
$ rpki-client -vvf rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
File: HaAa_AiIyqYXHgoOdBz8kE7S328.mft (raw, json)
Hash identifier: 1XgIxn1s5yHc/AkvShW5ggQ7l76cw9X9m8USgSi5D8M=
Subject key identifier: 84:CF:BD:3B:CC:D8:36:6B:49:37:74:29:BD:04:C3:F1:84:07:D9:A6
Authority key identifier: 1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F
Certificate issuer: /CN=A91352C6/serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F
Certificate serial: 0999
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
Manifest number: 0991
Signing time: Fri 12 Jun 2026 20:02:28 +0000
Manifest this update: Fri 12 Jun 2026 20:02:27 +0000
Manifest next update: Fri 19 Jun 2026 20:02:27 +0000
Files and hashes: 1: HaAa_AiIyqYXHgoOdBz8kE7S328.crl (hash: gWxNuBGaDx9YO9VZdTqWvR+xYzpw82hz2mDaRq/XjYA=)
2: 939AAE78B1D511EA8E3DAE1CC4F9AE02.roa (hash: V81dD3x6Xu9JhvlyqWC7cihyerGfmzPLwxY1DFEcyJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl
rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2457 (0x999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91352C6, serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F
Validity
Not Before: Jun 12 20:02:27 2026 GMT
Not After : Jun 19 20:02:27 2026 GMT
Subject: CN=6a2c65d4-665a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:53:8e:38:02:91:3a:06:f1:98:18:80:67:f4:
15:cd:dc:ee:6d:27:a7:1d:4f:bc:ed:70:b5:e3:34:
71:23:38:15:7b:aa:22:1d:4c:24:85:5b:c7:ce:ef:
ab:4b:cd:46:78:5a:32:69:a9:c0:9f:95:9b:df:6d:
00:14:ae:8c:29:fd:bd:cd:39:c9:77:c1:d4:92:87:
f7:c1:ab:e5:19:c0:ce:78:17:15:49:b6:99:87:71:
61:8c:eb:95:ea:23:92:08:1b:ef:6c:2d:1d:46:5c:
02:cf:05:b2:fc:f4:3d:43:0c:d4:a4:0f:ab:06:2e:
d0:53:33:8a:ef:a1:e5:a7:30:b4:45:64:b3:eb:f8:
90:cc:1f:1e:c0:23:8b:f9:6d:95:ba:6e:3a:2e:cf:
84:be:c7:57:db:88:e3:22:24:8a:9d:7e:87:22:af:
18:f8:1a:b4:48:55:e8:7b:fe:d9:49:f0:99:4d:75:
90:5c:e4:22:8b:25:c3:0a:6b:28:0e:ad:cb:b8:69:
e3:77:4f:44:6e:9e:6c:b2:94:58:63:da:19:38:78:
17:a0:f2:e1:6e:b9:f2:ba:36:2b:fc:94:5b:ab:70:
d7:00:56:64:66:06:fe:4c:4f:61:e9:bf:dc:6d:a0:
b7:33:e8:5a:ac:ba:f3:02:e2:f7:8a:fb:10:58:a3:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CF:BD:3B:CC:D8:36:6B:49:37:74:29:BD:04:C3:F1:84:07:D9:A6
X509v3 Authority Key Identifier:
keyid:1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fc:f9:64:7d:e5:a3:b7:82:0b:29:04:c2:cf:25:92:32:29:
0b:5c:57:1d:42:fe:9c:4c:83:1a:5d:f7:1f:37:fe:2d:e8:de:
27:de:0a:7d:4b:c7:6a:56:22:85:a1:4a:e5:a0:53:f2:06:9f:
57:59:94:39:54:9e:bf:97:68:65:74:db:dc:cc:3b:36:88:26:
70:6c:6d:0f:0e:8f:c3:8d:15:fa:4b:50:1a:8c:32:5a:b1:82:
04:00:9f:cd:93:9c:57:17:e6:37:b2:e2:f2:4f:72:59:29:03:
b9:62:93:b6:ff:07:a1:fc:87:77:2f:c1:ae:fa:7e:9b:4d:8f:
af:21:2b:f8:4d:ab:9b:e9:b5:ca:2a:85:b7:93:1c:5a:a4:26:
a2:5c:8e:5b:59:71:ea:c6:36:09:ac:0f:ed:46:ac:68:de:f8:
83:47:93:87:e4:de:da:97:8d:65:23:f9:01:a7:b6:36:1a:4c:
7c:53:79:44:eb:3a:fa:35:49:84:60:86:80:f0:18:5e:bd:a6:
07:c1:a8:03:f4:0d:19:fc:78:f1:cf:db:6b:75:e4:8d:99:55:
6f:11:05:25:f6:6a:73:d7:1b:58:8a:f5:42:3b:fa:54:26:f3:
c7:01:37:0a:c9:02:f2:90:61:53:39:0b:e6:db:f2:bf:eb:d7:
78:64:ff:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:37:21 2026 by rpki-client