
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
File: 0rolH4MRa7tToMiSMQ9P963v_es.mft (raw, json)
Hash identifier: WyxPk0+w/NWRH5qY+5O+/Pb5kVtA44Ukmj/D7aCOB08=
Subject key identifier: FB:5F:1B:6A:B4:16:7D:5A:FD:C8:83:AE:4F:BC:3F:1F:63:86:62:E0
Authority key identifier: D2:BA:25:1F:83:11:6B:BB:53:A0:C8:92:31:0F:4F:F7:AD:EF:FD:EB
Certificate issuer: /CN=A9175B42/serialNumber=D2BA251F83116BBB53A0C892310F4FF7ADEFFDEB
Certificate serial: AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
Manifest number: AD
Signing time: Sun 05 Apr 2026 06:30:55 +0000
Manifest this update: Sun 05 Apr 2026 06:30:54 +0000
Manifest next update: Sun 12 Apr 2026 06:30:54 +0000
Files and hashes: 1: 0rolH4MRa7tToMiSMQ9P963v_es.crl (hash: X93mEjpX0JhnFRxcJaiUYxmMgqoaVMp5Z+iJNo2uLcc=)
2: EABFF866266511F0A3060E66C4F9AE02.roa (hash: 3VcOAffEJ0gAEFY9o/GWgUHQvlmy/gzyZiJXevjQCoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.crl
rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175B42, serialNumber=D2BA251F83116BBB53A0C892310F4FF7ADEFFDEB
Validity
Not Before: Apr 5 06:30:54 2026 GMT
Not After : Apr 12 06:30:54 2026 GMT
Subject: CN=69d2019f-cfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1b:3a:23:ca:74:b1:1d:cf:3b:6c:d1:81:5e:
e4:f0:de:14:da:08:59:57:98:04:f1:ee:70:17:83:
80:5b:42:33:6f:40:39:98:85:74:6b:e8:33:f2:f3:
a1:bb:50:ca:e0:4b:bf:19:93:6f:83:37:7c:71:5a:
5e:1c:83:a2:e0:9d:bd:11:f8:ff:15:7c:3e:0a:7a:
25:42:4a:44:67:63:d6:c3:54:fa:5f:15:72:c9:6b:
36:93:98:32:22:21:4c:cc:ec:de:2d:7d:2e:35:44:
51:5e:e1:37:c4:41:2d:6b:fb:81:82:ed:e6:f5:c9:
e6:96:b0:18:83:91:95:cb:d0:be:e6:a4:93:54:56:
c2:b5:56:b5:54:5e:41:da:a8:c9:b7:55:94:b0:91:
da:68:65:50:fd:15:52:46:0d:af:d3:66:99:0a:3e:
b3:40:ea:a0:1f:ed:8b:0b:60:50:cf:90:81:46:d4:
89:09:c1:ec:9d:61:43:2b:0a:90:b9:53:f2:4b:8b:
f4:bf:1f:a0:c9:28:58:c9:ba:a4:fe:66:14:f8:dc:
7c:f4:8e:73:6f:b1:01:06:df:e7:63:c1:a6:9a:f2:
a3:34:09:3b:c7:5b:ad:18:f6:6f:1e:15:ef:14:c5:
d2:40:29:22:7e:52:88:53:a7:d9:94:63:c6:92:fe:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5F:1B:6A:B4:16:7D:5A:FD:C8:83:AE:4F:BC:3F:1F:63:86:62:E0
X509v3 Authority Key Identifier:
keyid:D2:BA:25:1F:83:11:6B:BB:53:A0:C8:92:31:0F:4F:F7:AD:EF:FD:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:aa:67:70:c8:1c:9c:6e:cc:a1:fe:80:ca:a0:5d:9d:d9:54:
74:10:ec:99:af:41:c6:12:bc:03:e8:4a:13:7f:73:16:99:c2:
c1:80:5f:2a:00:4b:c5:25:66:d2:ee:ab:41:97:5a:14:c0:0d:
f6:56:0f:5e:ef:cd:16:f8:f6:3c:5a:6c:46:c7:4b:93:69:44:
3f:e1:29:74:a6:78:e5:4f:46:f4:25:cd:7c:dd:17:e6:57:97:
11:7f:1a:1b:b6:d7:1f:fd:cd:f5:5f:70:dd:1c:3d:d0:4d:4e:
12:d6:4b:0a:46:65:b2:68:d8:cf:27:be:6c:a2:f4:b3:25:30:
f5:ba:73:d6:57:11:22:c2:2e:6c:01:6e:74:b1:18:11:72:a4:
a1:20:67:25:20:66:53:7d:66:b8:87:b8:57:68:bc:51:ef:8e:
49:43:00:50:ae:09:ee:cc:e5:30:8f:35:6f:15:45:1c:6d:44:
0e:ba:bf:7e:59:c2:1c:8e:da:8b:ff:0b:0f:73:d3:93:78:8e:
85:ab:ad:6f:d0:71:f7:55:3f:85:e9:f8:fe:e1:e5:90:5c:b0:
b3:9c:af:25:80:68:38:c4:db:1d:16:de:9a:c5:e8:2a:d4:c6:
08:dc:dd:4c:2a:5b:b2:20:88:97:3f:5e:37:77:48:60:99:39:
fa:03:71:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:35 2026 by rpki-client