
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
File: h1thdAzTcL1LSk9q6gqGCDiNuoo.mft (raw, json)
Hash identifier: R/YRj3Et5UPSEUmOgPx6CDOo0CFdggZfenUmdLTglEA=
Subject key identifier: 72:01:5C:6E:C7:DC:1C:42:8D:32:D8:53:D4:7A:FB:7F:D4:EF:95:83
Authority key identifier: 87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
Certificate issuer: /CN=A9125852/serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
Manifest number: F0
Signing time: Mon 27 Jul 2026 08:28:04 +0000
Manifest this update: Mon 27 Jul 2026 08:28:03 +0000
Manifest next update: Mon 03 Aug 2026 08:28:03 +0000
Files and hashes: 1: h1thdAzTcL1LSk9q6gqGCDiNuoo.crl (hash: 5WTpEGJVYRnNbFM37yoqQuSFFcShdkKsmAiW+vo8SiA=)
2: 36E3783A1BA311F0985A7C2DC4F9AE02.roa (hash: XUeovlZ/4oeHJvRX/WJ4baIyTmKgtfV6QNue3wAaFAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125852, serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Validity
Not Before: Jul 27 08:28:03 2026 GMT
Not After : Aug 3 08:28:03 2026 GMT
Subject: CN=6a671694-5d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:83:06:74:1a:39:19:c0:26:91:1b:73:33:
cf:9e:f1:95:36:93:5d:d8:ce:d5:31:23:25:58:fa:
4e:8a:df:ba:9d:0a:dc:c0:5b:aa:af:11:90:22:ea:
4c:4b:4d:76:66:6b:0b:a5:17:ec:94:fa:00:ad:76:
ec:14:44:b0:61:63:38:f9:14:77:99:a9:7a:27:ff:
1f:8c:4b:b9:72:3b:d5:fd:92:a3:c3:cd:60:0c:b9:
2f:ad:5b:e8:ae:87:bd:6b:85:6c:3d:7e:79:48:e7:
a3:e7:23:58:e9:2a:fb:cc:aa:12:07:02:77:a5:d1:
ad:5a:6d:f6:68:7e:81:ff:74:09:08:11:3b:6e:ce:
34:19:f1:39:0e:51:35:7e:d8:7d:8d:ec:b4:f3:23:
c7:93:fc:c6:8c:5d:26:c0:2f:25:61:ae:86:f2:4b:
8b:61:a8:cc:bd:26:d2:40:3f:67:82:27:e9:5d:e8:
8b:2f:08:f1:ab:4d:ce:93:50:16:fd:6e:17:d2:94:
10:cd:37:be:2d:b3:51:6e:69:db:a8:18:57:4f:8d:
5e:cb:a0:49:64:21:e7:fd:04:b7:1e:4d:6f:51:76:
6d:4e:22:82:3a:61:b6:31:8f:00:e1:42:82:e8:b9:
12:bc:55:df:51:2c:75:ba:ad:8c:b2:66:ee:6e:60:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:01:5C:6E:C7:DC:1C:42:8D:32:D8:53:D4:7A:FB:7F:D4:EF:95:83
X509v3 Authority Key Identifier:
keyid:87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6e:e7:b5:18:61:82:6a:71:35:f5:06:64:5b:7e:85:c4:77:
21:ba:9e:27:9f:89:13:9c:90:2f:6b:13:02:d1:6a:e0:f4:64:
c0:8c:c8:9d:79:27:93:0c:76:1f:f1:6c:63:76:03:d1:cd:bd:
77:fc:b9:3c:bd:16:e4:b9:b6:b4:33:a6:11:97:7b:aa:a0:f9:
a0:c7:47:ab:2b:f8:8a:5d:0d:45:7a:29:98:ba:81:76:3f:49:
e1:41:90:42:71:4d:15:25:a3:c5:b1:29:ca:0f:9f:07:73:b2:
dc:34:b5:0a:e5:79:46:73:9e:2c:f3:3c:48:cb:5a:6d:21:b1:
ed:4e:bc:95:70:70:44:f2:c0:1a:f2:42:81:2f:4d:a0:0b:b9:
bf:3d:2b:9c:1f:95:ea:98:27:60:e7:5a:d6:3b:e0:d1:13:ef:
c9:7b:79:25:61:3c:3d:bc:8e:c0:5f:cd:cc:cc:55:c6:b3:25:
81:66:80:7c:93:fb:a6:bf:f8:67:c0:bb:90:9c:74:04:89:6a:
fc:15:2e:73:1a:4d:ab:af:fc:15:c1:a7:b4:e0:14:b6:be:c6:
df:5b:c9:6c:7e:79:62:0f:bc:18:b2:25:1b:6d:86:20:98:3a:
96:15:44:88:8d:a3:a4:31:a2:b6:22:41:81:d6:82:fe:36:2d:
dd:7b:87:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:24 2026 by rpki-client