
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
File: 9fHi3rMlVisihf-LXeJd8srfdwc.mft (raw, json)
Hash identifier: JfmJxZQf3kREUCMSviCbPW2SOhECQ0a0NfwtggvdaIE=
Subject key identifier: 0C:9C:8F:3D:EE:60:E8:B8:5C:B8:09:6B:56:5A:3E:7D:FC:06:4F:4E
Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07
Certificate issuer: /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
Manifest number: 01B0
Signing time: Mon 27 Jul 2026 05:44:22 +0000
Manifest this update: Mon 27 Jul 2026 05:44:21 +0000
Manifest next update: Mon 03 Aug 2026 05:44:21 +0000
Files and hashes: 1: 9fHi3rMlVisihf-LXeJd8srfdwc.crl (hash: MQGk3UERZfWvvCJzigcYHaczlIjmQlNZoMuly9Y9F9o=)
2: E0207030F13611EE869F9E34C4F9AE02.roa (hash: yGCwpeHPW0bX2imG5e3bAmsS3SLMwwArtfpt+k0YYa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl
rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B4B5, serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
Validity
Not Before: Jul 27 05:44:21 2026 GMT
Not After : Aug 3 05:44:21 2026 GMT
Subject: CN=6a66f035-0e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:19:2d:b3:bd:6d:81:4e:31:1a:8e:f4:97:
20:b7:02:08:87:52:7f:3f:a4:7e:d5:90:02:ae:a8:
4e:02:96:2d:45:57:55:5b:2c:d4:45:72:6e:32:cd:
d3:da:f8:cc:e9:14:b6:22:33:c0:fa:ea:6f:e3:13:
56:26:15:71:82:ee:21:e1:d8:ed:b1:60:53:fb:22:
23:be:25:4d:e0:a0:d5:10:f7:ac:8f:c4:e8:b7:19:
3e:d0:c2:e4:8d:46:8c:47:a0:63:7f:8b:bf:16:da:
0b:f6:32:c3:05:21:6e:3e:7e:b4:99:cd:fe:cb:4c:
cb:c8:6b:18:f0:ce:5d:cf:15:87:69:99:02:bc:c6:
77:b2:22:ef:a6:1a:84:42:d0:8c:d3:93:77:a5:5b:
9b:72:ed:9e:5e:18:88:17:ae:46:aa:a7:3d:3d:81:
cc:bb:85:2f:0f:90:60:e1:53:88:32:a5:45:be:13:
71:5a:56:ff:75:42:0b:fe:2b:5e:f3:da:d4:bc:55:
1d:a3:c5:a6:e4:f9:88:75:94:01:ef:b4:92:c0:a9:
78:e9:4a:f5:98:f5:12:8a:3d:99:45:50:0b:44:d6:
5c:04:ca:aa:3e:a4:4a:a2:a0:67:b0:f6:f9:2e:36:
4a:61:6c:cb:0d:f7:b4:1e:18:2a:ae:de:62:4b:ce:
8c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9C:8F:3D:EE:60:E8:B8:5C:B8:09:6B:56:5A:3E:7D:FC:06:4F:4E
X509v3 Authority Key Identifier:
keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:85:f0:4f:d4:0e:a9:40:90:3c:3e:0b:55:1c:e1:cc:ac:5f:
05:d8:dc:a0:2d:e3:18:1c:ab:14:8e:94:2e:03:79:b5:b8:0e:
dd:1c:f2:bd:3a:bd:a5:50:56:25:d6:2f:5e:d8:c1:e8:13:0a:
2c:63:52:fc:20:75:8b:ad:f8:04:fa:cc:02:8a:69:fe:10:3c:
43:d0:65:4d:17:8d:90:af:cd:ac:ac:b9:c8:da:16:f8:8c:a1:
02:bd:e1:bb:04:26:67:51:bd:5b:5a:77:8f:a1:4d:a0:95:ee:
f5:18:fe:d4:d0:13:f4:dd:58:92:8f:57:a5:f6:f2:35:d8:e5:
7c:8a:61:06:36:26:b9:f3:37:80:a4:19:5a:63:dc:35:ad:93:
ab:c5:9b:5e:a0:de:95:44:ca:0b:1f:00:67:09:5f:9a:22:b1:
39:a6:4d:d8:cf:f3:be:65:2e:52:7b:f6:04:42:47:a9:a8:2e:
77:a8:db:9e:de:b1:fc:28:8a:49:29:44:06:35:e0:5e:11:38:
17:31:37:d7:a1:fb:62:e2:22:67:16:d6:63:7f:a5:25:bb:4a:
d7:ea:51:17:5b:5d:49:c3:3f:71:72:18:17:a7:c0:c9:04:80:
78:b7:59:e0:88:36:b1:1e:d1:52:71:ac:b1:fc:d9:80:dc:39:
19:89:33:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI0QjUxMTAvBgNVBAUTKEY1RjFFMkRFQjMyNTU2MkIyMjg1RkY4QjVERTI1REYy
Q0FERjc3MDcwHhcNMjYwNzI3MDU0NDIxWhcNMjYwODAzMDU0NDIxWjAYMRYwFAYD
VQQDEw02YTY2ZjAzNS0wZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1XEZLbO9bYFOMRqO9JcgtwIIh1J/P6R+1ZACrqhOApYtRVdVWyzURXJuMs3T
2vjM6RS2IjPA+upv4xNWJhVxgu4h4djtsWBT+yIjviVN4KDVEPesj8Totxk+0MLk
jUaMR6Bjf4u/FtoL9jLDBSFuPn60mc3+y0zLyGsY8M5dzxWHaZkCvMZ3siLvphqE
QtCM05N3pVubcu2eXhiIF65Gqqc9PYHMu4UvD5Bg4VOIMqVFvhNxWlb/dUIL/ite
89rUvFUdo8Wm5PmIdZQB77SSwKl46Ur1mPUSij2ZRVALRNZcBMqqPqRKoqBnsPb5
LjZKYWzLDfe0Hhgqrt5iS86MewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAycjz3u
YOi4XLgJa1ZaPn38Bk9OMB8GA1UdIwQYMBaAFPXx4t6zJVYrIoX/i13iXfLK33cH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjRCNS80MENFOUYyQUYx
MzYxMUVFOTA4QkYwMzJDNEY5QUUwMi85ZkhpM3JNbFZpc2loZi1MWGVKZDhzcmZk
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlmSGkzck1sVmlzaWhmLUxYZUpkOHNyZmR3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjRCNS80MENFOUYyQUYxMzYxMUVFOTA4QkYwMzJDNEY5QUUwMi85ZkhpM3JNbFZp
c2loZi1MWGVKZDhzcmZkd2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW4XwT9QOqUCQPD4LVRzhzKxfBdjcoC3jGByrFI6ULgN5tbgO3RzyvTq9pVBW
JdYvXtjB6BMKLGNS/CB1i634BPrMAopp/hA8Q9BlTReNkK/NrKy5yNoW+IyhAr3h
uwQmZ1G9W1p3j6FNoJXu9Rj+1NAT9N1Yko9XpfbyNdjlfIphBjYmufM3gKQZWmPc
Na2Tq8WbXqDelUTKCx8AZwlfmiKxOaZN2M/zvmUuUnv2BEJHqagud6jbnt6x/CiK
SSlEBjXgXhE4FzE316H7YuIiZxbWY3+lJbtK1+pRF1tdScM/cXIYF6fAyQSAeLdZ
4Ig2sR7RUnGssfzZgNw5GYkzQA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:20 2026 by rpki-client