
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
File: -IHZTXommvaISDplHTc5GOeGUB4.mft (raw, json)
Hash identifier: PYffv45RADdccLxCmOyLFr10IeJOft8MH6M36IFH0wk=
Subject key identifier: 24:9F:83:1D:BE:2F:4B:7B:B2:0B:2C:1A:67:F8:C4:42:B7:B0:3B:37
Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
Certificate issuer: /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E
Certificate serial: 01F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
Manifest number: 01E7
Signing time: Mon 02 Mar 2026 02:12:37 +0000
Manifest this update: Mon 02 Mar 2026 02:12:34 +0000
Manifest next update: Mon 09 Mar 2026 02:12:34 +0000
Files and hashes: 1: -IHZTXommvaISDplHTc5GOeGUB4.crl (hash: RtM2LnyM9wRkNhWexh4rK4wnRSyKxiGtKufjFNYx0Qo=)
2: 8A50B69C2F2B11EE8CD3F880C4F9AE02.roa (hash: 8yrKk69D5xN242remo4AGa14gprPSgbcyqKZK/Du0rY=)
3: 89E0172A2F2B11EE8CD3F880C4F9AE02.roa (hash: dd8IIaigjdeFVHSi8ZJQL2JFa2im8RBvLxqCRUWskxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182644, serialNumber=F881D94D7A269AF688483A651D373918E786501E
Validity
Not Before: Mar 2 02:12:34 2026 GMT
Not After : Mar 9 02:12:34 2026 GMT
Subject: CN=69a4f215-e3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:60:6d:62:5f:0f:24:8a:b2:e1:61:1a:51:
ec:33:dd:5f:b0:62:35:aa:fd:d2:9d:62:d9:07:88:
bb:ce:25:2f:34:71:ad:c8:3e:18:c8:cb:90:c4:70:
63:89:3f:13:1c:74:1c:18:b2:72:87:ad:3b:4f:cf:
80:e2:7b:33:d1:23:9a:56:2c:a5:ee:a7:c8:10:17:
7b:68:52:4c:ae:fe:1f:67:b9:58:e0:50:fa:ad:b8:
52:48:bb:15:dd:ce:a9:73:00:9e:41:0c:6d:fb:20:
89:8b:17:c0:9c:08:ba:b6:ee:6f:b9:be:30:8d:e9:
73:39:3c:32:ac:20:06:fe:d2:f1:8a:49:31:c6:a3:
47:b5:47:86:6f:41:e9:03:ee:d1:37:e9:8c:05:36:
ed:b5:3a:ef:54:b1:d8:50:1b:c9:49:a6:01:22:64:
ae:8c:64:9f:80:69:ef:23:34:3f:e9:58:99:22:cb:
f8:e4:4d:83:a1:43:f6:ae:f3:60:c2:ee:c7:5d:72:
f3:96:07:ce:fe:d1:61:78:67:af:ca:55:2f:46:6d:
82:03:c2:27:fe:0a:3e:0e:d7:1f:d3:47:b4:17:10:
c2:5e:02:c0:77:a0:72:b6:fd:e0:18:20:dd:f6:7b:
cd:85:14:8f:e0:3e:9e:98:c7:4f:6e:73:14:87:4b:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9F:83:1D:BE:2F:4B:7B:B2:0B:2C:1A:67:F8:C4:42:B7:B0:3B:37
X509v3 Authority Key Identifier:
keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d7:ca:82:b1:5e:79:a6:5f:98:92:45:bd:1f:17:b8:9b:8a:
a6:fc:f2:52:f6:69:f9:89:8e:12:ce:eb:ad:be:7e:53:38:1d:
