
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json)
Hash identifier: 01en8h5FFYCMc06mSdaL7NHTIcBWYuVWGyWCLCRnqi8=
Subject key identifier: 6A:C9:65:23:BD:82:90:6E:64:27:84:4E:5F:A4:47:4C:3F:FE:61:5D
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial: 09A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
Manifest number: 0976
Signing time: Tue 28 Jul 2026 20:25:04 +0000
Manifest this update: Tue 28 Jul 2026 20:25:03 +0000
Manifest next update: Tue 04 Aug 2026 20:25:03 +0000
Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: 4cpjHVkc3EDXh40iZd+r+dnNVloXOaU2BEyo7iihacY=)
2: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: UJmyzSzozDENX7jF+64gEj4E6QBieKxXCaJ+JGRYbs0=)
3: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: rixxFEhhporEowEcKJ0zMfY5DGdFHoWYuPowdcyFr5A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2464 (0x9a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Validity
Not Before: Jul 28 20:25:03 2026 GMT
Not After : Aug 4 20:25:03 2026 GMT
Subject: CN=6a691020-5d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b0:50:eb:a0:52:7b:ca:25:99:10:67:95:2c:
75:d2:88:60:d5:36:80:d1:bb:3a:2b:79:e0:02:32:
88:1a:a1:40:40:c5:fa:65:ef:86:d7:0d:67:90:7f:
35:9c:7b:e4:46:8c:3f:06:26:1a:fd:51:df:c4:65:
29:30:da:3a:3f:61:5e:32:bf:d3:f2:59:4f:5f:75:
19:57:7b:73:13:f2:13:8f:c0:28:06:7e:83:59:70:
33:43:b3:ce:70:56:29:9d:8c:fd:55:aa:24:83:d0:
01:6c:1a:bb:52:8d:a3:55:69:b8:49:b2:4f:66:35:
42:87:de:a0:4a:d9:51:0e:c1:5c:ff:1b:c3:42:3c:
e2:8b:1e:c6:3e:06:13:10:78:58:1e:c1:d4:bd:32:
58:8e:b8:58:13:d8:ab:b8:a7:94:bd:a3:08:cc:58:
91:0d:f9:3a:b6:09:cd:96:e1:05:14:b3:95:42:81:
4f:e7:e2:1c:f5:07:29:4b:57:3b:61:b2:77:bc:00:
fb:61:5f:8e:4a:03:a1:04:25:e1:bb:66:60:aa:54:
3c:62:7f:5e:8f:8a:8a:9a:7b:8e:e1:c9:1e:4d:1a:
00:d5:d2:68:c9:77:e0:6f:b1:fd:78:66:f0:5d:2f:
24:85:dd:f0:65:bb:8e:3e:79:47:65:d9:5d:11:f0:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C9:65:23:BD:82:90:6E:64:27:84:4E:5F:A4:47:4C:3F:FE:61:5D
X509v3 Authority Key Identifier:
keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:38:5d:8d:97:48:5e:bb:07:29:57:e4:a8:1a:23:10:c7:b2:
fb:d6:4d:63:fd:c5:7d:fe:0f:34:69:4e:0a:e3:ac:d6:cf:a2:
2b:b7:86:db:48:57:cf:77:b7:1b:3c:ca:a8:89:70:82:49:36:
ed:d0:c3:4b:1a:c5:a0:23:c9:8b:a0:27:96:b8:46:7d:db:90:
32:a3:99:b1:17:e2:f6:92:61:b2:ee:06:8a:71:ea:6b:12:63:
fe:e6:05:26:0a:58:82:e7:1b:2a:f4:73:5d:95:dc:2b:b1:eb:
66:c7:08:52:26:a4:52:a1:41:9d:c1:83:bd:d5:e8:6f:19:93:
5d:cd:45:48:53:72:fe:80:f3:6d:03:7c:63:11:ae:5f:92:61:
4f:d5:d9:3b:0b:70:bd:13:99:8f:13:9a:5e:e7:9a:7c:e5:80:
e8:6b:f8:bc:e1:d4:55:f3:94:18:1f:f4:df:ec:a0:c5:4b:60:
82:a7:76:89:e6:26:41:5b:44:9e:82:4d:0d:e2:a2:38:06:84:
42:c1:e3:2f:d8:a1:f2:59:6b:66:4b:64:8f:ec:80:5b:36:a4:
8b:ae:82:3e:03:75:cc:2d:2b:84:47:34:df:8e:72:7f:63:8d:
af:8b:a2:b3:db:50:63:d1:e1:99:86:cf:34:66:08:44:b5:a7:
2d:cd:88:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTExQjQxMTAvBgNVBAUTKDFDMEQyREJBNUFCMzZDMkY5NjcyQzE0REQ4NzdCOUVF
QTA2Q0NBQzcwHhcNMjYwNzI4MjAyNTAzWhcNMjYwODA0MjAyNTAzWjAYMRYwFAYD
VQQDEw02YTY5MTAyMC01ZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhLBQ66BSe8olmRBnlSx10ohg1TaA0bs6K3ngAjKIGqFAQMX6Ze+G1w1nkH81
nHvkRow/BiYa/VHfxGUpMNo6P2FeMr/T8llPX3UZV3tzE/ITj8AoBn6DWXAzQ7PO
cFYpnYz9Vaokg9ABbBq7Uo2jVWm4SbJPZjVCh96gStlRDsFc/xvDQjziix7GPgYT
EHhYHsHUvTJYjrhYE9iruKeUvaMIzFiRDfk6tgnNluEFFLOVQoFP5+Ic9QcpS1c7
YbJ3vAD7YV+OSgOhBCXhu2ZgqlQ8Yn9ej4qKmnuO4ckeTRoA1dJoyXfgb7H9eGbw
XS8khd3wZbuOPnlHZdldEfDa5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGrJZSO9
gpBuZCeETl+kR0w//mFdMB8GA1UdIwQYMBaAFBwNLbpas2wvlnLBTdh3ue6gbMrH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFCNC9CMTk5M0M0MEJD
MkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJDLVdjc0ZOMkhlNTdxQnN5
c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hBMHR1bHF6YkMtV2NzRk4ySGU1N3FCc3lzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTFCNC9CMTk5M0M0MEJDMkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJD
LVdjc0ZOMkhlNTdxQnN5c2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJDhdjZdIXrsHKVfkqBojEMey+9ZNY/3Fff4PNGlOCuOs1s+iK7eG20hXz3e3
GzzKqIlwgkk27dDDSxrFoCPJi6AnlrhGfduQMqOZsRfi9pJhsu4GinHqaxJj/uYF
JgpYgucbKvRzXZXcK7HrZscIUiakUqFBncGDvdXobxmTXc1FSFNy/oDzbQN8YxGu
X5JhT9XZOwtwvROZjxOaXueafOWA6Gv4vOHUVfOUGB/03+ygxUtggqd2ieYmQVtE
noJNDeKiOAaEQsHjL9ih8llrZktkj+yAWzaki66CPgN1zC0rhEc0345yf2ONr4ui
s9tQY9HhmYbPNGYIRLWnLc2Irw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:44 2026 by rpki-client