
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
File: haTP570qMmoqBWITY5e3zK5eW3w.mft (raw, json)
Hash identifier: RNPMB4Wui2o6hrZGMMsELaxgEBHkv4++JBmc6GdhB6o=
Subject key identifier: 9C:80:A8:5A:9B:1A:DC:23:39:0B:E4:49:5A:98:EB:81:7F:4F:70:6A
Authority key identifier: 85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C
Certificate issuer: /CN=A912B666/serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
Manifest number: 8D
Signing time: Mon 27 Jul 2026 09:54:15 +0000
Manifest this update: Mon 27 Jul 2026 09:54:14 +0000
Manifest next update: Mon 03 Aug 2026 09:54:14 +0000
Files and hashes: 1: haTP570qMmoqBWITY5e3zK5eW3w.crl (hash: 09k114RTiQqP/hvRzW/8VhuAZvdqHV2E7Ri6hA3e50A=)
2: EE9FEF746EC411F198B3A32068A30FBC.roa (hash: 2tzDgSkB399hYZeTSxJR/xvSzXSmkIZZcCoRKC4gjsE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl
rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B666, serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C
Validity
Not Before: Jul 27 09:54:14 2026 GMT
Not After : Aug 3 09:54:14 2026 GMT
Subject: CN=6a672ac7-a479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:dd:60:b9:8b:5c:ff:0b:93:3e:9e:d9:0c:
76:ac:2d:d0:42:f6:34:c6:04:bf:cc:e1:91:94:60:
d0:b1:ff:f2:ab:1c:71:d9:8e:17:2d:11:45:e6:b1:
1c:08:53:1e:72:15:30:81:a7:1f:bc:38:ad:37:e5:
2f:5d:a7:dd:47:fa:51:82:d6:ac:c4:19:2d:dd:01:
f2:3d:01:cb:05:1b:d9:75:9a:9e:d0:bb:ed:28:61:
a0:cd:67:c0:b4:4f:87:b6:00:94:c6:8d:0b:d2:b2:
8c:b4:eb:06:d6:b8:72:b4:cc:d2:3c:eb:81:e5:43:
34:31:49:a2:eb:2c:01:50:c8:ed:a6:db:c8:e8:8c:
8b:f9:2b:6d:b0:32:bb:28:2e:4b:9c:38:07:35:7a:
9d:ba:98:4d:eb:cc:2b:ac:ed:a8:6e:ad:a2:6e:fb:
6d:b3:20:03:8b:e5:f9:99:80:c8:cb:3e:75:33:c3:
33:40:3c:1d:3d:9b:17:74:23:1e:ff:64:95:9f:9b:
80:c4:f9:74:5a:83:85:11:be:0a:81:65:e9:47:08:
a4:ea:c6:ea:c4:55:c5:59:f9:56:29:6b:d2:2d:7a:
0d:33:91:91:64:60:63:ce:75:eb:be:c1:17:0e:0f:
db:6a:e8:ff:2f:28:84:dc:02:53:74:98:a5:46:f8:
22:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:80:A8:5A:9B:1A:DC:23:39:0B:E4:49:5A:98:EB:81:7F:4F:70:6A
X509v3 Authority Key Identifier:
keyid:85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:6c:ea:76:60:fd:1a:b0:c4:2e:5d:81:c9:17:cb:b7:73:d1:
91:4b:81:a8:30:bc:a0:e6:bf:20:40:65:c0:c3:74:09:26:8d:
ba:44:6f:d3:a7:82:19:05:bb:1e:f6:1a:f6:53:a7:92:de:5a:
fd:6d:9e:e9:c2:0d:e6:0e:cf:b5:3a:27:c2:60:bf:34:7e:7a:
07:f8:8f:62:dc:05:d7:2f:c2:25:a0:ad:cd:49:18:db:94:2c:
00:a3:51:ab:27:12:3e:f4:a7:7b:ab:38:fc:18:96:99:99:86:
45:7a:3a:1a:b4:9d:72:e0:45:6e:a4:73:a9:93:24:17:9d:2d:
db:e0:46:c1:66:b3:09:a0:a3:d9:5d:ae:88:c0:b5:6c:b6:82:
19:ae:08:b9:37:96:a0:8c:36:09:c9:63:63:59:f1:03:a5:81:
0d:ac:0c:fc:ee:d0:d7:fe:3b:5d:83:a0:58:83:ea:27:a7:83:
bd:5b:4c:c8:31:94:9a:b6:09:1f:49:eb:a0:94:23:a4:33:c2:
2c:95:e8:bf:25:fd:c8:7e:d3:41:bd:20:9e:93:43:8d:b9:6e:
43:2f:1f:f4:7e:33:c3:48:49:74:7b:46:6a:9d:e7:a6:52:a2:
4d:cd:20:47:a1:a7:03:77:16:b7:a4:74:e7:e4:92:13:2e:b1:
e6:cb:c5:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI2NjYxMTAvBgNVBAUTKDg1QTRDRkU3QkQyQTMyNkEyQTA1NjIxMzYzOTdCN0ND
QUU1RTVCN0MwHhcNMjYwNzI3MDk1NDE0WhcNMjYwODAzMDk1NDE0WjAYMRYwFAYD
VQQDEw02YTY3MmFjNy1hNDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuwndYLmLXP8Lkz6e2Qx2rC3QQvY0xgS/zOGRlGDQsf/yqxxx2Y4XLRFF5rEc
CFMechUwgacfvDitN+UvXafdR/pRgtasxBkt3QHyPQHLBRvZdZqe0LvtKGGgzWfA
tE+HtgCUxo0L0rKMtOsG1rhytMzSPOuB5UM0MUmi6ywBUMjtptvI6IyL+SttsDK7
KC5LnDgHNXqduphN68wrrO2obq2ibvttsyADi+X5mYDIyz51M8MzQDwdPZsXdCMe
/2SVn5uAxPl0WoOFEb4KgWXpRwik6sbqxFXFWflWKWvSLXoNM5GRZGBjznXrvsEX
Dg/bauj/LyiE3AJTdJilRvgimwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJyAqFqb
GtwjOQvkSVqY64F/T3BqMB8GA1UdIwQYMBaAFIWkz+e9KjJqKgViE2OXt8yuXlt8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjY2Ni85MDVCRkVGOEM5
MjkxMUYwODA5Q0YyODFDNEY5QUUwMi9oYVRQNTcwcU1tb3FCV0lUWTVlM3pLNWVX
M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2hhVFA1NzBxTW1vcUJXSVRZNWUzeks1ZVczdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjY2Ni85MDVCRkVGOEM5MjkxMUYwODA5Q0YyODFDNEY5QUUwMi9oYVRQNTcwcU1t
b3FCV0lUWTVlM3pLNWVXM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANmzqdmD9GrDELl2ByRfLt3PRkUuBqDC8oOa/IEBlwMN0CSaNukRv06eCGQW7
HvYa9lOnkt5a/W2e6cIN5g7PtTonwmC/NH56B/iPYtwF1y/CJaCtzUkY25QsAKNR
qycSPvSne6s4/BiWmZmGRXo6GrSdcuBFbqRzqZMkF50t2+BGwWazCaCj2V2uiMC1
bLaCGa4IuTeWoIw2CcljY1nxA6WBDawM/O7Q1/47XYOgWIPqJ6eDvVtMyDGUmrYJ
H0nroJQjpDPCLJXovyX9yH7TQb0gnpNDjbluQy8f9H4zw0hJdHtGap3nplKiTc0g
R6GnA3cWt6R05+SSEy6x5svFZQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:20:12 2026 by rpki-client