
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
File: h1thdAzTcL1LSk9q6gqGCDiNuoo.mft (raw, json)
Hash identifier: XLBZ21J0HU4t063NoPsU0Af4UyAeNpIfnUm8kjEJpto=
Subject key identifier: 34:88:9D:9F:F5:F2:CB:13:2B:EF:65:F1:E0:87:8A:CE:81:CE:0E:07
Authority key identifier: 87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
Certificate issuer: /CN=A9125852/serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
Manifest number: EE
Signing time: Thu 23 Jul 2026 08:09:15 +0000
Manifest this update: Thu 23 Jul 2026 08:09:14 +0000
Manifest next update: Thu 30 Jul 2026 08:09:14 +0000
Files and hashes: 1: h1thdAzTcL1LSk9q6gqGCDiNuoo.crl (hash: zLmLu4B023ubFA7/XOFVT9ztz9jRk/hqDG3Y7xsZRjU=)
2: 36E3783A1BA311F0985A7C2DC4F9AE02.roa (hash: XUeovlZ/4oeHJvRX/WJ4baIyTmKgtfV6QNue3wAaFAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125852, serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Validity
Not Before: Jul 23 08:09:14 2026 GMT
Not After : Jul 30 08:09:14 2026 GMT
Subject: CN=6a61cc2b-a49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:60:5c:ef:2d:ac:9c:55:94:d3:8c:d9:8d:ab:
ad:43:b6:57:b2:21:85:3a:ac:fb:29:3f:ab:70:ff:
61:34:a1:20:f6:90:79:79:b7:76:70:a6:6d:36:d1:
08:28:a2:78:be:ae:9f:09:13:ce:6e:30:45:33:31:
d2:2c:40:00:fb:35:e4:65:4d:6f:f0:bd:25:74:29:
8e:6f:27:6a:7a:9e:3b:a9:fe:5b:86:5a:ae:d0:9f:
99:56:46:47:9b:5e:44:58:7f:fe:cb:85:3f:14:5d:
8a:8c:62:1e:f4:c6:3c:74:f6:4d:e5:a7:36:98:59:
a1:cc:f4:22:44:3e:cf:9c:f5:da:42:9b:12:7e:c7:
bb:31:04:e8:55:72:6a:ca:6b:46:98:96:33:1e:39:
d2:45:9b:2d:ca:29:da:d5:b4:5d:c2:17:f4:19:8c:
d5:f5:16:15:10:8a:64:58:e0:c5:43:1c:8a:a6:47:
fc:24:a1:73:eb:17:eb:44:7e:66:8b:da:0b:16:d7:
b5:56:51:47:73:f3:15:76:14:ef:d3:5b:9a:a7:2a:
51:6b:f4:5b:8b:c3:ce:78:25:c5:21:4c:6e:f3:0c:
29:68:50:98:b1:0b:ed:53:41:41:a1:26:b9:27:1d:
8d:8e:85:32:e0:91:5d:3e:f4:8f:47:5c:d9:c4:4d:
33:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:88:9D:9F:F5:F2:CB:13:2B:EF:65:F1:E0:87:8A:CE:81:CE:0E:07
X509v3 Authority Key Identifier:
keyid:87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:70:95:b5:d1:4f:93:24:2d:12:21:3e:d3:f9:61:ba:62:1d:
dc:d8:7f:58:c5:89:59:2a:73:ec:0a:53:f6:4d:90:85:9f:01:
43:47:77:21:ff:be:a8:2b:73:2e:f0:0c:ec:68:6c:bb:87:88:
ff:7c:be:4b:24:8c:cb:c6:c4:13:b5:b0:ca:1e:38:03:19:88:
bc:f6:76:c2:17:7d:1d:81:03:8e:fb:de:c8:cb:d1:77:fb:fa:
94:5a:96:63:f4:7d:5b:11:7a:55:13:33:30:a0:2e:42:74:91:
2d:48:66:5f:90:de:50:d4:3f:06:a4:15:2e:a2:59:c6:6d:b9:
21:aa:0c:1a:7a:a7:f0:d5:bf:4d:81:38:01:3d:01:c4:60:b2:
35:54:60:5d:eb:7c:0f:7e:be:4f:d4:d0:e5:0a:00:8e:44:26:
39:19:5f:79:55:fb:fb:9b:39:ab:c0:1d:64:8d:e2:8d:d3:98:
51:dd:4e:5f:0e:eb:bf:67:fd:34:8b:f8:0e:d0:a5:62:5e:0b:
31:4f:bc:89:69:a3:b0:10:02:39:26:97:78:13:f2:39:f7:c0:
69:30:32:ef:51:16:d9:a0:f2:2d:73:97:58:41:53:fc:3a:56:
fd:de:d4:3c:27:03:d8:20:46:d7:48:f6:d4:d6:5e:d3:5a:7f:
38:52:1f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:30 2026 by rpki-client