
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
File: 9fHi3rMlVisihf-LXeJd8srfdwc.mft (raw, json)
Hash identifier: m0fp03nF3En68Ih485KC7rdVdruXEreICaezFt5CjaQ=
Subject key identifier: B2:D7:E0:95:2F:FD:F1:FA:14:57:B0:7F:26:D2:F3:AD:A2:05:BB:91
Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07
Certificate issuer: /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
Certificate serial: 01D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
Manifest number: 01CD
Signing time: Mon 21 Sep 2026 03:42:36 +0000
Manifest this update: Mon 21 Sep 2026 03:42:36 +0000
Manifest next update: Mon 28 Sep 2026 03:42:36 +0000
Files and hashes: 1: 9fHi3rMlVisihf-LXeJd8srfdwc.crl (hash: EKoaE0EbEnhZ6lBSIN/FRy0cmBZppqFOpczlmt2ukF4=)
2: E0207030F13611EE869F9E34C4F9AE02.roa (hash: yGCwpeHPW0bX2imG5e3bAmsS3SLMwwArtfpt+k0YYa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl
rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B4B5, serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
Validity
Not Before: Sep 21 03:42:36 2026 GMT
Not After : Sep 28 03:42:36 2026 GMT
Subject: CN=6ab0a7ac-aaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:eb:00:02:12:ea:73:1e:a5:64:9d:dc:c9:
c5:52:14:0f:a1:bd:ee:f5:b2:94:11:75:8e:86:a4:
cd:cc:92:99:6a:56:e2:05:c2:02:ea:1f:57:b4:c3:
f5:ac:3c:bb:4e:74:ba:55:77:62:3c:4d:87:5b:b3:
b4:d1:9f:7a:b0:58:a4:50:2c:7b:95:1b:47:ff:9a:
79:e3:59:cb:49:66:e8:5c:15:ca:4b:c6:f8:68:d9:
b9:aa:0a:54:db:03:de:02:6d:a5:7d:db:ca:08:d0:
6d:30:08:c9:92:4e:35:d1:f8:7d:fa:b8:6a:90:9a:
6b:93:65:9a:67:d3:40:1d:09:11:c8:8e:a7:6d:90:
41:84:e8:a9:d0:cc:fe:5c:c7:79:a3:55:a1:6e:e4:
ae:e9:50:02:b0:8c:61:37:08:e2:3e:10:54:25:32:
1e:92:8f:43:c1:82:b1:51:a8:2d:04:a7:78:ef:c3:
5d:81:a6:08:ae:88:34:10:b9:c0:a4:69:f8:00:63:
56:ad:95:ef:17:73:1a:9b:ea:9e:95:37:8f:14:ef:
e2:6c:30:37:95:62:7c:9f:b9:f1:47:17:5b:bb:94:
6c:27:be:11:6c:f8:10:fc:d3:84:3d:71:3c:45:71:
5d:4a:35:a4:3c:a5:ca:d7:d1:4d:14:81:ce:c0:f7:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D7:E0:95:2F:FD:F1:FA:14:57:B0:7F:26:D2:F3:AD:A2:05:BB:91
X509v3 Authority Key Identifier:
keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:16:52:0d:1e:7b:6b:a6:de:07:7d:8f:4e:2b:b3:26:ce:ff:
b4:23:8b:8c:67:d7:b9:75:7c:7c:ec:8b:50:81:f7:c1:ee:c0:
02:07:b1:d2:fa:cc:fd:a9:9d:4e:e8:be:bf:ba:47:55:b5:69:
45:b9:95:b3:8f:0f:06:e2:a4:d8:55:fa:5e:a2:ee:e8:9b:c1:
ad:6a:7a:09:a1:30:e6:bd:9e:18:06:95:cc:9f:1d:6d:86:9d:
40:33:5d:09:e8:4c:bf:13:47:ac:14:b2:00:c8:8b:0c:15:8c:
0e:ad:8d:b2:a9:dd:19:8d:7c:e6:b0:e2:c2:c0:06:52:e9:78:
a5:13:9c:9a:43:5a:6c:37:d6:b5:28:4a:1a:2f:0e:ac:54:3a:
6e:13:38:53:b2:5a:84:0c:21:63:01:c1:9b:80:fd:16:96:c4:
76:4c:ce:51:02:b7:69:8c:d4:61:fe:6d:c7:5c:c2:38:ff:09:
c2:89:ba:18:75:db:b6:08:78:02:c5:6e:ae:03:aa:6f:b4:a1:
0e:15:75:2a:56:59:09:20:fb:b3:44:5b:74:98:49:40:01:f9:
b5:b5:88:49:80:95:9c:ef:38:94:b3:31:f0:23:09:de:c5:55:
5a:50:07:b3:90:9f:21:4a:1b:25:7f:c4:71:0c:e0:af:df:e8:
49:0b:0e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:16:13 2026 by rpki-client