
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
File: Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json)
Hash identifier: e2wWTBU38B/ehDovftjcb9WJwwffoXbuDuOSKa0rohc=
Subject key identifier: 29:E1:28:F3:E8:FC:94:60:86:E7:E6:BA:42:F8:AF:27:E0:50:B0:82
Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
Certificate issuer: /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Certificate serial: 025B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
Manifest number: 0254
Signing time: Thu 23 Jul 2026 03:29:04 +0000
Manifest this update: Thu 23 Jul 2026 03:29:04 +0000
Manifest next update: Thu 30 Jul 2026 03:29:04 +0000
Files and hashes: 1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: yVOiv+QWVRrtopw6DAHbXpjK1nUqHZKF2lNOSz0RmBs=)
2: C369BA98260D11F082934618C4F9AE02.roa (hash: cXQDcqjGHQK7UALmkZP5e0hc3VzG0s7yGBDOUKs2gKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Validity
Not Before: Jul 23 03:29:04 2026 GMT
Not After : Jul 30 03:29:04 2026 GMT
Subject: CN=6a618a80-d91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6f:30:ae:b0:d9:45:bf:98:94:4f:3e:73:58:
59:ee:b3:a3:20:a2:83:10:8a:69:7d:2e:2f:08:e2:
cc:32:e8:2e:eb:f8:b0:fc:15:98:c4:e1:cc:46:e6:
25:5f:23:7b:8f:2c:ba:62:ca:3a:84:c4:13:9d:24:
ff:3b:4d:c9:ca:2e:4a:01:e2:f8:0b:eb:05:40:a5:
4a:e1:a5:81:3b:03:dd:b8:78:df:58:ac:2c:a1:ed:
67:da:05:bc:49:cc:78:ff:11:e8:49:ba:7e:4d:9d:
c8:88:7b:08:25:34:69:2f:bb:65:cf:ac:2d:1f:18:
42:9d:de:a8:5b:c5:cc:43:5b:ef:96:05:0a:c0:2b:
e5:2c:bc:e0:a5:6c:53:8e:c2:2b:95:e5:91:84:67:
6a:32:0b:e2:8b:83:e0:ef:76:e2:18:69:dc:f8:10:
ce:d9:1e:98:3d:12:02:c9:a6:7c:87:a0:80:d0:5a:
1d:ff:9e:a1:5a:91:1f:29:2c:cb:79:2a:ef:bf:c5:
16:19:ae:7a:42:cc:da:be:33:1d:60:95:58:11:b2:
48:2c:92:0a:cf:94:48:d6:9e:92:c4:53:9e:af:73:
9c:9c:36:f7:72:b8:d0:c3:c9:3a:45:b4:b0:35:ac:
6e:89:10:6c:86:e2:22:7e:31:ce:1b:f8:0a:30:40:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E1:28:F3:E8:FC:94:60:86:E7:E6:BA:42:F8:AF:27:E0:50:B0:82
X509v3 Authority Key Identifier:
keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:12:94:85:e0:c1:40:26:05:40:89:28:05:e7:93:5a:f3:ec:
53:4b:4e:77:95:75:fe:32:97:d3:0e:d5:fe:46:ce:de:ad:79:
60:ef:26:ba:0a:94:61:aa:19:27:db:36:db:68:eb:6f:fa:27:
ac:73:e3:8e:ea:ee:43:63:43:94:8c:c6:d9:fa:bc:d3:a9:da:
57:90:2f:92:16:cc:15:68:82:0e:13:40:3e:0e:f1:36:39:89:
46:8a:b3:04:fd:b9:6c:87:93:4b:aa:4f:9b:2d:d1:75:e0:20:
5d:fc:12:e3:85:20:29:1a:88:8f:85:08:d7:c4:a2:55:2f:16:
ab:f9:d8:93:33:0e:d0:9b:9e:08:63:e3:c9:c6:79:e0:e5:69:
c2:d8:0c:5c:46:df:18:87:bc:8c:b6:7b:17:7f:7b:53:e0:18:
6c:f8:75:b5:e0:16:35:b3:ad:33:2a:37:10:91:8b:21:eb:66:
b3:49:b4:22:ad:bd:b7:d2:39:a5:71:fa:81:79:e8:aa:12:d5:
b4:7f:4c:bb:6f:13:f5:a8:6f:05:4b:52:e2:28:ea:e6:61:81:
54:83:87:87:8c:a0:45:b2:1b:25:cc:47:0e:ad:84:6a:c3:a2:
c9:a5:aa:25:ae:e9:75:c1:17:2c:10:c0:b6:04:8c:33:68:99:
b6:de:7f:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzcyOEExMTAvBgNVBAUTKDFEQUFGNDVGQjREMjcyNDA3QTUyQTYzQkI3Mzk2NTM2
OUU5MTIwRUQwHhcNMjYwNzIzMDMyOTA0WhcNMjYwNzMwMDMyOTA0WjAYMRYwFAYD
VQQDEw02YTYxOGE4MC1kOTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4m8wrrDZRb+YlE8+c1hZ7rOjIKKDEIppfS4vCOLMMugu6/iw/BWYxOHMRuYl
XyN7jyy6Yso6hMQTnST/O03Jyi5KAeL4C+sFQKVK4aWBOwPduHjfWKwsoe1n2gW8
Scx4/xHoSbp+TZ3IiHsIJTRpL7tlz6wtHxhCnd6oW8XMQ1vvlgUKwCvlLLzgpWxT
jsIrleWRhGdqMgvii4Pg73biGGnc+BDO2R6YPRICyaZ8h6CA0Fod/56hWpEfKSzL
eSrvv8UWGa56QszavjMdYJVYEbJILJIKz5RI1p6SxFOer3OcnDb3crjQw8k6RbSw
NaxuiRBshuIifjHOG/gKMEB7RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCnhKPPo
/JRghufmukL4ryfgULCCMB8GA1UdIwQYMBaAFB2q9F+00nJAelKmO7c5ZTaekSDt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzI4QS81MzdFNDZDNkY5
QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2NrQjZVcVk3dHpsbE5wNlJJ
TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hhcjBYN1RTY2tCNlVxWTd0emxsTnA2UklPMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzI4QS81MzdFNDZDNkY5QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2Nr
QjZVcVk3dHpsbE5wNlJJTzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhhKUheDBQCYFQIkoBeeTWvPsU0tOd5V1/jKX0w7V/kbO3q15YO8mugqUYaoZ
J9s222jrb/onrHPjjuruQ2NDlIzG2fq806naV5AvkhbMFWiCDhNAPg7xNjmJRoqz
BP25bIeTS6pPmy3RdeAgXfwS44UgKRqIj4UI18SiVS8Wq/nYkzMO0JueCGPjycZ5
4OVpwtgMXEbfGIe8jLZ7F397U+AYbPh1teAWNbOtMyo3EJGLIetms0m0Iq29t9I5
pXH6gXnoqhLVtH9Mu28T9ahvBUtS4ijq5mGBVIOHh4ygRbIbJcxHDq2EasOiyaWq
Ja7pdcEXLBDAtgSMM2iZtt5/og==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:47 2026 by rpki-client