
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
File: 9fHi3rMlVisihf-LXeJd8srfdwc.mft (raw, json)
Hash identifier: rXcxPvLJDLuIwxzjL8woWzxkfXH3uRBQOSOE36PAxAM=
Subject key identifier: 76:51:E2:84:1E:EF:0D:42:E3:B1:3C:74:E2:E1:24:84:A3:B7:3A:76
Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07
Certificate issuer: /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
Certificate serial: 0183
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
Manifest number: 017D
Signing time: Wed 15 Apr 2026 04:12:53 +0000
Manifest this update: Wed 15 Apr 2026 04:12:52 +0000
Manifest next update: Wed 22 Apr 2026 04:12:52 +0000
Files and hashes: 1: 9fHi3rMlVisihf-LXeJd8srfdwc.crl (hash: 8fDCNvkZ+OGNrxNkyvHkKlrffQTdghU8G8ZDg19N5SM=)
2: E0207030F13611EE869F9E34C4F9AE02.roa (hash: yGCwpeHPW0bX2imG5e3bAmsS3SLMwwArtfpt+k0YYa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl
rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 04:12:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B4B5, serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
Validity
Not Before: Apr 15 04:12:52 2026 GMT
Not After : Apr 22 04:12:52 2026 GMT
Subject: CN=69df1045-cc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:61:0f:9e:88:f8:98:c0:4d:d1:1b:c4:e9:
45:e9:ec:1a:b8:6a:71:1d:14:14:0a:ad:55:3a:a1:
f8:80:0e:f5:b6:d8:af:4c:74:62:59:87:a9:e5:19:
7c:97:c9:34:2e:4d:dc:18:28:b0:5b:51:d1:2b:1d:
65:47:ab:d9:e9:3a:ed:79:78:53:14:f4:93:5a:ed:
9f:dc:69:6f:f8:0f:aa:92:ce:74:7c:b3:32:06:37:
9e:78:c6:ac:4e:c6:d4:35:6d:54:13:81:a0:5d:91:
c8:67:f6:b8:26:87:e1:2d:d0:2a:d9:0b:3d:b7:24:
11:d5:77:74:13:7c:13:18:92:34:46:c2:c7:35:e0:
ad:73:63:53:7d:66:1d:c7:01:4d:55:73:7b:0c:5c:
ff:09:b7:b2:36:c2:25:cc:60:be:6c:f8:52:55:31:
e7:98:a2:ec:1a:3e:36:d1:63:b5:0f:37:0e:50:ab:
90:81:3f:7b:20:5a:af:09:dd:0e:09:de:29:f2:31:
08:f2:81:45:f2:e0:9c:e0:51:3f:21:9e:0d:a4:eb:
59:03:bf:51:83:43:f6:21:f2:0e:9a:f4:66:cc:25:
6a:91:4d:d4:48:a0:61:6a:10:90:66:67:ef:e1:48:
17:2c:74:5e:ec:e8:89:d5:71:b1:ae:d7:fe:49:22:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:51:E2:84:1E:EF:0D:42:E3:B1:3C:74:E2:E1:24:84:A3:B7:3A:76
X509v3 Authority Key Identifier:
keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:96:e7:7b:2f:0d:e6:df:e8:34:41:1d:d3:59:dd:45:b7:8e:
82:89:09:a4:63:e3:f9:d8:dc:5e:ce:a4:ab:a3:42:28:8f:6c:
f5:35:65:98:7a:5a:92:25:7f:28:91:95:7a:db:7c:ff:aa:5f:
01:95:dd:00:84:a8:e1:9c:11:2e:27:ac:94:64:ca:1c:93:9c:
21:f3:ec:c5:17:52:42:d9:5b:81:1c:d2:24:2d:4e:7b:d3:f5:
aa:c2:1e:04:4c:2a:62:9d:00:1e:c4:70:f4:7a:47:cd:c9:28:
a9:9d:dc:2e:22:23:f0:e0:54:d2:b0:c5:4e:4b:42:43:34:9b:
64:75:5b:d0:61:1f:81:61:75:bf:8d:1d:6b:a9:fd:a9:fc:67:
8a:47:35:dd:a3:05:d0:07:49:1b:6f:61:ba:0c:28:95:c6:d2:
d9:5c:e7:0e:7e:70:50:5d:81:00:47:a0:27:c8:fc:13:f2:eb:
86:42:35:72:0d:ae:49:99:7d:b2:d1:69:b3:3c:5f:ab:df:9e:
78:a5:3f:18:5f:62:0d:d2:46:41:c2:7e:b8:39:95:2f:89:cb:
75:90:96:79:c2:70:09:b7:98:2e:35:0f:34:eb:21:c8:34:d1:
cd:f0:47:e4:98:b8:91:cd:4c:06:5c:aa:4d:01:ed:4d:7c:f8:
9d:57:23:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:05:56 2026 by rpki-client