
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
File: H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft (raw, json)
Hash identifier: dfK1WdiMsEpdzk/F69tV9uc9DTHRfI4IzRPDg4BMsr0=
Subject key identifier: 91:A4:B1:13:86:EF:78:F0:03:F8:E6:FF:07:60:CD:58:18:7F:7D:99
Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14
Certificate issuer: /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14
Certificate serial: 026A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
Manifest number: 0263
Signing time: Mon 02 Mar 2026 02:15:05 +0000
Manifest this update: Mon 02 Mar 2026 02:15:05 +0000
Manifest next update: Mon 09 Mar 2026 02:15:05 +0000
Files and hashes: 1: H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl (hash: ztRsRdUt1Cvxcb73l7dgOmcCW0nQ41Cw1Z2zRRUzBik=)
2: 51CC97DE72D711ED95179B5EC4F9AE02.roa (hash: dEReDEDJySfii8pKlYcee3L1HbPziwJ3gRBbj65y4hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl
rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:15:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 618 (0x26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3ED8, serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14
Validity
Not Before: Mar 2 02:15:05 2026 GMT
Not After : Mar 9 02:15:05 2026 GMT
Subject: CN=69a4f2a9-016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:63:a0:0c:03:01:cb:05:be:d8:b7:aa:1a:
30:f2:18:83:bd:24:f9:c9:08:8a:20:52:ae:90:cb:
7d:45:7c:07:cc:33:9c:76:04:36:02:40:47:98:cd:
56:94:09:97:d7:6b:41:7b:46:64:27:7c:22:94:33:
4a:07:ce:48:ee:25:14:64:19:6c:2c:14:91:ed:66:
c5:17:64:bf:f5:d7:bb:0e:94:6d:e6:d9:16:38:6a:
40:78:d4:94:04:fd:98:98:90:2e:32:24:5d:56:c0:
ce:2d:82:06:b9:dc:b4:30:fa:51:37:d9:57:8c:3a:
f0:4e:4d:70:96:ad:0f:75:a3:7b:72:38:fd:9f:e1:
f7:24:f5:84:11:c9:a5:78:8d:cf:d2:a2:72:4c:0f:
9b:08:68:95:4b:97:44:90:f9:65:18:45:bc:4f:b6:
cc:53:be:21:cc:f2:e9:d5:a2:43:61:fd:bc:0c:c0:
a6:40:aa:b4:25:e4:27:79:63:0f:38:fd:a3:31:28:
42:70:9d:75:c1:0c:77:e8:54:02:8e:f0:c5:87:c1:
b1:ec:b6:ce:30:df:ec:64:56:b9:4c:17:90:4f:0a:
3f:fe:e8:47:0d:29:d9:cb:d2:e7:17:4c:ab:98:1c:
07:05:a5:e7:54:5a:f5:62:2e:07:96:2a:ed:38:d6:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A4:B1:13:86:EF:78:F0:03:F8:E6:FF:07:60:CD:58:18:7F:7D:99
X509v3 Authority Key Identifier:
keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:5f:6a:14:7c:4c:2a:0a:20:f2:a0:b8:42:d4:ad:32:16:18:
31:fc:e9:42:3c:d9:b3:ef:73:1b:41:99:da:be:bf:82:c8:dc:
b8:fe:e8:eb:a1:6b:99:f8:c8:a8:f4:91:3b:e4:ee:6b:47:13:
e9:98:ce:78:00:1e:ba:b5:1f:d9:36:dc:ff:da:a3:4a:6e:8d:
4e:b6:6a:a8:2c:c6:dc:68:60:52:23:32:b2:93:7a:57:0c:b5:
cc:7f:06:7e:e6:f9:90:03:ab:3a:45:e1:6b:ff:db:09:d3:4b:
1f:80:16:5c:24:52:9a:a4:af:f8:e6:7a:67:76:1a:53:81:55:
5e:f9:1c:9f:55:c2:c7:af:29:26:ce:9f:e9:bd:ec:3c:e3:59:
b6:0a:29:20:3c:55:10:e7:8c:78:cb:cf:c5:b6:c2:33:1f:96:
c0:56:89:95:85:39:e3:d5:1f:eb:07:97:28:45:d2:2e:ab:a2:
1a:8d:ed:89:49:2f:15:fb:16:e8:97:aa:ed:6c:34:d4:a0:6e:
3c:fe:06:3a:06:47:45:de:9f:bd:c1:07:c0:91:6f:42:c6:1b:
b9:fb:38:ca:36:85:80:a1:03:e0:8f:5f:a5:d3:52:a7:94:c0:
4d:53:67:51:b6:04:e4:54:d1:7d:10:b8:7e:38:44:6b:f4:04:
b0:2c:24:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:16 2026 by rpki-client