
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
File: h1thdAzTcL1LSk9q6gqGCDiNuoo.mft (raw, json)
Hash identifier: ePoNuf164uHwdSlG0nzIAmwIeNXfyke/R2EBdFbHilQ=
Subject key identifier: 53:DA:E5:84:6B:01:86:0E:75:E2:18:88:8A:A1:E1:79:56:51:B1:19
Authority key identifier: 87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
Certificate issuer: /CN=A9125852/serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
Manifest number: 010C
Signing time: Sat 19 Sep 2026 06:08:40 +0000
Manifest this update: Sat 19 Sep 2026 06:08:39 +0000
Manifest next update: Sat 26 Sep 2026 06:08:39 +0000
Files and hashes: 1: h1thdAzTcL1LSk9q6gqGCDiNuoo.crl (hash: oCy2C9HgaeCuC1581Fd1+XnTXGFOPo9w0wXdPLWO314=)
2: 36E3783A1BA311F0985A7C2DC4F9AE02.roa (hash: XUeovlZ/4oeHJvRX/WJ4baIyTmKgtfV6QNue3wAaFAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125852, serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Validity
Not Before: Sep 19 06:08:39 2026 GMT
Not After : Sep 26 06:08:39 2026 GMT
Subject: CN=6aae26e8-eb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:a0:d0:2f:91:57:1a:1b:1a:d1:5e:65:f1:
4a:a0:9b:28:90:f1:af:fc:d1:61:9b:0e:42:70:20:
91:dd:32:bc:68:04:f8:32:ee:a1:ee:9e:de:e9:ec:
c4:6c:fa:1b:f4:5a:7b:ba:55:98:24:57:3b:91:a6:
5f:b3:9f:4a:5f:e9:04:50:60:a1:04:37:bb:c1:bb:
a6:28:60:ef:83:dc:41:a6:ed:35:a3:1f:ee:f6:fd:
a9:74:f7:a4:5f:fe:d9:fe:b9:f1:d9:f2:80:80:0b:
7e:c7:f4:64:d9:24:f8:8e:a5:bc:71:63:8b:27:47:
3b:ac:40:39:ee:db:5d:b7:06:80:0a:88:45:ac:f6:
69:22:a9:7a:b9:76:51:63:19:2a:f8:8d:05:2b:95:
51:ab:bc:e7:81:e8:38:e4:17:1a:14:ea:cc:73:18:
12:ca:b8:ce:93:12:e2:91:d6:93:c2:98:eb:fc:42:
5c:81:58:0c:8c:1e:bf:55:c0:1d:92:fc:d2:88:df:
65:4f:e1:ce:cf:d3:6f:cc:9d:7e:15:7d:3c:6b:91:
7c:51:39:cc:07:69:a0:7b:4d:7b:c0:b9:df:3c:e5:
41:af:52:de:57:a7:c4:36:d7:29:d6:b0:f9:07:f1:
f5:e6:75:9f:d6:3e:d8:9a:88:6f:ff:3f:da:fe:ed:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DA:E5:84:6B:01:86:0E:75:E2:18:88:8A:A1:E1:79:56:51:B1:19
X509v3 Authority Key Identifier:
keyid:87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:dd:8f:74:65:dd:94:07:b8:1a:a5:60:a0:7b:0e:de:2c:1c:
16:64:bd:f9:66:16:42:cc:90:68:4f:16:84:df:5e:9a:a9:ed:
1b:e6:ca:80:4e:f7:f3:d4:c6:cf:52:7f:ee:20:fc:c5:43:6a:
3e:e7:6b:f6:3e:17:03:25:91:69:0f:a0:e5:75:10:de:17:3e:
65:10:fd:b6:bf:f8:64:f9:09:13:f3:43:ae:ce:da:e8:f2:19:
ce:68:ce:33:c0:10:1b:c9:fb:50:ca:43:8b:12:7f:73:f2:5e:
88:a8:e9:f8:01:bd:31:94:09:3b:0e:b1:c7:63:82:bf:6c:50:
91:f4:23:f7:11:31:45:ab:3b:09:c3:54:90:ab:cb:6e:9a:c5:
cd:63:de:84:29:82:d9:5a:0b:89:83:aa:cc:6d:0b:b2:a3:0a:
af:32:9f:05:6f:c4:ad:72:86:20:99:40:75:37:a8:5a:79:41:
20:93:95:d4:1b:e6:d1:3f:f1:91:60:34:0a:84:16:5a:7a:df:
20:2e:f6:94:ed:23:31:76:63:84:32:fc:8f:54:4d:c5:f6:be:
f2:91:ab:1f:56:b8:47:1e:f8:43:72:f0:68:96:5a:14:52:6e:
96:b4:43:72:57:5a:04:1d:32:16:b8:6b:3c:84:0b:db:8c:c4:
b8:3c:cb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:21:33 2026 by rpki-client