
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
File: Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json)
Hash identifier: gXAz5L/ig4ZNOwfPPJ5ayHeN6l/9firijls9uhgZpIw=
Subject key identifier: AD:B4:9E:3A:1D:40:29:A8:6B:25:B7:14:1E:E7:3C:36:42:09:ED:18
Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
Certificate issuer: /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Certificate serial: 027F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
Manifest number: 0277
Signing time: Fri 25 Sep 2026 02:02:46 +0000
Manifest this update: Fri 25 Sep 2026 02:02:45 +0000
Manifest next update: Fri 02 Oct 2026 02:02:45 +0000
Files and hashes: 1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: RHkbDptQSBmiqRjVnRp53zg1aczIOQNQE+RcRmhiKqc=)
2: C369BA98260D11F082934618C4F9AE02.roa (hash: 0vSjVDuwcme5SYhnnHj+3Jurf17kU0PfDgiNk0coHnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639 (0x27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Validity
Not Before: Sep 25 02:02:45 2026 GMT
Not After : Oct 2 02:02:45 2026 GMT
Subject: CN=6ab5d646-50a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:0a:e8:5d:8f:40:85:74:a0:09:e9:fb:26:
5d:c3:28:10:39:66:5e:24:f4:c7:49:99:1b:f1:cc:
fd:17:d7:21:94:4c:62:c0:de:44:ac:f7:bf:c8:50:
44:a3:c8:24:ba:f9:49:76:9a:b2:f5:63:f1:28:e0:
0a:4a:9e:d4:95:de:85:89:e3:21:0a:8f:ee:a4:6e:
52:50:d4:7e:1b:a1:1a:59:48:71:97:41:5b:9e:2b:
c7:15:db:78:da:e4:4e:92:9d:66:dc:57:46:9c:12:
1c:ef:80:3c:e5:5d:01:2c:09:c5:de:82:8f:8a:6d:
fe:9b:ac:64:90:0b:56:f3:20:6b:92:3c:b0:2b:a2:
e3:d4:da:ed:a9:df:d7:cf:2b:39:82:b2:71:07:14:
3a:8c:50:3c:39:10:70:ac:89:53:49:23:5d:f6:13:
45:f6:f3:bf:db:72:be:14:4d:b8:51:f7:31:ce:39:
0d:20:8a:98:08:4b:1e:49:20:81:1d:59:31:b2:4c:
28:92:df:8b:96:39:65:3b:1f:c2:7d:04:90:cf:be:
d5:15:e6:0f:ab:42:49:33:23:36:87:c7:e8:6f:75:
6b:9c:79:bb:50:02:18:e8:5d:d2:09:10:55:2c:54:
3a:2c:41:98:2d:8f:1b:e8:da:6e:9c:20:f4:6c:2e:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B4:9E:3A:1D:40:29:A8:6B:25:B7:14:1E:E7:3C:36:42:09:ED:18
X509v3 Authority Key Identifier:
keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ad:c3:3f:45:42:7c:3c:23:da:07:86:b5:e6:73:62:cd:a6:
17:ec:66:00:41:58:fd:ce:a6:2d:a4:d7:39:9c:c3:91:7d:e5:
11:64:e1:0a:00:2f:f7:13:93:b8:c5:66:59:d3:4b:9c:e3:a3:
f2:22:a4:70:a3:04:c0:16:94:27:22:9e:07:66:03:8f:5e:f7:
65:44:e5:f1:30:7c:e5:a4:7e:f4:17:4f:5d:e1:ee:eb:12:22:
bc:34:06:0f:e8:46:7c:26:83:b1:8d:da:66:86:e4:ab:a4:a3:
76:ec:16:aa:b1:11:d7:49:eb:bc:f4:41:47:86:e5:81:7d:4e:
bf:90:6b:a7:97:a3:74:97:b2:f3:85:6b:3d:58:19:7a:52:8b:
88:64:c9:54:69:f0:dc:33:8c:4f:5e:54:39:3b:44:5b:9f:c5:
ee:a2:46:c5:63:59:b7:f2:be:d4:de:d0:36:8c:98:03:29:df:
36:ae:bd:86:45:99:e8:77:77:d1:d1:80:8e:e5:7a:e4:a0:84:
35:93:37:a8:c2:fb:6f:87:65:bc:c6:4c:a6:4f:fc:3f:e3:3d:
f4:b8:2b:6f:17:c8:3e:5b:91:94:f7:6c:b9:fa:c7:6f:3b:89:
4b:b7:0f:85:2e:a6:cc:84:06:65:d8:ba:3d:1c:65:4f:ce:0f:
47:9e:f7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:48:29 2026 by rpki-client