
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
File: 0rolH4MRa7tToMiSMQ9P963v_es.mft (raw, json)
Hash identifier: UjR/EnPXqZfIPtbeMd7hYbd4lIU8p6f/Yu8AruFoQbs=
Subject key identifier: 8B:8E:FC:12:EB:0E:C4:48:5A:44:C6:8A:B2:7B:88:2D:E6:E3:06:2D
Authority key identifier: D2:BA:25:1F:83:11:6B:BB:53:A0:C8:92:31:0F:4F:F7:AD:EF:FD:EB
Certificate issuer: /CN=A9175B42/serialNumber=D2BA251F83116BBB53A0C892310F4FF7ADEFFDEB
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
Manifest number: F3
Signing time: Wed 19 Aug 2026 06:58:36 +0000
Manifest this update: Wed 19 Aug 2026 06:58:36 +0000
Manifest next update: Wed 26 Aug 2026 06:58:36 +0000
Files and hashes: 1: 0rolH4MRa7tToMiSMQ9P963v_es.crl (hash: pr1jG7n3tg/Dx3Upg6qXc7x7cQMhfD9ti8ZhhNqk5dk=)
2: EABFF866266511F0A3060E66C4F9AE02.roa (hash: FisgyItAVG3Y15df/opUvBoxNb4fchWDbDPeeu269Zk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.crl
rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175B42, serialNumber=D2BA251F83116BBB53A0C892310F4FF7ADEFFDEB
Validity
Not Before: Aug 19 06:58:36 2026 GMT
Not After : Aug 26 06:58:36 2026 GMT
Subject: CN=6a85541c-49c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:ab:fe:75:54:90:6e:3f:d1:fa:4b:ee:fa:
73:65:97:0e:73:e9:af:15:1c:b1:44:ae:2d:27:35:
88:78:81:62:6c:ba:5c:6e:86:bb:bc:92:76:f1:a4:
66:37:f5:80:07:16:d8:05:4d:19:ff:77:1b:2c:21:
1c:05:1a:73:8d:4e:8e:db:da:86:a8:ea:c3:2b:9f:
3f:bf:ad:15:c5:38:92:a8:61:d1:a9:72:d5:b2:98:
0c:81:55:a0:0d:76:e8:21:be:74:08:8b:43:65:46:
b1:1b:80:01:f6:eb:c9:2b:8e:fd:82:62:0f:31:34:
83:92:ae:69:12:2b:58:b8:fb:0e:48:9d:29:2b:1c:
41:68:39:99:6d:cb:8d:63:22:91:0c:0b:f9:3c:59:
7b:6f:41:7a:3c:04:15:28:df:14:69:64:6a:30:f5:
f9:60:e3:f9:66:e4:9f:1e:5c:4f:b6:64:58:32:2d:
33:01:d2:2f:88:16:22:ba:9f:c1:18:d3:39:c7:56:
4b:c4:b5:cb:d5:66:9b:16:b0:fa:e8:c9:cc:a4:80:
61:b5:35:b5:5b:96:88:34:9a:54:9c:53:21:d2:a7:
65:37:3f:97:e0:cc:ae:35:d5:54:fb:83:39:68:38:
3d:31:54:79:55:da:15:f7:0c:eb:d7:01:77:61:c9:
46:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8E:FC:12:EB:0E:C4:48:5A:44:C6:8A:B2:7B:88:2D:E6:E3:06:2D
X509v3 Authority Key Identifier:
keyid:D2:BA:25:1F:83:11:6B:BB:53:A0:C8:92:31:0F:4F:F7:AD:EF:FD:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:1b:eb:90:0b:05:10:de:7d:be:e1:d9:0e:8a:01:c6:e6:be:
