
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
File: -IHZTXommvaISDplHTc5GOeGUB4.mft (raw, json)
Hash identifier: 79DPfBFCrO6sGOP7N1+fMHc5u9lcYtCt0++OPs3+MD0=
Subject key identifier: 3F:53:CB:4F:80:67:51:EA:4A:04:E8:C0:63:BF:08:E1:72:A4:D4:90
Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
Certificate issuer: /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E
Certificate serial: 0246
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
Manifest number: 023A
Signing time: Sun 09 Aug 2026 02:09:54 +0000
Manifest this update: Sun 09 Aug 2026 02:09:54 +0000
Manifest next update: Sun 16 Aug 2026 02:09:54 +0000
Files and hashes: 1: -IHZTXommvaISDplHTc5GOeGUB4.crl (hash: nM2xhWuemlqJwJdioziyXHwdVQLLSJQvW7YVxGm+Dn0=)
2: 89E0172A2F2B11EE8CD3F880C4F9AE02.roa (hash: C1isKHDZmIzkrW1TiYpRTnnD0Skdcof9sxD4v3Fd3ts=)
3: 8A50B69C2F2B11EE8CD3F880C4F9AE02.roa (hash: omi8yODClVvhpST+KBM55F9HtZTYK2334qjRcd3W9Yw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 02:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182644, serialNumber=F881D94D7A269AF688483A651D373918E786501E
Validity
Not Before: Aug 9 02:09:54 2026 GMT
Not After : Aug 16 02:09:54 2026 GMT
Subject: CN=6a77e172-fc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:3d:df:79:6f:e8:63:96:27:81:ae:4d:39:
ce:5b:15:47:1c:d1:9e:7b:5f:73:28:79:99:c2:44:
25:6b:cd:9f:b5:c1:f3:52:2e:8f:5f:38:a7:ba:bf:
50:3e:06:04:a0:8d:de:34:4a:58:3f:dd:31:c4:83:
d1:e4:53:76:f5:17:5d:7e:0b:36:87:19:3e:87:fa:
31:93:6e:10:26:fe:99:2d:0e:6c:ad:1f:1c:ec:1e:
16:e4:dc:fd:86:9f:63:06:09:15:1f:55:e7:be:54:
2e:12:f2:6c:d6:7f:68:28:24:71:f1:5b:f6:6d:53:
d0:9c:ab:50:fa:5f:8a:e2:3b:75:a0:1a:33:3b:39:
37:9d:05:f7:e1:93:39:59:be:8f:32:eb:ea:2b:52:
70:e2:9d:9f:03:f9:9f:d2:52:8e:57:94:bd:ed:26:
4c:3c:ff:63:5e:f3:04:8b:84:78:3d:14:c3:b8:45:
e0:18:32:11:77:48:1a:99:56:42:d8:7f:e6:fc:ae:
c7:34:04:fd:79:de:39:5e:1d:28:04:02:eb:8c:20:
25:86:65:4f:0f:7d:76:2a:09:ff:a0:32:08:75:7a:
d5:be:de:24:ff:df:af:86:a8:f1:e4:b4:9f:40:68:
46:40:ef:45:d8:6f:29:06:fc:ef:23:17:30:ab:88:
a6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:53:CB:4F:80:67:51:EA:4A:04:E8:C0:63:BF:08:E1:72:A4:D4:90
X509v3 Authority Key Identifier:
keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:b0:96:4a:27:95:18:1d:43:c3:34:27:71:e7:95:3d:f2:31:
91:2b:cd:94:d0:ef:7e:64:d8:e3:63:51:0d:c2:e5:c0:93:c2:
d1:a7:e4:cc:c3:ac:55:dc:0d:2d:94:95:40:f8:b2:c8:fc:fb:
56:d0:6e:b8:5f:2c:0c:4d:99:ab:b1:62:30:9a:8d:e2:0f:de:
63:35:da:cf:a8:e8:1f:c4:53:63:2e:86:6c:c5:22:17:b6:6b:
83:2a:ca:35:32:89:9b:09:af:62:4f:67:1d:4c:3d:ce:3f:bf:
3d:2a:6c:da:65:09:6c:d2:9f:2a:87:20:df:7a:13:b0:dd:04:
6d:f1:48:32:48:83:6e:c8:4d:23:de:06:66:a9:e7:10:eb:3c:
5c:21:75:9a:64:2c:64:76:36:29:79:6b:f3:3e:4f:ac:09:7c:
a6:17:9a:a2:37:b0:2e:59:4c:b4:c1:61:52:8c:c2:de:0d:8b:
42:70:b3:27:6f:36:56:39:b8:f7:67:be:a3:3c:7f:bd:d6:9a:
a2:76:2e:ed:22:6b:48:2f:a0:5d:2d:cd:15:ce:a1:c2:91:3f:
ac:16:e8:a3:08:5d:72:23:c6:6f:bd:0f:fb:ab:14:04:92:1f:
ea:74:90:81:c3:13:89:e1:37:46:b0:c5:3a:75:29:82:76:5a:
cd:8b:a8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 00:17:10 2026 by rpki-client