
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
File: haTP570qMmoqBWITY5e3zK5eW3w.mft (raw, json)
Hash identifier: QdUx8VWGiPt8fQfVdxjFKYRY68Kd06WjarqVepi4fvU=
Subject key identifier: 4B:A0:4D:9F:EC:8B:45:25:19:C2:F9:69:35:0F:C5:34:AD:B9:BA:74
Authority key identifier: 85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C
Certificate issuer: /CN=A912B666/serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C
Certificate serial: CE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
Manifest number: C3
Signing time: Thu 05 Nov 2026 08:01:12 +0000
Manifest this update: Thu 05 Nov 2026 08:01:12 +0000
Manifest next update: Thu 12 Nov 2026 08:01:12 +0000
Files and hashes: 1: haTP570qMmoqBWITY5e3zK5eW3w.crl (hash: WGQuMfTsODxG37PF+TY+b36hm4ogQTrCr5o4UVNa9tI=)
2: 44FE06BAA6F811F1B8F08DEC5511F970.roa (hash: 2Z87/Uy+52d2YFHQShGuEykOw9xNGTwytRulFs8sDYg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl
rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B666, serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C
Validity
Not Before: Nov 5 08:01:12 2026 GMT
Not After : Nov 12 08:01:12 2026 GMT
Subject: CN=6aec37c8-b54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:7b:a0:6b:2d:f0:1b:a4:1c:81:68:dd:57:
3e:04:78:31:23:45:02:73:61:e2:45:94:1b:5a:9c:
12:dd:3f:e8:e7:70:7c:66:f9:f4:0b:f2:bb:7a:8b:
92:89:c0:82:ef:1b:d0:8e:7a:6e:2e:5c:4a:55:66:
34:2b:66:52:f1:3c:14:e1:85:83:5c:a0:02:97:74:
38:09:5f:b9:58:36:1c:e4:30:b9:6f:e5:e1:5c:fa:
3c:aa:a2:65:af:71:a9:f3:d0:af:bd:70:f5:cc:05:
da:85:23:4d:ff:9b:61:6c:86:1e:31:bd:24:aa:9f:
5e:db:08:e9:d9:59:e7:5f:a6:af:53:f3:d8:7d:54:
3d:5a:f4:f1:93:51:98:81:95:42:67:52:51:c6:2c:
5f:50:ed:38:f0:0a:c9:b0:c4:a3:67:a8:93:0c:3d:
5d:fd:e7:07:f4:c7:4f:22:88:8b:a4:90:e9:46:a3:
e3:15:88:72:03:6f:91:42:c8:ec:24:3f:c8:b8:62:
57:93:34:c4:2f:02:9f:2f:25:7b:59:55:a7:6a:58:
db:7f:2a:4e:7d:e0:55:8c:df:29:cc:02:f3:18:95:
2e:f4:1c:9e:92:2d:36:f6:e3:73:a0:c4:c9:db:c4:
0d:6a:90:74:0e:42:f5:4b:87:67:f1:b8:e7:db:d2:
ba:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A0:4D:9F:EC:8B:45:25:19:C2:F9:69:35:0F:C5:34:AD:B9:BA:74
X509v3 Authority Key Identifier:
keyid:85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0e:f6:27:7a:30:98:d2:b8:30:8e:93:97:76:1b:00:38:02:
56:66:8a:31:5c:e1:38:ae:43:8a:5a:20:5d:d2:7a:d9:9e:6c:
7f:5d:50:af:0d:a1:e6:35:5f:ad:45:5e:8c:95:a9:6d:22:c1:
94:fd:0b:0e:ff:10:a1:42:e0:47:94:fc:0d:d1:cd:4d:e4:0f:
3f:69:20:d4:6b:23:9c:57:72:ba:7b:4a:03:9c:fb:33:f5:0c:
67:99:81:8b:6c:ce:ba:ca:18:6d:50:ad:e8:15:aa:c8:55:0e:
8d:bb:54:82:64:8d:d8:ae:15:3c:b6:78:33:6c:f7:2d:65:a2:
bd:46:c1:6d:12:20:3f:75:e6:a2:16:c6:8b:c2:2f:44:3e:21:
34:86:d5:30:be:ea:cf:9b:be:56:14:d0:2d:5f:47:b1:bd:8a:
ff:82:e8:4f:4b:f3:22:51:24:e3:b3:a0:8b:d4:43:7b:95:d2:
fa:36:01:4c:1f:68:24:c7:99:c0:66:63:a9:4f:3e:f6:42:43:
74:f6:a8:be:11:2b:60:cd:82:67:d4:04:11:c9:af:4d:96:75:
71:bf:74:3a:f6:57:15:2d:be:9e:6a:cf:47:ab:cc:5f:89:5a:
d1:1b:81:5a:ac:2e:f3:65:36:45:68:5a:0a:0c:f8:70:bf:f1:
0a:93:2a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:51:20 2026 by rpki-client