
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
File: h1thdAzTcL1LSk9q6gqGCDiNuoo.mft (raw, json)
Hash identifier: fZVn4HIVnABlg0t1CqtaXaPH2Sp2ZXiZh2jn+RYNajI=
Subject key identifier: 5E:90:23:40:03:3D:9A:F4:76:C4:DF:30:68:1F:ED:3D:65:BA:0D:C0
Authority key identifier: 87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
Certificate issuer: /CN=A9125852/serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
Manifest number: B2
Signing time: Wed 25 Mar 2026 06:20:53 +0000
Manifest this update: Wed 25 Mar 2026 06:20:53 +0000
Manifest next update: Wed 01 Apr 2026 06:20:53 +0000
Files and hashes: 1: h1thdAzTcL1LSk9q6gqGCDiNuoo.crl (hash: uk8viPPyxcVSG2LcZ8LAXIHvIW47tqJHPYRiFXhmSTg=)
2: 36E3783A1BA311F0985A7C2DC4F9AE02.roa (hash: XUeovlZ/4oeHJvRX/WJ4baIyTmKgtfV6QNue3wAaFAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:20:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125852, serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Validity
Not Before: Mar 25 06:20:53 2026 GMT
Not After : Apr 1 06:20:53 2026 GMT
Subject: CN=69c37ec5-a4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:d3:f6:27:10:25:18:0d:13:91:81:ea:a2:
78:3b:e7:d0:c3:5e:64:cc:b2:55:84:3e:a3:dd:af:
ab:83:e4:1a:ba:07:52:74:c4:14:4f:7a:f3:ed:e3:
69:97:14:42:e8:69:f7:c5:8f:5f:bd:17:25:ce:68:
5f:f1:9a:ba:cf:68:40:a6:bc:e2:57:a6:3c:dc:24:
58:78:56:1a:a8:a8:66:61:97:c5:cd:29:51:ca:31:
7a:dc:36:83:c8:36:e7:b8:31:6b:2e:ec:19:d9:8d:
07:18:38:da:28:61:4a:15:67:ac:9c:83:21:64:90:
b9:7b:72:e9:27:c1:eb:12:a0:9d:ef:80:12:d6:63:
c8:ea:9f:c4:6f:a7:f1:2a:0e:35:c1:45:e7:5e:77:
5f:64:4e:67:84:92:54:a1:39:79:e6:18:91:4a:c9:
82:aa:44:cc:19:cb:ea:b6:5a:46:ed:97:7c:f2:79:
3f:67:75:cc:c0:0c:fe:50:26:53:e5:2a:40:77:0a:
65:94:a4:c6:f0:2a:b2:9f:94:0f:1a:0d:8a:ba:26:
9f:34:b5:84:7a:d2:0f:00:9b:8b:93:fb:b6:31:f0:
a5:ba:5c:1d:f3:1d:55:6f:dc:f0:99:03:1e:e9:aa:
cc:2a:e7:fc:a1:cb:b9:06:73:a6:e0:85:94:ee:60:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:90:23:40:03:3D:9A:F4:76:C4:DF:30:68:1F:ED:3D:65:BA:0D:C0
X509v3 Authority Key Identifier:
keyid:87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:d0:d4:71:c5:9a:c5:f9:2c:5e:ff:27:75:97:e7:1f:7a:c0:
8d:c5:57:62:70:77:a4:d7:e8:37:69:92:8e:2a:6c:7a:12:47:
f6:9a:bc:7f:e5:fa:72:d0:a5:c7:62:db:8c:41:1e:0e:b9:0e:
8a:5e:77:e7:8b:3a:f9:49:3a:0a:48:94:37:d0:5e:2d:f9:d7:
0f:88:2b:42:78:03:26:22:9a:73:c3:27:3f:e6:2e:9e:d4:61:
12:0c:a3:51:86:a4:74:9d:f9:6d:09:8e:81:5f:c0:3a:fe:33:
4e:9b:94:29:c9:c1:6d:6e:54:86:2a:ae:1c:e7:90:96:db:6e:
14:35:a0:27:36:53:99:7c:d9:f3:79:bc:b8:8d:57:3d:08:97:
c8:66:e6:c9:ea:36:d9:19:4e:c8:53:c7:cc:b1:57:a1:e0:09:
b8:8c:1e:2c:5f:0d:fc:f9:15:5d:c8:9d:9c:87:f3:1e:7d:bd:
f6:d8:61:63:3b:ae:c1:47:81:e6:48:7d:64:0b:10:38:d8:eb:
ee:25:df:0b:83:ba:cd:7b:fb:04:43:28:73:3a:65:08:59:6a:
1d:a7:eb:ee:52:a4:9a:70:aa:cf:a8:e1:f5:6c:91:fe:69:63:
d6:47:7d:76:a7:8a:db:69:b9:e7:b7:c0:2a:1a:8c:06:f2:2b:
95:cb:91:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:21:36 2026 by rpki-client