
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json)
Hash identifier: kL/f1NuzkAhOcd1LLVucpmLaoOwvoP52FS9EVEgnAmE=
Subject key identifier: 3C:B5:66:85:A0:9F:15:2A:0A:B0:38:FE:C2:E6:F0:1A:20:5A:FB:47
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial: 0989
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
Manifest number: 095F
Signing time: Fri 12 Jun 2026 20:08:20 +0000
Manifest this update: Fri 12 Jun 2026 20:08:19 +0000
Manifest next update: Fri 19 Jun 2026 20:08:19 +0000
Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: 36rp4PbaPweadQrvOJxoLnMICzq2Bvru/KmtNLdwJTA=)
2: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: rixxFEhhporEowEcKJ0zMfY5DGdFHoWYuPowdcyFr5A=)
3: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: UJmyzSzozDENX7jF+64gEj4E6QBieKxXCaJ+JGRYbs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2441 (0x989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Validity
Not Before: Jun 12 20:08:19 2026 GMT
Not After : Jun 19 20:08:19 2026 GMT
Subject: CN=6a2c6734-9740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ac:49:fc:e6:fb:32:3a:14:7d:e9:b7:42:18:
9f:7d:f7:9b:d7:b9:0f:12:87:f9:a7:72:5c:7b:67:
81:47:94:b5:4f:0a:be:ee:e4:e0:30:f2:21:6d:eb:
80:aa:ec:f3:dc:d1:77:d7:42:85:87:18:26:8a:e1:
c9:1f:37:95:d4:c1:c6:e8:23:e5:26:01:da:74:b5:
08:57:5a:51:78:e5:7d:6a:81:84:19:4b:34:73:81:
58:f6:c3:93:37:e7:ae:61:d1:40:1c:3d:6b:c8:3a:
ae:73:45:21:a6:d9:87:3a:d1:df:56:46:fe:01:d9:
ae:38:2a:7b:98:4b:2e:00:f5:7a:89:98:94:76:7f:
6f:ff:25:c1:32:ae:af:3f:78:96:29:20:25:30:a3:
fd:ba:bc:76:61:22:dd:2f:18:41:1c:ad:53:43:5b:
e9:f4:cf:65:9d:d4:80:d5:ef:51:e8:3b:9b:36:0a:
75:1a:e2:b4:68:6e:8b:94:d0:2e:d1:20:00:83:38:
f5:28:64:e8:75:de:5f:04:3a:5d:9c:50:d0:0a:a3:
7b:8e:4a:97:9e:52:42:ae:f5:8a:47:49:c8:ad:64:
06:d5:98:2c:38:8a:a3:84:72:1a:67:0a:18:b9:0c:
f3:ab:7c:e2:f6:d8:1c:ab:7f:c6:16:45:0c:57:ef:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B5:66:85:A0:9F:15:2A:0A:B0:38:FE:C2:E6:F0:1A:20:5A:FB:47
X509v3 Authority Key Identifier:
keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:45:ea:51:ff:3c:c8:68:59:5a:91:33:2b:12:7d:95:48:cf:
00:bf:4b:1b:44:88:17:ef:fa:73:70:26:97:ed:ce:92:e4:1e:
e5:eb:0f:d2:28:61:99:21:21:26:37:28:85:67:70:fa:1e:ee:
00:2a:c1:ef:0d:5d:58:bd:1b:66:03:49:c9:65:96:de:73:e1:
46:11:99:a8:ec:3c:7c:20:84:07:f4:51:b3:f4:83:77:e4:fb:
b8:dc:b5:2f:c5:33:cc:6a:b9:a4:ce:d1:67:3c:34:67:53:9b:
33:ef:79:4e:6a:ed:41:a9:9f:fc:e8:99:03:df:a6:0f:16:7a:
9a:94:a8:7b:a9:9b:7e:fb:6f:b6:73:82:56:da:b4:fd:9f:fb:
03:f5:79:af:35:fe:0b:65:71:36:d4:26:c1:19:ab:e2:05:a3:
f3:c5:d3:b9:5c:67:79:da:c8:30:d8:b8:ae:11:b6:3f:a1:43:
fa:59:91:93:fc:42:3b:20:9e:7b:99:7a:10:42:36:87:6a:69:
2e:c0:59:17:13:23:4e:9b:07:24:85:89:f8:06:a0:24:b1:7c:
be:f0:aa:1b:5c:f5:6e:65:1e:25:ec:9d:4d:85:9a:52:18:40:
b4:e8:c1:47:ca:e9:98:45:1f:dd:99:bc:e6:67:47:d3:60:c1:
b5:5b:a2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:39 2026 by rpki-client