
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json)
Hash identifier: x7tMVPZ4GHBzjWa13L+/oym2a5Uxx5kYMShIZLN1Fe4=
Subject key identifier: 7E:66:D1:80:B9:DC:06:F1:ED:DA:4A:DE:D4:AE:78:E0:02:96:FB:DD
Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4
Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
Manifest number: 018F
Signing time: Fri 25 Sep 2026 04:27:58 +0000
Manifest this update: Fri 25 Sep 2026 04:27:57 +0000
Manifest next update: Fri 02 Oct 2026 04:27:57 +0000
Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: qIa9WnvgNOgMzs8lBIYedaseHiDcJ726YsEZzbi9+88=)
2: 06F73C70ABD011F0977C9F10C4F9AE02.roa (hash: vgtGXqZIotP7XALpdVVLNGiNYGh7f99bKJBaiOXmSGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl
rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4
Validity
Not Before: Sep 25 04:27:57 2026 GMT
Not After : Oct 2 04:27:57 2026 GMT
Subject: CN=6ab5f84e-3a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:57:3a:20:91:66:1c:23:e4:7d:5d:3d:17:04:
ab:7a:d8:75:5e:51:43:73:86:79:b6:f2:28:1f:4e:
f8:5b:db:be:99:7d:d3:2b:b3:79:8b:22:6f:b6:69:
49:3d:1b:07:62:84:01:66:ae:f9:f7:2e:3d:83:32:
53:6f:12:62:78:e6:3a:c2:d4:cb:47:3b:21:07:4e:
2b:a9:95:f3:6e:47:56:17:7b:4e:26:3b:f3:e8:f8:
c0:a9:20:7b:7e:41:00:ba:b7:2d:b3:17:02:c9:b5:
24:02:c2:12:6b:6b:47:1d:cd:58:3c:f0:51:54:ac:
02:43:1b:9c:ec:64:22:04:18:4e:53:16:93:6b:bc:
37:20:6d:8c:e0:fc:3f:bc:a6:92:3f:99:01:f7:4f:
50:97:a7:d5:e1:59:2f:ad:d8:09:ca:83:db:3c:bd:
94:5a:c9:f6:0f:0c:60:2e:93:d3:bb:20:ce:29:1e:
ab:ea:0e:c7:7e:ca:43:f3:34:04:8e:6a:61:5d:f9:
46:92:ca:89:43:d7:7c:34:97:b6:11:71:71:63:86:
a5:7c:ab:06:4c:cb:ea:c7:96:73:c4:46:18:d9:28:
03:ee:5e:5f:36:ad:e3:9c:0a:e1:f7:79:52:dd:83:
55:d3:db:33:53:70:02:81:19:86:f9:43:95:79:1a:
f7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:66:D1:80:B9:DC:06:F1:ED:DA:4A:DE:D4:AE:78:E0:02:96:FB:DD
X509v3 Authority Key Identifier:
keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:fb:ed:94:5e:2f:36:8c:de:94:a9:b7:6c:39:68:75:18:4d:
51:52:bf:58:b5:7f:36:59:54:65:c9:75:49:a6:a2:10:cb:29:
c0:78:0c:64:79:ce:65:bb:0c:7b:0b:92:bc:27:51:6d:5f:63:
0d:64:95:73:21:33:93:8f:3c:83:21:4f:1b:6c:25:82:48:76:
a5:bb:e2:f5:be:47:c3:cb:ee:a3:38:09:56:3a:1b:1b:3a:89:
2f:77:3f:d9:78:9c:8e:d4:f9:79:b6:1f:d8:a8:5c:dd:f2:62:
02:58:da:e9:d3:ef:6f:ce:63:2c:d7:a1:81:3e:74:15:bb:69:
06:ff:4e:3b:2b:81:94:10:74:7c:91:f6:86:14:e8:5f:9c:0c:
5b:8e:ed:b1:01:5c:22:ac:a2:0d:4a:0e:d0:87:d2:fb:47:cb:
a2:40:a6:b7:40:5a:86:1b:6f:9d:ff:46:63:54:c5:cf:d2:20:
6e:f4:f8:2d:f1:e2:ad:32:2f:5a:2d:cd:0d:98:64:d5:51:9f:
b5:95:78:4f:05:e1:33:c6:3b:1d:1e:0d:99:a9:c5:30:b0:9e:
1a:13:d6:62:53:7e:1f:f4:1f:60:d9:3f:a2:ed:32:8b:08:55:
4a:ea:4e:df:74:9a:61:7d:8f:3f:4e:73:6a:49:c6:b9:af:0f:
2c:2f:f8:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlFQkExMTAvBgNVBAUTKDg1QUU2MjE5Rjg2MjY5NDE0QkUxNzZCNzgyNUYxNkNE
REQ0MjQyRDQwHhcNMjYwOTI1MDQyNzU3WhcNMjYxMDAyMDQyNzU3WjAYMRYwFAYD
VQQDEw02YWI1Zjg0ZS0zYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhlc6IJFmHCPkfV09FwSreth1XlFDc4Z5tvIoH074W9u+mX3TK7N5iyJvtmlJ
PRsHYoQBZq759y49gzJTbxJieOY6wtTLRzshB04rqZXzbkdWF3tOJjvz6PjAqSB7
fkEAurctsxcCybUkAsISa2tHHc1YPPBRVKwCQxuc7GQiBBhOUxaTa7w3IG2M4Pw/
vKaSP5kB909Ql6fV4VkvrdgJyoPbPL2UWsn2DwxgLpPTuyDOKR6r6g7HfspD8zQE
jmphXflGksqJQ9d8NJe2EXFxY4alfKsGTMvqx5ZzxEYY2SgD7l5fNq3jnArh93lS
3YNV09szU3ACgRmG+UOVeRr3hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH5m0YC5
3Abx7dpK3tSueOAClvvdMB8GA1UdIwQYMBaAFIWuYhn4YmlBS+F2t4JfFs3dQkLU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVCQS9GQTMyMENEQTVB
REMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFVRkw0WGEzZ2w4V3pkMUNR
dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUVCQS9GQTMyMENEQTVBREMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFV
Rkw0WGEzZ2w4V3pkMUNRdFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIPvtlF4vNozelKm3bDlodRhNUVK/WLV/NllUZcl1SaaiEMspwHgMZHnOZbsM
ewuSvCdRbV9jDWSVcyEzk488gyFPG2wlgkh2pbvi9b5Hw8vuozgJVjobGzqJL3c/
2XicjtT5ebYf2Khc3fJiAlja6dPvb85jLNehgT50FbtpBv9OOyuBlBB0fJH2hhTo
X5wMW47tsQFcIqyiDUoO0IfS+0fLokCmt0Bahhtvnf9GY1TFz9IgbvT4LfHirTIv
Wi3NDZhk1VGftZV4TwXhM8Y7HR4NmanFMLCeGhPWYlN+H/QfYNk/ou0yiwhVSupO
33SaYX2PP05zaknGua8PLC/42A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:22:32 2026 by rpki-client