18:09:4e:d8:17:1c:5a:cc:45:fd:df:ae:e9:da:b0:a1:d0:53:
9a:05:28:2e:4e:1e:94:26:d9:33:db:e5:ac:27:2a:63:1c:b9:
c6:08:34:f5:f5:a4:f4:a7:59:7c:5d:2a:1d:b5:e2:43:5a:13:
d0:d4:ca:5e:85:fb:1d:cc:4f:84:a2:14:06:2e:13:00:cd:98:
0e:5b:e5:29:c5:f6:ae:39:7c:85:c4:57:83:bd:27:5a:9c:5f:
a9:9a:b5:e6:31:5e:5f:cc:c7:80:88:54:34:eb:6c:3e:5d:d8:
b0:08:65:72:3d:87:ac:16:6c:dd:ba:01:65:82:0c:c8:d9:ea:
7d:3f:64:d8:10:27:87:49:8e:3c:bc:4a:55:d5:54:8f:0e:f1:
c1:2f:aa:6d:c3:89:7c:e8:f9:53:12:8f:d0:3e:b0:de:4d:43:
44:37:71:56:73:7a:5d:19:50:e2:6a:a2:20:53:d1:79:0c:84:
de:c3:ca:b0:86:4c:a7:9e:f2:37:59:c7:d5:1d:4b:11:b5:18:
aa:bb:87:19:7f:99:67:e0:5c:62:af:6f:e9:31:3b:f1:f7:d1:
74:23:63:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI2NDQxMTAvBgNVBAUTKEY4ODFEOTREN0EyNjlBRjY4ODQ4M0E2NTFEMzczOTE4
RTc4NjUwMUUwHhcNMjYwMzAyMDIxMjM0WhcNMjYwMzA5MDIxMjM0WjAYMRYwFAYD
VQQDEw02OWE0ZjIxNS1lM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnYtgbWJfDySKsuFhGlHsM91fsGI1qv3SnWLZB4i7ziUvNHGtyD4YyMuQxHBj
iT8THHQcGLJyh607T8+A4nsz0SOaViyl7qfIEBd7aFJMrv4fZ7lY4FD6rbhSSLsV
3c6pcwCeQQxt+yCJixfAnAi6tu5vub4wjelzOTwyrCAG/tLxikkxxqNHtUeGb0Hp
A+7RN+mMBTbttTrvVLHYUBvJSaYBImSujGSfgGnvIzQ/6ViZIsv45E2DoUP2rvNg
wu7HXXLzlgfO/tFheGevylUvRm2CA8In/go+Dtcf00e0FxDCXgLAd6Bytv3gGCDd
9nvNhRSP4D6emMdPbnMUh0vBywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCSfgx2+
L0t7sgssGmf4xEK3sDs3MB8GA1UdIwQYMBaAFPiB2U16Jpr2iEg6ZR03ORjnhlAe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjY0NC9CRjEzMUQzNDJE
MDAxMUVFOUQxMEZGMThDNEY5QUUwMi8tSUhaVFhvbW12YUlTRHBsSFRjNUdPZUdV
QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1JSFpUWG9tbXZhSVNEcGxIVGM1R09lR1VCNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjY0NC9CRjEzMUQzNDJEMDAxMUVFOUQxMEZGMThDNEY5QUUwMi8tSUhaVFhvbW12
YUlTRHBsSFRjNUdPZUdVQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf9fKgrFeeaZfmJJFvR8XuJuKpvzyUvZp+YmOEs7rrb5+UzgdGAlO2BccWsxF
/d+u6dqwodBTmgUoLk4elCbZM9vlrCcqYxy5xgg09fWk9KdZfF0qHbXiQ1oT0NTK
XoX7HcxPhKIUBi4TAM2YDlvlKcX2rjl8hcRXg70nWpxfqZq15jFeX8zHgIhUNOts
Pl3YsAhlcj2HrBZs3boBZYIMyNnqfT9k2BAnh0mOPLxKVdVUjw7xwS+qbcOJfOj5
UxKP0D6w3k1DRDdxVnN6XRlQ4mqiIFPReQyE3sPKsIZMp57yN1nH1R1LEbUYqruH
GX+ZZ+BcYq9v6TE78ffRdCNjkw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:57 2026 by rpki-client