
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
File: haTP570qMmoqBWITY5e3zK5eW3w.mft (raw, json)
Hash identifier: qEkwuI1OZJ/haYMZanjsMuq5F0K7j5w9tv/0xzZWMzM=
Subject key identifier: 8E:38:39:15:57:0F:17:14:BF:A7:01:6A:75:36:4B:43:E4:85:A7:94
Authority key identifier: 85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C
Certificate issuer: /CN=A912B666/serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
Manifest number: 55
Signing time: Fri 17 Apr 2026 07:59:18 +0000
Manifest this update: Fri 17 Apr 2026 07:59:17 +0000
Manifest next update: Fri 24 Apr 2026 07:59:17 +0000
Files and hashes: 1: haTP570qMmoqBWITY5e3zK5eW3w.crl (hash: xgQoeSQ1sRBvpcbq4PfiJ3Acc87pfK+ssv602XikkXs=)
2: 9B102290335311F18C88E016C7833773.roa (hash: lIO5/3GEwtfbl4R3Ou4BIo7pd80hB20CBR/TfnNawX4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl
rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B666, serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C
Validity
Not Before: Apr 17 07:59:17 2026 GMT
Not After : Apr 24 07:59:17 2026 GMT
Subject: CN=69e1e856-ad74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:22:e6:c7:61:31:94:f5:7b:ff:9c:0d:ba:
7e:30:14:35:33:59:7b:48:b5:d9:6a:98:01:69:19:
d9:f5:73:f5:0d:2d:0a:23:5d:1e:7d:2d:d8:54:dd:
b0:fa:98:37:a0:33:dc:ab:2a:5f:da:be:3d:4c:9f:
27:54:a0:3f:57:aa:87:1b:6f:8b:1a:fc:ab:0f:24:
9c:b9:00:9d:56:7e:66:ca:b1:c1:0c:bc:d1:b0:45:
cd:b8:08:24:97:c5:66:a6:85:f1:0f:59:46:d9:8a:
d4:6d:5c:ed:0c:70:de:3e:f8:e2:a0:5c:56:e8:bc:
a4:d4:bc:64:7b:6b:62:99:31:60:1f:89:96:7a:42:
88:93:05:54:d9:cb:f3:de:9b:ec:fc:26:f6:88:80:
a4:c9:22:c0:77:83:c9:9c:08:75:fd:25:6e:60:c8:
85:a2:bb:16:e1:cb:54:51:9b:fc:4e:56:d1:55:af:
82:86:48:9d:7b:0a:1f:c6:c5:69:b7:35:3e:e6:e9:
a9:32:7a:0c:cf:c1:2e:d0:e1:55:07:74:07:89:a3:
ee:c3:02:c0:23:84:d1:d3:8b:ab:83:b5:7a:80:9e:
07:f6:70:f6:7b:63:95:c0:88:1b:67:c5:62:27:50:
5a:81:02:a4:7b:8c:47:7c:8b:ec:8d:a0:ac:f5:c4:
21:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:38:39:15:57:0F:17:14:BF:A7:01:6A:75:36:4B:43:E4:85:A7:94
X509v3 Authority Key Identifier:
keyid:85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:fd:31:43:c5:70:53:16:53:a0:3d:f6:b4:6f:3b:84:83:49:
bc:12:75:fb:13:d0:15:f8:bf:ea:c6:88:c5:24:55:58:cf:54:
f3:94:b6:cd:8c:82:7d:67:d0:30:c4:05:26:82:4c:fe:34:85:
12:23:d1:15:73:11:11:83:be:15:49:9a:59:25:47:2e:89:44:
a9:c2:2f:63:18:f0:af:b5:d5:1e:ec:6f:8d:f8:38:7b:03:a9:
33:ad:07:4e:eb:a3:d3:81:0b:04:44:1d:3e:35:e1:3e:1d:62:
62:86:b2:c7:84:63:eb:56:c5:fc:0b:c5:74:e5:42:2f:9e:57:
a7:e6:2e:1f:35:47:30:b7:2b:76:af:93:74:a3:ef:63:23:1a:
e4:47:6c:5c:9b:51:33:75:47:76:87:46:6e:f4:b7:87:91:89:
c2:8b:ce:d2:43:ac:65:fc:b0:cb:3d:0e:dc:b4:93:20:80:44:
f8:2d:12:56:bf:f2:9f:a6:5b:bc:c2:2c:65:a0:e7:49:79:a3:
08:98:ad:70:f7:c3:5e:25:36:84:7e:a6:e7:97:b2:b5:fb:af:
9b:93:97:28:8b:c5:88:64:aa:f1:08:63:0c:97:ce:ff:f6:b6:
e2:e1:47:36:7c:70:df:52:5e:f9:ff:99:08:13:4b:3f:2d:4a:
96:d6:b8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:31:21 2026 by rpki-client