50:E9:3E:AC:BE:7B:5E:77:2C:46:FB:20:B0:01:01:B5:F3
Authority key identifier: 1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F
Certificate issuer: /CN=A91352C6/serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F
Certificate serial: 09CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
Manifest number: 09C6
Signing time: Thu 24 Sep 2026 19:51:07 +0000
Manifest this update: Thu 24 Sep 2026 19:51:07 +0000
Manifest next update: Thu 01 Oct 2026 19:51:07 +0000
Files and hashes: 1: HaAa_AiIyqYXHgoOdBz8kE7S328.crl (hash: sjYHHLGrAn+1MnZQZ24KxgElkTVEJgo6vqSQwy09gLI=)
2: 939AAE78B1D511EA8E3DAE1CC4F9AE02.roa (hash: V81dD3x6Xu9JhvlyqWC7cihyerGfmzPLwxY1DFEcyJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl
rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2510 (0x9ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91352C6, serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F
Validity
Not Before: Sep 24 19:51:07 2026 GMT
Not After : Oct 1 19:51:07 2026 GMT
Subject: CN=6ab57f2b-513e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:61:92:21:05:a8:f1:29:32:1b:37:f2:41:
8f:ab:cb:c0:1a:50:cc:2c:25:6b:82:e8:a5:40:62:
ea:37:0e:3a:4a:88:95:4b:00:ef:a9:f0:48:00:04:
4d:3f:a7:c6:8e:da:94:4e:7d:44:81:20:7f:2b:71:
37:26:5d:d7:c8:2c:83:50:65:ec:8f:2a:55:d4:1f:
63:c7:91:93:dd:e4:0a:dd:fa:8f:d1:fc:e4:a1:ba:
93:64:cb:d0:5a:d8:4c:1d:8f:23:74:a5:68:7d:39:
40:bc:12:41:fb:aa:93:74:31:19:23:76:7c:07:24:
7a:4c:ee:07:c8:7c:55:3e:f0:26:64:88:9f:17:97:
e5:96:a2:43:eb:a5:95:5e:90:7b:88:81:d3:b0:90:
2a:88:57:4e:8e:99:c6:e8:f9:e5:e3:e3:87:8e:82:
98:62:89:fa:0b:91:5b:9c:06:ea:b8:18:37:51:63:
71:6f:37:04:35:87:04:14:7a:01:e9:6b:7c:cc:94:
09:c3:5a:e1:74:ad:3a:42:d5:6e:76:81:6e:64:0a:
c3:e0:ff:db:54:9a:fe:f7:4e:f0:c8:fe:68:d3:4f:
8f:f8:e3:49:78:14:aa:2c:75:68:5b:f4:6b:88:ad:
f7:f2:44:9e:58:55:48:cd:db:c0:0a:03:92:0d:d3:
10:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:38:50:50:E9:3E:AC:BE:7B:5E:77:2C:46:FB:20:B0:01:01:B5:F3
X509v3 Authority Key Identifier:
keyid:1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:18:d8:1f:d9:10:84:49:cd:f9:87:d7:15:7b:44:a5:fa:cc:
e9:f6:3f:9e:6d:b2:b7:79:c5:03:9e:3b:6c:2e:ea:c3:a3:77:
cc:ba:46:a3:27:96:44:00:18:bf:47:f0:0a:47:44:03:0a:7c:
75:3c:12:90:bf:ab:3b:91:72:bf:54:7d:cd:1f:10:7b:22:df:
4e:63:db:f0:15:5a:7f:38:98:3b:97:b1:3e:00:d3:c8:27:9d:
27:83:33:c4:6a:97:df:9b:f6:dd:18:78:91:58:32:7d:37:52:
79:bf:01:0c:81:38:e8:86:bc:cd:37:0c:10:72:7d:ce:ba:8e:
0d:30:c3:09:10:f8:01:79:02:f5:30:6f:88:29:de:b2:f8:49:
50:7e:36:0d:30:2e:85:1d:1a:f3:1e:54:64:b4:da:2c:ce:70:
32:37:db:ff:1f:00:83:4f:db:cd:5c:66:73:af:e3:6c:8b:7c:
60:2f:1f:f3:e9:7a:5b:9c:db:ac:8b:3e:66:bf:09:d6:a5:43:
ef:b1:ba:46:02:a0:65:03:0b:b0:11:85:95:b8:48:ea:a3:f9:
38:6a:7a:46:11:ab:93:de:71:a1:bc:7b:48:a5:72:61:22:b3:
bb:bb:1b:de:a2:e4:de:74:5b:c0:d9:77:ac:5b:9d:9e:dc:06:
14:29:13:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:20:22 2026 by rpki-client