
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
File: Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json)
Hash identifier: MqEut2piH/YVAi5Mwbb40vvHwEQSySnbod/QaitJafU=
Subject key identifier: 17:66:24:08:C9:96:E4:C0:AD:81:B8:F0:38:55:BB:94:DC:AC:22:65
Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
Certificate issuer: /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
Manifest number: 027D
Signing time: Wed 07 Oct 2026 02:22:42 +0000
Manifest this update: Wed 07 Oct 2026 02:22:41 +0000
Manifest next update: Wed 14 Oct 2026 02:22:41 +0000
Files and hashes: 1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: nt+o/tY0TY4MzQawm75bUW+OQOT+t0goZ1omA+A9NAo=)
2: C369BA98260D11F082934618C4F9AE02.roa (hash: 0vSjVDuwcme5SYhnnHj+3Jurf17kU0PfDgiNk0coHnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Validity
Not Before: Oct 7 02:22:41 2026 GMT
Not After : Oct 14 02:22:41 2026 GMT
Subject: CN=6ac5acf1-efeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:8a:d4:71:0b:7b:d8:29:e0:67:b1:d8:f6:
da:59:07:0e:22:b6:20:ca:00:31:6f:7a:bb:ac:6b:
6b:aa:24:00:44:1e:6b:c6:35:02:ef:eb:26:e9:d4:
c1:b5:09:0b:e6:89:ed:7c:7c:f8:28:78:28:73:72:
cd:f8:50:58:3a:dc:65:57:f0:28:ed:49:dc:c4:81:
ee:fa:e3:45:ae:a5:98:db:3a:5b:ba:33:08:cc:01:
b7:0f:da:52:b4:38:7d:56:d0:69:80:fa:3a:5b:32:
d2:75:5c:8d:8f:1f:4b:c6:97:6e:1b:47:85:29:77:
f9:84:f0:5b:04:e4:c4:c4:ad:d9:c9:23:78:0a:13:
af:20:cb:a8:c9:ec:fb:b6:87:0f:18:eb:49:00:35:
3a:8a:46:d0:2d:3e:c0:bd:98:82:70:77:3a:4a:33:
98:7c:e2:50:24:39:b6:c6:f1:0e:c1:c1:d6:fb:9e:
04:6d:be:16:a6:d7:d1:f1:c5:5d:4b:a9:36:d6:71:
ea:b6:28:63:9e:1b:b5:42:51:6b:91:f1:45:fb:2c:
8d:0c:5a:99:2e:71:e9:fb:75:b3:2f:50:ae:79:a1:
b5:95:bb:72:09:a7:4b:88:41:82:0d:c8:3f:45:22:
32:ad:d7:da:32:ee:5e:18:77:de:83:df:09:fb:30:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:66:24:08:C9:96:E4:C0:AD:81:B8:F0:38:55:BB:94:DC:AC:22:65
X509v3 Authority Key Identifier:
keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:09:8b:fa:61:8c:0e:f3:a7:58:71:80:9d:ae:63:a0:3f:6e:
32:b2:51:bb:15:ce:57:1b:f0:a7:46:68:51:dd:50:51:77:7a:
4e:bf:6e:43:9a:e8:4d:74:27:3c:34:ac:9d:19:ab:41:dc:41:
5d:23:cd:14:bf:4b:03:3f:3f:34:79:11:6a:6b:75:8b:4e:95:
9c:46:36:6c:b4:95:99:de:43:8b:e8:0a:25:c9:c3:0e:61:22:
e2:fc:b7:04:a2:a7:0a:f2:d9:e9:24:6e:4f:0d:37:94:b9:c1:
b0:e8:d0:7b:5e:90:3c:99:8d:d7:2e:5c:97:04:82:5f:da:96:
90:3b:a2:df:ca:29:bc:b3:9e:e0:d5:1a:e3:75:23:c6:7d:3b:
9a:5f:d2:fa:dc:52:a4:46:da:bb:c4:e3:bd:7a:00:af:50:20:
ed:9f:13:c1:79:22:13:f2:81:e1:62:84:a5:a0:47:29:72:63:
69:70:d0:4d:df:95:07:97:23:65:17:f0:a7:b1:f4:a7:4e:01:
7f:f2:88:7a:52:36:18:f3:f2:66:41:a0:6a:a2:7d:06:b8:b6:
2b:91:5c:86:62:c0:8a:8c:67:3d:5b:b0:e0:1f:a4:8f:b7:cf:
06:62:a9:52:c0:72:eb:4a:92:9e:7d:96:75:2f:42:25:b6:aa:
dd:7a:65:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:54:28 2026 by rpki-client