fe:0e:44:ed:fc:57:aa:55:93:5f:06:db:c2:7c:f2:52:12:ba:
2e:c8:cd:9c:b3:43:7f:bc:73:c1:17:fa:8a:8b:b5:a2:96:75:
79:8a:29:32:9c:21:63:8d:87:a6:63:14:c6:2d:cc:a3:4d:63:
fe:eb:a9:e1:5c:0c:3f:89:3f:24:a8:26:4b:a3:c2:7a:97:8a:
65:42:9e:34:7f:3f:b7:4c:97:e1:33:e3:20:4a:38:b1:5b:09:
b3:57:69:64:d7:e0:7d:58:2e:65:1b:74:0e:50:4a:40:f5:b0:
a4:10:4a:09:a7:a6:0e:80:03:4d:a3:fb:6a:ee:47:d5:0c:9a:
71:1d:18:0e:f2:8c:e1:bb:7b:0a:40:b6:71:4d:c9:1a:0d:e4:
dd:25:8e:31:b8:c8:5b:42:ca:fe:a0:66:8f:09:df:cf:65:a1:
b2:d7:d4:e0:d4:d7:d0:8a:3b:dc:ec:05:c2:57:ef:db:47:38:
33:0e:d1:73:7f:5b:e0:de:ba:b1:85:6a:2e:c0:83:70:a1:f3:
78:07:72:3e:39:bb:a3:68:ae:bf:07:a8:77:36:e0:5b:d3:59:
ab:82:0f:7f:9f:54:fc:89:b8:ef:35:dd:73:84:fb:13:f6:b8:
7e:96:97:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzVCNDIxMTAvBgNVBAUTKEQyQkEyNTFGODMxMTZCQkI1M0EwQzg5MjMxMEY0RkY3
QURFRkZERUIwHhcNMjYwODE5MDY1ODM2WhcNMjYwODI2MDY1ODM2WjAYMRYwFAYD
VQQDEw02YTg1NTQxYy00OWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApCar/nVUkG4/0fpL7vpzZZcOc+mvFRyxRK4tJzWIeIFibLpcboa7vJJ28aRm
N/WABxbYBU0Z/3cbLCEcBRpzjU6O29qGqOrDK58/v60VxTiSqGHRqXLVspgMgVWg
DXboIb50CItDZUaxG4AB9uvJK479gmIPMTSDkq5pEitYuPsOSJ0pKxxBaDmZbcuN
YyKRDAv5PFl7b0F6PAQVKN8UaWRqMPX5YOP5ZuSfHlxPtmRYMi0zAdIviBYiup/B
GNM5x1ZLxLXL1WabFrD66MnMpIBhtTW1W5aINJpUnFMh0qdlNz+X4MyuNdVU+4M5
aDg9MVR5VdoV9wzr1wF3YclG/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuO/BLr
DsRIWkTGirJ7iC3m4wYtMB8GA1UdIwQYMBaAFNK6JR+DEWu7U6DIkjEPT/et7/3r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUI0Mi80OEZFQjFDMDI2
NjUxMUYwODAxNUFCNjJDNEY5QUUwMi8wcm9sSDRNUmE3dFRvTWlTTVE5UDk2M3Zf
ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzByb2xINE1SYTd0VG9NaVNNUTlQOTYzdl9lcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NUI0Mi80OEZFQjFDMDI2NjUxMUYwODAxNUFCNjJDNEY5QUUwMi8wcm9sSDRNUmE3
dFRvTWlTTVE5UDk2M3ZfZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUhvrkAsFEN59vuHZDooBxua+/g5E7fxXqlWTXwbbwnzyUhK6LsjNnLNDf7xz
wRf6iou1opZ1eYopMpwhY42HpmMUxi3Mo01j/uup4VwMP4k/JKgmS6PCepeKZUKe
NH8/t0yX4TPjIEo4sVsJs1dpZNfgfVguZRt0DlBKQPWwpBBKCaemDoADTaP7au5H
1QyacR0YDvKM4bt7CkC2cU3JGg3k3SWOMbjIW0LK/qBmjwnfz2WhstfU4NTX0Io7
3OwFwlfv20c4Mw7Rc39b4N66sYVqLsCDcKHzeAdyPjm7o2iuvweodzbgW9NZq4IP
f59U/Im47zXdc4T7E/a4fpaXkw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:38 2026 by rpki-client