
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
File: h1thdAzTcL1LSk9q6gqGCDiNuoo.mft (raw, json)
Hash identifier: FW6TxGAVo/6Gkb3mjLRwlixsbd9W9brHwl6UrovdQ8I=
Subject key identifier: 87:21:62:69:83:B4:49:DA:72:89:46:9C:9D:14:4D:33:36:69:AA:10
Authority key identifier: 87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
Certificate issuer: /CN=A9125852/serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
Manifest number: 0126
Signing time: Mon 09 Nov 2026 05:53:35 +0000
Manifest this update: Mon 09 Nov 2026 05:53:34 +0000
Manifest next update: Mon 16 Nov 2026 05:53:34 +0000
Files and hashes: 1: h1thdAzTcL1LSk9q6gqGCDiNuoo.crl (hash: lprHs9T5TsgaOH5A9TtrZmP14l5BZeyZ2fPxnRhVqe0=)
2: 36E3783A1BA311F0985A7C2DC4F9AE02.roa (hash: XUeovlZ/4oeHJvRX/WJ4baIyTmKgtfV6QNue3wAaFAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 05:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125852, serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Validity
Not Before: Nov 9 05:53:34 2026 GMT
Not After : Nov 16 05:53:34 2026 GMT
Subject: CN=6af15fdf-6541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:12:1d:b4:f9:8a:c6:75:6f:49:ec:70:e0:
29:c4:3e:c9:1b:00:3d:f4:d0:f9:3a:e5:04:25:e9:
39:5d:aa:14:9a:95:83:1f:a7:ac:35:c1:84:af:40:
54:0c:54:1f:44:e4:9b:e9:a8:6e:cf:b1:85:c9:9c:
c8:ce:a8:99:48:a0:b0:00:7f:3c:e9:fd:4e:1a:cf:
26:0d:23:a0:76:1e:c1:f0:43:72:b2:c1:95:03:c5:
7e:b7:13:0b:b8:3c:19:23:87:a6:a6:b4:2c:91:1d:
50:53:67:b1:e0:69:4f:78:39:f5:00:1b:5f:a3:4e:
ab:1f:e1:98:96:fe:50:a8:1b:4e:00:80:dc:76:c0:
5d:2c:8b:60:b3:bc:de:91:bc:32:21:99:37:e9:36:
31:27:4d:eb:ca:54:c4:5f:27:14:62:8f:1c:9d:94:
32:75:58:fb:f9:c6:0f:a1:ee:87:e8:94:b4:ee:70:
49:f9:57:d0:56:15:5f:22:3b:63:7d:a8:d5:2c:d7:
0f:f0:5d:95:3d:0f:fa:ae:0d:33:b4:31:1d:6d:b2:
70:3c:ad:c5:3a:e9:1b:65:10:b2:79:fd:b8:0f:d6:
b8:83:0d:83:41:b0:24:18:4e:69:ad:a3:92:69:23:
59:c3:ec:07:92:0a:9c:8d:b2:f5:b7:a5:50:9f:45:
1c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:21:62:69:83:B4:49:DA:72:89:46:9C:9D:14:4D:33:36:69:AA:10
X509v3 Authority Key Identifier:
keyid:87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d8:b0:eb:9d:4f:68:cf:1a:f1:c1:a7:1d:e3:c0:21:0f:18:
fd:ab:01:d0:6f:a7:86:87:df:48:05:56:65:62:7f:ec:37:01:
e9:32:4d:14:11:a8:1f:92:2a:29:28:1a:5d:46:7a:5e:f2:50:
35:32:65:6c:64:14:00:cc:54:b0:d8:77:0b:b5:b1:54:ae:e3:
c7:af:8b:74:38:77:f9:b5:ef:60:44:04:58:de:63:f8:35:55:
06:bb:e2:0f:02:b9:3a:d0:0d:fd:10:37:b8:ad:ac:f3:93:79:
12:87:7c:f2:24:7b:1e:03:a2:23:4c:64:e9:a1:3f:0b:fa:2f:
19:e3:41:31:2f:3a:c7:d9:98:8c:d5:18:0e:a1:93:d1:9e:b1:
43:7d:ee:d3:b2:8e:40:fd:cc:27:7d:0a:59:6f:f2:c2:a6:cd:
1e:dd:58:18:23:55:07:b8:15:06:50:08:23:50:39:60:b1:a8:
0f:c2:a3:34:b6:62:18:ab:9c:97:87:61:57:0e:2e:fc:a4:c9:
3d:8e:b2:9d:10:1b:fd:89:07:d3:5d:61:f1:b1:14:a0:0b:58:
88:d9:fb:33:54:fa:c2:f8:9c:ae:9e:cf:7d:97:a4:a2:fa:bb:
72:fd:94:2d:d2:7e:b5:b5:f4:72:64:5e:d6:8e:b1:44:80:c8:
84:86:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:36:29 2026 by rpki-client