
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json)
Hash identifier: ywdiRLPm+bEpVI5GXhSEZiG4DW9xELz1QD/bzNp7eTI=
Subject key identifier: CB:B5:3E:E2:CC:54:77:E6:89:D1:D2:0F:1B:7B:A8:32:E8:E5:92:94
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial: 099D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
Manifest number: 0973
Signing time: Wed 22 Jul 2026 20:30:54 +0000
Manifest this update: Wed 22 Jul 2026 20:30:54 +0000
Manifest next update: Wed 29 Jul 2026 20:30:54 +0000
Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: uQ4wzT21VOCo7T1Jrifj5QTOf09lk5K5GeE5PquGaIM=)
2: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: rixxFEhhporEowEcKJ0zMfY5DGdFHoWYuPowdcyFr5A=)
3: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: UJmyzSzozDENX7jF+64gEj4E6QBieKxXCaJ+JGRYbs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2461 (0x99d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Validity
Not Before: Jul 22 20:30:54 2026 GMT
Not After : Jul 29 20:30:54 2026 GMT
Subject: CN=6a61287e-ab2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:c5:ef:eb:7f:49:07:da:e2:37:d4:c8:38:
5e:d2:78:fe:3d:76:68:44:9a:03:6c:85:63:1e:73:
49:87:53:d7:5d:ad:53:a9:3c:54:ce:55:7e:4a:d6:
11:6e:6f:9c:fa:18:19:4d:39:d9:a6:b0:80:1a:0a:
0e:5d:ce:e0:72:b7:80:d3:09:6e:4b:f9:52:52:b8:
5a:a9:ff:8b:ee:d4:af:f8:08:5e:ce:9e:74:95:92:
a5:65:49:ec:f1:03:e5:ca:86:53:a5:af:bb:ae:01:
ca:28:44:75:3d:b9:7c:67:8f:99:4b:e2:e2:c9:c1:
b5:6f:2c:cb:2f:dd:4f:bc:c9:07:9e:d3:9f:a8:35:
5a:74:83:54:d5:c1:b9:74:47:57:f8:ef:7c:91:f4:
bc:17:9b:29:c9:e5:20:60:7d:ac:22:7b:7d:66:24:
80:aa:d8:f6:27:90:e4:68:fb:ab:9e:cc:82:6f:13:
b0:2b:80:43:7c:18:d0:28:2a:d3:f9:98:a4:5a:12:
29:e9:dc:27:85:ff:8e:af:ba:e4:88:b8:a4:a2:78:
9b:f1:f6:f7:a7:29:1a:61:e2:af:4f:2a:8f:37:50:
b1:d2:fb:2d:5f:b6:28:0d:f2:bb:ae:a4:0b:08:ef:
bf:c3:02:2e:30:3a:0b:23:71:da:4b:14:21:db:82:
79:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B5:3E:E2:CC:54:77:E6:89:D1:D2:0F:1B:7B:A8:32:E8:E5:92:94
X509v3 Authority Key Identifier:
keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:f0:b9:20:94:04:9a:85:5f:63:c7:e1:d1:31:6d:77:86:eb:
6f:62:97:95:66:2a:46:a0:51:1a:91:0c:6d:ce:20:7d:8c:29:
12:aa:c0:73:3a:da:15:12:6a:ce:be:b6:e2:cd:71:38:0f:67:
99:34:57:15:04:96:3c:c1:4e:29:48:7d:04:0f:8e:c2:4e:b4:
21:b2:30:ea:25:c2:92:1f:19:57:b1:7e:88:ba:7e:b8:56:84:
b0:79:7a:49:56:14:1d:dd:91:32:cb:ca:bb:53:6e:be:51:1f:
af:5f:d0:ec:be:2f:a7:cb:a4:53:c7:0d:69:95:24:cf:14:3d:
4e:c8:41:5a:3f:a2:68:98:5a:a3:3a:cf:dc:ba:70:a3:cb:c7:
23:aa:9c:46:de:8a:46:74:9f:5f:ee:cb:95:b1:e4:9a:d7:0b:
54:4f:13:25:0d:d9:e0:dc:f7:88:a1:b7:cd:ec:6c:7e:a8:db:
65:ad:56:a1:b8:a0:94:11:92:b3:33:9a:9a:2f:81:52:64:fa:
79:8f:e6:6d:45:36:ca:1e:c3:91:b5:e7:d8:07:e3:c4:28:11:
bc:7b:71:62:5f:cd:6c:ee:f1:b4:9b:21:a1:a7:54:81:17:99:
06:12:8d:2e:da:45:7b:94:80:7d:21:56:22:ff:ac:a2:37:0e:
71:59:2e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:49 2026 by rpki-client