
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
File: 9fHi3rMlVisihf-LXeJd8srfdwc.mft (raw, json)
Hash identifier: EHYsG1Hjk7xGU8w/I3Su1TzpN+K6xTlaLOu1TNX6fyM=
Subject key identifier: 32:3B:D3:C0:3A:77:81:48:6F:84:F1:6C:8D:FD:BC:28:2D:0D:A3:76
Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07
Certificate issuer: /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
Certificate serial: 01C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
Manifest number: 01BC
Signing time: Wed 19 Aug 2026 04:30:35 +0000
Manifest this update: Wed 19 Aug 2026 04:30:35 +0000
Manifest next update: Wed 26 Aug 2026 04:30:35 +0000
Files and hashes: 1: 9fHi3rMlVisihf-LXeJd8srfdwc.crl (hash: MQegnuvdReJ+Kh3BstDAuB3Hu4NwLVjTBgyZMVvJP6E=)
2: E0207030F13611EE869F9E34C4F9AE02.roa (hash: yGCwpeHPW0bX2imG5e3bAmsS3SLMwwArtfpt+k0YYa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl
rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B4B5, serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
Validity
Not Before: Aug 19 04:30:35 2026 GMT
Not After : Aug 26 04:30:35 2026 GMT
Subject: CN=6a85316b-c21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:7a:0d:6d:ec:f3:d6:4f:6f:2b:15:ed:55:
20:ca:d3:1c:af:f9:85:a8:e7:84:a3:a7:81:cc:4c:
39:f0:ec:ec:a1:e7:6a:87:3c:71:3d:fc:e8:07:d0:
a8:08:05:c6:c0:79:04:02:26:b1:f6:c8:55:e3:46:
94:32:6c:8c:02:dc:93:e9:cc:d6:50:d7:98:5a:6c:
0c:75:c9:9b:3c:25:8b:88:46:f3:35:f3:62:b6:af:
d0:3a:cf:cb:41:82:4c:9b:d4:d8:b3:15:81:e9:bc:
aa:28:4e:dd:31:87:05:b3:c0:32:83:1c:10:42:be:
fe:1a:6f:99:02:8c:29:cf:5e:c6:e9:73:3b:87:b9:
71:03:b4:12:d9:be:96:8e:ba:c9:9e:3f:9b:6e:a2:
25:6f:f7:a2:6e:38:72:8d:09:4e:ea:15:28:d1:5b:
c9:29:b1:f7:5a:9a:63:ce:a5:42:2f:45:ed:10:02:
e5:a0:b9:a8:87:90:c0:58:0d:c0:05:4b:5d:bb:a4:
4d:6d:bb:41:e7:86:3f:3b:1a:41:92:bf:29:cb:ab:
59:20:87:12:21:c0:96:94:5c:5f:2b:cf:52:7a:a5:
7f:84:66:7e:27:61:56:e0:8b:39:97:3a:2f:67:7d:
6b:96:c0:3f:20:ab:5f:e3:88:80:82:85:c1:a4:66:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3B:D3:C0:3A:77:81:48:6F:84:F1:6C:8D:FD:BC:28:2D:0D:A3:76
X509v3 Authority Key Identifier:
keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:c0:90:57:48:48:34:72:e1:ca:83:27:65:df:e0:87:cc:73:
12:90:ef:b1:12:56:5c:fb:62:f4:46:db:66:62:6c:97:64:c3:
6a:cc:e9:3a:6a:0a:b3:7b:c8:23:2a:21:d1:8c:25:60:af:63:
03:76:3e:09:10:88:0d:fe:a2:68:e0:5b:97:f5:8b:b4:a5:b7:
f9:3c:64:ef:f1:3c:28:e9:c1:6c:d0:f9:d6:ec:05:8d:d5:6a:
2b:26:7a:3f:ba:d4:20:17:a4:0e:c7:25:83:09:79:6e:5b:26:
d9:c7:7e:14:65:18:8b:8e:4f:d6:6f:f8:90:3f:52:a3:7e:70:
6b:82:a2:a0:37:8a:e9:44:87:fb:69:d7:bd:62:49:7d:2e:fe:
de:09:e9:4c:b4:80:bd:09:1a:f4:2f:b8:34:1a:aa:49:42:4c:
e2:4c:81:ba:c9:8e:ad:4f:55:60:9c:30:12:d4:24:55:7f:2e:
4a:c9:f0:b1:24:f5:a5:54:3e:6e:da:9d:f3:00:a8:a6:5d:30:
b8:52:1b:ce:77:21:17:52:41:e2:85:d9:c2:d4:d7:9d:85:bf:
c8:6e:89:0e:28:44:4e:98:d9:a8:c7:68:af:2c:80:3f:12:3f:
43:2f:fd:e9:57:75:f7:34:de:8e:22:f4:70:fa:a2:a9:40:d4:
31:61:f2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:49:16 2026 by rpki-client