
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json)
Hash identifier: s7U6Y8MG79IZGxar3quOwvEwhR2mTcT0ZGGpwMbj2hE=
Subject key identifier: 41:58:EF:78:34:51:47:8A:BA:57:D4:BA:55:75:C4:56:CE:DE:B5:62
Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4
Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
Manifest number: 0125
Signing time: Sun 01 Mar 2026 06:40:25 +0000
Manifest this update: Sun 01 Mar 2026 06:40:25 +0000
Manifest next update: Sun 08 Mar 2026 06:40:25 +0000
Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: zLMfsnf4mjU1KQy+f3bjrRu8S/mPwa4CZJjkQyRtOMM=)
2: 06F73C70ABD011F0977C9F10C4F9AE02.roa (hash: qVJeghg9xFTUN1CD6PkiZIjv0lu5fKKjik0h1AgrzM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl
rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4
Validity
Not Before: Mar 1 06:40:25 2026 GMT
Not After : Mar 8 06:40:25 2026 GMT
Subject: CN=69a3df59-7457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:05:1e:1e:a5:65:49:ed:e6:98:b9:4c:9e:0e:
7c:81:2a:c4:95:ce:49:4d:37:5c:d2:c8:fb:95:68:
72:a6:b8:15:f2:e3:79:a5:e6:26:7b:c3:b3:d4:d4:
e3:ab:c5:e7:6f:58:7d:2a:14:57:bc:ec:b3:88:62:
36:5e:79:dd:0f:0e:1b:5d:2b:3d:5b:4b:5a:ab:58:
49:33:82:73:e8:c1:90:c2:bd:23:1f:72:4a:32:be:
c9:16:54:eb:ed:44:01:9a:61:a1:98:fd:d8:8b:ab:
e4:6a:d9:c3:e4:bc:00:49:e9:9c:57:49:af:09:da:
c5:9b:00:70:84:a8:c6:1d:6d:76:3b:b5:bc:99:71:
36:d2:dc:4a:72:ce:a0:37:a0:cb:81:2a:cd:6c:a2:
47:ea:f0:a4:8f:0c:df:01:35:a8:25:78:32:fb:60:
fd:72:a1:a0:c8:45:61:1f:89:ce:c8:6f:78:7a:9e:
61:38:21:37:33:2c:b8:49:90:fa:53:06:eb:c9:0d:
f0:5f:6f:e9:d1:e6:11:58:b4:41:51:74:c9:0b:46:
a1:dc:10:73:35:81:ac:81:6f:d3:13:58:93:fc:f1:
97:aa:d4:fb:20:5b:05:11:90:1b:69:c2:78:c2:ee:
15:b2:6b:f1:93:33:b4:4c:26:dc:ee:a2:39:df:14:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:58:EF:78:34:51:47:8A:BA:57:D4:BA:55:75:C4:56:CE:DE:B5:62
X509v3 Authority Key Identifier:
keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:3b:8e:41:17:91:df:46:c2:1b:06:29:a6:bb:4a:9f:6f:83:
bb:f6:7c:67:42:7c:c0:35:fc:80:e6:7e:66:e6:06:b2:61:7d:
cf:55:bd:ae:78:6a:3d:9c:c3:dc:9e:d0:6d:47:f1:a7:9f:6d:
07:c1:41:18:7d:ff:f4:3a:a0:9c:cc:44:02:b6:58:24:90:94:
61:a4:67:22:06:92:6b:bc:0e:84:f8:c4:d1:f3:1d:3e:0c:b4:
0c:84:84:8f:15:ad:b4:fd:63:14:26:0c:6e:a9:d2:24:1d:1c:
50:a2:ac:39:52:db:85:59:1e:fe:91:69:85:56:9a:79:2f:08:
e1:57:ba:c4:b9:c9:77:22:8c:96:4d:6d:d3:3a:7b:c3:c9:01:
86:f1:40:66:7e:cd:1b:ee:0b:9f:5f:02:31:60:fb:1d:2c:b0:
06:25:6e:0e:34:c4:66:cd:ef:e9:11:7a:bf:d0:a5:f3:16:13:
5b:cc:0c:57:fc:39:97:27:ec:2b:48:b2:2c:f3:d2:be:ec:55:
b8:69:50:e6:a3:ea:5c:7a:0a:2a:2b:c8:00:cb:d4:65:78:18:
e6:15:a2:7f:fd:32:de:56:82:1e:f9:d5:4d:39:8a:ed:1a:6a:
7a:e8:7b:20:af:11:ef:be:d9:75:38:6c:7b:a9:67:1c:39:de:
7b:7d:18:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:24 2026 by rpki-client