
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
File: -IHZTXommvaISDplHTc5GOeGUB4.mft (raw, json)
Hash identifier: 1QsuC9+0mAgpQe+9huzQc9xilkixQaFjUDL91EJjolw=
Subject key identifier: 80:7F:2F:E6:39:40:DB:87:F9:F5:FA:75:83:40:0C:77:1B:E7:A4:C9
Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
Certificate issuer: /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E
Certificate serial: 01EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
Manifest number: 01E5
Signing time: Sun 01 Mar 2026 04:07:29 +0000
Manifest this update: Sun 01 Mar 2026 04:07:29 +0000
Manifest next update: Sun 08 Mar 2026 04:07:29 +0000
Files and hashes: 1: -IHZTXommvaISDplHTc5GOeGUB4.crl (hash: bs3qCN16vXbUnFyrvmZt3UfS9VQQftr8hZHSP15q2KU=)
2: 8A50B69C2F2B11EE8CD3F880C4F9AE02.roa (hash: X7xyaBh0Wrmfm5LffdWxPUUrmnom17OByzAiI+OrkqU=)
3: 89E0172A2F2B11EE8CD3F880C4F9AE02.roa (hash: MWF9yk30FJElBkURG2FIcNXpLWF91bW+ys8O1aYlGaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182644, serialNumber=F881D94D7A269AF688483A651D373918E786501E
Validity
Not Before: Mar 1 04:07:29 2026 GMT
Not After : Mar 8 04:07:29 2026 GMT
Subject: CN=69a3bb81-ee96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:be:df:d5:a2:b2:ed:09:b6:28:e9:64:7e:
ee:d6:9b:a8:da:8f:5e:21:85:2a:4d:5c:84:52:44:
5c:2e:c6:67:00:b6:7d:0d:ff:2c:61:13:d4:16:77:
af:77:a5:9b:4d:95:43:79:de:51:af:50:8c:b6:95:
d0:23:78:84:d7:c0:e4:70:32:00:cf:9b:1d:d3:cf:
0b:8f:96:f3:79:32:73:0b:bd:fe:96:c6:40:8f:9e:
d8:ab:76:6d:f7:86:ab:95:14:b7:8b:84:6a:a2:56:
8c:04:4e:20:6e:1d:35:55:01:25:06:18:6a:d7:4a:
72:f3:f1:5b:4a:7d:ae:b6:06:a5:e3:6e:86:b6:99:
c6:e9:26:67:e4:e7:3f:cb:87:b5:1c:c0:5e:1d:0d:
c3:aa:69:46:0e:cb:8d:aa:45:0d:71:3b:18:a3:ef:
56:0b:e5:2b:83:a2:1c:b6:c9:3f:12:76:a2:30:ed:
01:c8:69:37:e8:d8:fd:fa:81:e4:6e:07:93:0f:f9:
2f:b3:22:16:b2:9f:f1:da:3c:1d:94:fe:62:55:ca:
70:89:49:9d:52:28:fe:17:32:ba:79:6c:e0:f4:36:
74:bd:ea:97:4a:a8:b5:c5:b0:94:c1:56:b1:dd:45:
1d:1b:cf:bf:3c:a5:5f:e5:db:00:91:2b:4c:3f:8b:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7F:2F:E6:39:40:DB:87:F9:F5:FA:75:83:40:0C:77:1B:E7:A4:C9
X509v3 Authority Key Identifier:
keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:97:44:92:67:0e:ab:70:9a:eb:0b:57:e4:5d:e6:6f:e6:5a:
59:82:d0:9f:d3:4e:a4:96:be:0e:54:5d:a6:eb:2c:28:9d:23:
aa:01:9b:5e:bb:b0:2d:da:66:6d:f7:87:54:6c:bc:db:99:03:
c0:db:69:9c:14:d8:30:43:8a:46:01:73:24:37:85:8f:17:d5:
64:0f:f5:54:d9:5b:ca:73:66:fe:4c:30:86:8f:f7:54:d3:7f:
b3:73:27:b1:d8:06:eb:17:36:b0:e4:fd:ed:f6:b5:08:7c:24:
5c:0a:c4:71:bc:e4:76:ca:d6:f1:9f:6e:98:7f:41:32:f2:cb:
ee:54:30:07:ef:cb:e1:b7:cd:0b:e9:93:a4:79:85:31:7d:58:
11:d5:0d:79:d8:cf:93:5e:e9:39:69:62:cb:9b:96:3d:65:46:
26:95:e0:a9:e7:a4:99:d3:69:15:3b:02:d5:0a:eb:03:fe:a8:
fb:32:c3:b0:e6:91:f5:ff:1d:7f:95:c1:f6:d2:43:a4:7a:27:
65:16:8c:c3:f7:de:f8:49:f2:c1:1e:f0:24:ee:62:93:ed:6e:
dc:6e:32:f4:d3:3e:43:25:c7:76:88:ac:ab:0b:2a:b8:1d:8f:
8c:ef:11:0f:56:23:a4:b7:c4:03:d4:e8:b5:75:bc:c5:08:85:
19:27:e8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:45 2026 by rpki-client