
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft
File: HAQwdyQVc864WNlR8CsiBXujluc.mft (raw, json)
Hash identifier: 0y/QDuKpiXR1p6szz3LYSsIWhr748RsEa+YmuMPfO6k=
Subject key identifier: 78:E4:CA:9A:9B:BF:89:AE:8A:94:B4:76:CB:20:A5:7A:C9:BD:B7:E2
Authority key identifier: 1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7
Certificate issuer: /CN=A91D45A2/serialNumber=1C043077241573CEB858D951F02B22057BA396E7
Certificate serial: 04E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft
Manifest number: 04DE
Signing time: Tue 22 Sep 2026 23:24:27 +0000
Manifest this update: Tue 22 Sep 2026 23:24:27 +0000
Manifest next update: Tue 29 Sep 2026 23:24:27 +0000
Files and hashes: 1: HAQwdyQVc864WNlR8CsiBXujluc.crl (hash: isA3oyX5RjGi2ViNpqumTwH3zR7axhWKGToZCpO1Gv0=)
2: 4AB730E0800B11EC84B3FA3BC4F9AE02.roa (hash: xOj/wZXPscupT3ElrTmBaHlsw670Pw+Hr4mehf5CVBo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl
rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1255 (0x4e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D45A2, serialNumber=1C043077241573CEB858D951F02B22057BA396E7
Validity
Not Before: Sep 22 23:24:27 2026 GMT
Not After : Sep 29 23:24:27 2026 GMT
Subject: CN=6ab30e2b-04b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:c4:c8:2c:cf:e8:aa:b7:38:89:3a:a9:97:
33:bb:32:39:32:54:a4:7f:1d:ed:6d:a8:00:f8:1c:
13:18:40:f5:9f:dc:2f:4f:a1:b9:f7:0e:e4:4f:40:
e2:d4:79:44:d4:97:6d:4d:31:6d:cb:11:05:33:e0:
6e:66:5f:07:33:41:eb:d3:02:65:01:a1:52:4a:c4:
08:ad:23:80:15:18:12:fe:83:8f:ee:f1:4b:f0:91:
4d:9a:32:a3:b1:97:da:b5:e4:63:f5:d3:40:2f:86:
f9:43:42:b5:66:c5:35:9b:d5:53:6f:04:cd:19:41:
55:42:82:ef:a7:b1:95:9c:2f:a9:84:6f:3f:9d:4a:
d7:64:e5:b7:05:52:c4:51:22:30:c7:10:0a:b8:7b:
f3:41:41:bf:f0:ff:97:09:5f:d9:58:2f:0f:cb:1a:
e6:b3:99:a6:f7:6f:99:63:71:2e:de:b3:10:08:3d:
3b:c8:5a:77:91:44:96:93:27:05:68:00:34:a9:d4:
b6:63:75:42:45:a4:0c:7c:ca:71:2d:f0:e7:bd:d3:
77:bf:84:f4:44:d5:3e:20:21:74:00:ba:18:21:37:
03:89:95:e2:ab:66:0f:c8:94:f8:88:5a:57:9b:71:
3c:b0:80:74:7a:b3:4b:33:bf:9b:49:85:68:c4:09:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E4:CA:9A:9B:BF:89:AE:8A:94:B4:76:CB:20:A5:7A:C9:BD:B7:E2
X509v3 Authority Key Identifier:
keyid:1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:44:7a:34:86:0f:01:48:03:11:de:23:36:de:d3:aa:87:1a:
0c:b8:c5:b6:bb:6f:41:66:25:84:52:f4:60:59:d6:44:6d:24:
68:b0:31:23:84:23:be:05:49:68:07:97:ae:7e:f7:39:cf:c7:
f9:0b:29:af:0c:3b:69:56:69:f8:a3:3b:74:1f:04:b4:fb:0a:
82:69:13:96:1e:ed:50:cf:ce:62:d1:5c:6c:4d:91:fc:c3:d7:
e5:61:2f:03:84:c1:fb:77:c0:72:fe:17:76:79:7a:fc:d1:d0:
cf:f9:bf:a6:9b:0c:b7:47:2c:22:ae:a6:b6:91:63:ff:b5:56:
6b:4c:40:5b:64:42:a2:31:6a:31:0c:44:7e:7d:53:c9:6c:29:
ea:22:e3:96:ff:dd:31:7b:10:d9:ba:50:d0:40:38:b1:bc:1d:
82:f2:ab:82:ea:be:a5:09:0f:0c:2f:02:16:bc:b5:e3:4e:12:
77:b0:5c:26:49:0a:2e:c1:12:7c:8a:14:31:ae:54:77:a3:a8:
58:9b:5b:dd:7e:15:bc:25:02:db:36:d1:65:61:4f:25:be:25:
f6:09:e9:c7:5f:f2:9d:d4:a2:59:64:9a:5c:bb:24:61:e9:a8:
5f:d7:9d:7d:43:ca:38:2a:a4:4e:73:9b:5b:b4:73:61:9b:66:
47:7f:d2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:31:32 2026 by rpki-client