
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
File: haTP570qMmoqBWITY5e3zK5eW3w.mft (raw, json)
Hash identifier: 5Q8qLqGhbp1xasZRce32c/ZtcXKizyWreUWybErTg3o=
Subject key identifier: BE:EE:52:41:98:AD:CB:05:D1:2B:79:31:71:77:20:6F:4E:51:12:67
Authority key identifier: 85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C
Certificate issuer: /CN=A912B666/serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
Manifest number: AB
Signing time: Sat 19 Sep 2026 07:24:08 +0000
Manifest this update: Sat 19 Sep 2026 07:24:08 +0000
Manifest next update: Sat 26 Sep 2026 07:24:08 +0000
Files and hashes: 1: haTP570qMmoqBWITY5e3zK5eW3w.crl (hash: ks41dnPoj3Jo+PJVwVapemKS/NYFZ34NM2FvfcHZ+iM=)
2: 44FE06BAA6F811F1B8F08DEC5511F970.roa (hash: 2Z87/Uy+52d2YFHQShGuEykOw9xNGTwytRulFs8sDYg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl
rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B666, serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C
Validity
Not Before: Sep 19 07:24:08 2026 GMT
Not After : Sep 26 07:24:08 2026 GMT
Subject: CN=6aae3898-be9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:55:8e:64:48:f6:2a:c4:f1:48:73:cd:12:d4:
37:09:5c:d2:38:6e:b2:f5:46:d3:fc:80:55:e3:e2:
84:48:36:58:1e:b1:06:b5:60:6a:d0:c9:13:ed:97:
0d:e3:fd:d0:db:e9:22:87:01:91:6a:37:f7:e0:ae:
f3:b0:5a:d6:1d:91:29:01:ea:89:24:93:3e:bd:57:
c2:83:f7:45:03:45:cb:3a:82:6f:fc:06:3f:1d:3f:
dd:0e:fc:19:9a:6f:03:63:c6:91:fd:40:79:33:ec:
34:32:d8:4e:dc:f6:75:55:a7:ea:8a:95:1f:1b:21:
e7:0a:2c:e8:69:da:07:22:03:8f:7b:03:99:12:57:
d8:2c:a8:ac:e9:66:8d:4d:48:c8:82:3f:70:c0:0e:
f7:61:a0:09:57:5f:96:92:35:dc:18:74:7a:fc:a6:
fb:36:2f:5b:62:45:2b:f0:30:51:8e:f5:8d:bc:f6:
25:0f:b3:d4:c0:15:7b:6f:d6:92:23:59:68:10:14:
1a:7d:cb:be:93:31:cb:c6:37:c9:a0:32:44:f4:12:
12:bc:91:fb:e0:25:18:e3:00:8f:f7:ae:3f:73:dd:
a9:50:eb:44:0b:4f:cc:88:0a:39:72:dc:5a:94:90:
bd:5e:dd:00:0e:b8:3e:be:ea:47:56:14:7c:94:ac:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EE:52:41:98:AD:CB:05:D1:2B:79:31:71:77:20:6F:4E:51:12:67
X509v3 Authority Key Identifier:
keyid:85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:21:c2:94:dd:68:b3:ff:67:a9:68:b3:85:44:a8:25:58:27:
fa:84:b5:cd:7d:a1:20:64:e3:5e:37:15:8f:d7:4d:06:cf:4e:
81:83:22:63:f7:20:ea:73:c9:51:b8:82:39:e5:9f:ef:24:9d:
32:50:1e:f4:7c:c6:cb:ae:3d:08:d9:72:10:3f:9d:9d:f3:99:
ff:c3:d8:12:c6:a5:59:e8:b5:5a:f9:22:20:12:a7:85:cb:01:
bf:5c:b8:74:e8:64:5a:17:2e:6c:96:66:ce:81:1b:1f:31:e1:
61:12:ae:36:f0:fb:4e:a3:8f:1d:ea:3d:f8:d6:c4:2e:eb:1b:
fc:b2:96:ae:63:d9:d2:8e:86:db:38:a3:37:1b:57:e9:1c:8c:
e4:6a:7f:f0:43:07:2f:59:37:35:78:35:f3:e8:95:f6:c7:8c:
e9:db:43:2f:fd:41:88:ed:39:07:cc:0f:3f:0f:d7:e6:cc:01:
82:2a:4b:cf:54:61:60:ef:f6:fb:ca:ce:2f:ae:7d:00:b9:e6:
ca:ad:bb:ea:fd:d9:b3:7b:56:41:0d:dc:b5:dc:67:dd:1b:83:
23:14:1a:37:f7:5b:7d:52:74:89:64:cb:6d:d8:5e:e4:c1:a2:
26:84:4a:72:b1:d0:ca:b7:ad:5b:ca:83:e5:e5:70:9e:58:44:
e9:a6:eb:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI2NjYxMTAvBgNVBAUTKDg1QTRDRkU3QkQyQTMyNkEyQTA1NjIxMzYzOTdCN0ND
QUU1RTVCN0MwHhcNMjYwOTE5MDcyNDA4WhcNMjYwOTI2MDcyNDA4WjAYMRYwFAYD
VQQDEw02YWFlMzg5OC1iZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl1WOZEj2KsTxSHPNEtQ3CVzSOG6y9UbT/IBV4+KESDZYHrEGtWBq0MkT7ZcN
4/3Q2+kihwGRajf34K7zsFrWHZEpAeqJJJM+vVfCg/dFA0XLOoJv/AY/HT/dDvwZ
mm8DY8aR/UB5M+w0MthO3PZ1VafqipUfGyHnCizoadoHIgOPewOZElfYLKis6WaN
TUjIgj9wwA73YaAJV1+WkjXcGHR6/Kb7Ni9bYkUr8DBRjvWNvPYlD7PUwBV7b9aS
I1loEBQafcu+kzHLxjfJoDJE9BISvJH74CUY4wCP964/c92pUOtEC0/MiAo5ctxa
lJC9Xt0ADrg+vupHVhR8lKy6TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL7uUkGY
rcsF0St5MXF3IG9OURJnMB8GA1UdIwQYMBaAFIWkz+e9KjJqKgViE2OXt8yuXlt8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjY2Ni85MDVCRkVGOEM5
MjkxMUYwODA5Q0YyODFDNEY5QUUwMi9oYVRQNTcwcU1tb3FCV0lUWTVlM3pLNWVX
M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2hhVFA1NzBxTW1vcUJXSVRZNWUzeks1ZVczdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjY2Ni85MDVCRkVGOEM5MjkxMUYwODA5Q0YyODFDNEY5QUUwMi9oYVRQNTcwcU1t
b3FCV0lUWTVlM3pLNWVXM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyiHClN1os/9nqWizhUSoJVgn+oS1zX2hIGTjXjcVj9dNBs9OgYMiY/cg6nPJ
UbiCOeWf7ySdMlAe9HzGy649CNlyED+dnfOZ/8PYEsalWei1WvkiIBKnhcsBv1y4
dOhkWhcubJZmzoEbHzHhYRKuNvD7TqOPHeo9+NbELusb/LKWrmPZ0o6G2zijNxtX
6RyM5Gp/8EMHL1k3NXg18+iV9seM6dtDL/1BiO05B8wPPw/X5swBgipLz1RhYO/2
+8rOL659ALnmyq276v3Zs3tWQQ3ctdxn3RuDIxQaN/dbfVJ0iWTLbdhe5MGiJoRK
crHQyretW8qD5eVwnlhE6abrwA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:31:45 2026 by rpki-client