
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
File: h1thdAzTcL1LSk9q6gqGCDiNuoo.mft (raw, json)
Hash identifier: EVA66RPeyJ822RiBXcS9NBqc3pLVxRsUCtSErmtNK5I=
Subject key identifier: EB:D5:54:DE:79:A0:99:4E:A9:98:88:5C:7E:CE:93:B3:2F:55:FA:CC
Authority key identifier: 87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
Certificate issuer: /CN=A9125852/serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
Manifest number: A4
Signing time: Sun 01 Mar 2026 08:33:32 +0000
Manifest this update: Sun 01 Mar 2026 08:33:31 +0000
Manifest next update: Sun 08 Mar 2026 08:33:31 +0000
Files and hashes: 1: h1thdAzTcL1LSk9q6gqGCDiNuoo.crl (hash: iMR4LTztSY8Zse+cRJObta0+8tlKoitpOpOC1vjpVAU=)
2: 36E3783A1BA311F0985A7C2DC4F9AE02.roa (hash: w9x6ex+eugipzBiKV6t1m+6mQ2AuaVk/w2nbhUiC89E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125852, serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Validity
Not Before: Mar 1 08:33:31 2026 GMT
Not After : Mar 8 08:33:31 2026 GMT
Subject: CN=69a3f9dc-d162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:a5:6e:6b:3f:0c:6d:35:ad:e4:06:74:3e:
ec:49:e1:af:ed:76:94:8c:ab:f1:e6:94:30:3f:25:
ae:76:93:cb:e1:53:a9:d4:6d:f1:df:d3:fa:8f:eb:
63:3b:46:9d:29:3a:98:b9:bb:2c:bd:cf:95:7a:e1:
a0:51:9b:07:17:5f:32:e8:f6:63:68:65:46:03:d8:
b0:68:82:78:28:f3:9e:09:4b:66:22:9e:b3:44:63:
d0:f3:4a:ad:5f:6f:ae:02:f4:d0:b2:91:19:fb:0f:
4e:9f:d4:35:96:89:77:de:8c:95:49:6f:b8:75:ad:
b7:88:71:48:af:08:f0:25:52:ee:07:3f:04:85:7b:
04:17:9c:42:e3:7d:4d:9d:04:1f:f2:ff:d8:29:ac:
c4:2d:19:2c:1b:94:9f:32:e9:2c:f7:54:13:82:29:
e9:ed:3e:ca:b0:57:fa:80:c8:12:56:07:de:a7:69:
59:d9:97:50:ad:25:16:d5:a4:2f:ad:9a:81:8d:bf:
02:50:b4:d7:c8:3f:9f:ad:01:ce:af:e0:6f:76:14:
69:d1:cb:8d:00:04:03:0b:db:48:c9:c9:b9:5e:89:
7b:cf:e6:62:d9:75:06:8d:2b:cc:89:3c:3f:a2:46:
bc:09:bc:e4:bc:95:7f:66:32:8d:c7:c2:4e:b0:3b:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D5:54:DE:79:A0:99:4E:A9:98:88:5C:7E:CE:93:B3:2F:55:FA:CC
X509v3 Authority Key Identifier:
keyid:87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2b:49:b4:bf:6b:29:7a:0d:f6:95:50:ab:e8:a2:c5:59:91:
d1:59:10:4e:23:7f:03:99:9d:4b:e0:83:c5:5c:f0:4d:f0:02:
30:ca:48:03:59:79:2f:f7:87:eb:df:79:69:34:e5:f5:14:39:
0b:0c:2c:3e:aa:42:59:7b:9c:4c:ee:f6:87:56:a1:d5:0d:36:
6c:05:b4:e9:6c:82:c5:64:be:30:7b:9b:ae:3f:0d:f5:38:90:
7d:10:9c:23:c7:6b:5c:11:5e:7e:3f:2d:f1:ec:ee:41:11:84:
14:6c:68:22:d6:3d:ea:52:26:b6:ab:99:18:56:70:28:f6:ab:
8c:9c:c3:05:9a:5c:5b:6a:4e:cc:ac:dd:e0:56:5d:0e:e9:c4:
cf:e2:4b:c7:57:e3:7b:bf:69:bd:9f:4d:fd:78:b3:f9:7e:3f:
6f:67:7d:31:90:67:54:bc:03:93:dd:32:53:e4:a3:a5:85:fb:
b4:15:32:fc:b8:5e:e3:4e:4d:85:f0:fa:15:4b:26:21:d4:fe:
79:cf:2c:46:de:c9:a2:ef:82:11:a9:a0:98:a8:ae:c3:85:5a:
f2:7b:9b:a7:36:ac:50:d7:75:3b:80:7d:dd:31:1e:c2:05:82:
aa:be:ba:ca:57:b6:d8:f4:67:b1:45:39:79:6b:0f:fa:fb:82:
22:da:d7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:27:03 2026 by rpki-client