
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
File: 9fHi3rMlVisihf-LXeJd8srfdwc.mft (raw, json)
Hash identifier: C2udhaAHx5wVz2V1vbxl/kFAEUeBBedXEPVx1vPpPjA=
Subject key identifier: 86:97:0F:F6:D6:51:75:9E:94:92:D1:67:0A:BF:49:DF:48:B4:4B:5D
Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07
Certificate issuer: /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
Manifest number: 0170
Signing time: Wed 25 Mar 2026 03:59:14 +0000
Manifest this update: Wed 25 Mar 2026 03:59:14 +0000
Manifest next update: Wed 01 Apr 2026 03:59:14 +0000
Files and hashes: 1: 9fHi3rMlVisihf-LXeJd8srfdwc.crl (hash: uIm6DW+hgaI6Zod4is78O5LTh7mDgNz24+dFVCc5I0Q=)
2: E0207030F13611EE869F9E34C4F9AE02.roa (hash: N7PsOkUIroaf7tJIiPk9lgTxa0MDEHWzjyCGNOP041M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl
rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:59:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B4B5, serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
Validity
Not Before: Mar 25 03:59:14 2026 GMT
Not After : Apr 1 03:59:14 2026 GMT
Subject: CN=69c35d92-5959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:b5:3f:6b:e0:77:3b:15:5b:38:72:66:d0:
50:a7:19:9b:68:61:99:cb:26:cf:26:5a:12:99:da:
bc:f5:4e:e4:54:56:9e:63:0a:59:fc:73:b4:3a:77:
71:68:95:22:74:38:27:84:f8:6c:7a:3a:7d:68:bd:
55:a3:c8:4c:0b:df:4a:b7:eb:17:a6:a4:79:8d:a4:
fc:51:eb:7f:7d:ec:15:b7:11:88:e6:32:67:3c:b5:
2d:26:4c:a2:c7:64:3c:50:7e:9e:4d:95:25:e4:92:
13:91:a7:3e:ed:29:aa:34:eb:a9:6b:bf:d2:7f:40:
05:b1:e0:d3:36:41:0d:e6:e1:f8:1d:ea:50:fa:13:
88:93:73:e1:3f:33:19:b3:82:2c:dc:b8:99:ae:80:
da:0a:e5:e7:b4:a8:dd:bb:e8:83:71:6d:2d:1e:53:
40:e5:43:d8:46:9a:16:03:47:16:30:39:86:36:9f:
6b:b8:1a:cc:c4:58:8c:66:15:c4:b9:79:1d:44:50:
6d:46:32:ad:3a:a9:aa:03:40:97:47:b7:cc:53:af:
ba:37:2b:32:eb:44:6a:02:d6:11:fc:13:f9:91:5c:
70:cf:ad:9c:c0:fd:b2:ed:77:63:0b:67:0b:be:ec:
1a:4b:18:32:13:ed:ad:74:04:de:71:a4:e6:60:9e:
fa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:97:0F:F6:D6:51:75:9E:94:92:D1:67:0A:BF:49:DF:48:B4:4B:5D
X509v3 Authority Key Identifier:
keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:51:ba:7b:4d:51:36:77:58:bc:55:c1:06:1a:fd:4d:1d:48:
1c:15:d7:a5:a6:e8:e8:1c:5c:fa:ed:73:81:b9:b6:28:01:c5:
2c:24:29:9e:42:fa:0e:57:d4:1f:22:0e:1c:7d:d3:af:25:70:
7f:35:ae:6b:0d:63:91:46:7f:ee:6b:a6:74:19:e0:46:42:e4:
05:89:2f:05:7b:a5:4e:c1:e4:bc:19:a1:c6:30:33:b5:3c:af:
37:0f:28:0b:61:6d:e6:6f:04:1f:eb:13:d2:29:2f:e5:cb:04:
9f:5a:b5:97:9f:5f:ed:23:9c:1b:fb:8f:1e:b7:5b:0c:ba:59:
33:f4:d8:b4:c8:4d:0f:dd:b8:6a:a5:d2:77:02:c6:6b:79:cb:
0d:3f:40:71:96:f9:c7:3e:17:d5:d2:de:58:b9:f4:e2:08:89:
5b:ab:1b:c1:87:6c:2a:94:ca:c0:d5:1e:4f:16:25:53:01:92:
25:de:92:f4:cd:0d:c6:6b:89:69:93:02:3b:00:6b:0c:03:bb:
bb:5d:95:dd:53:ed:fc:6e:fa:b4:00:99:7d:0c:d4:8c:bd:44:
eb:06:0c:0a:d0:32:59:b9:e7:15:42:71:a0:9a:89:c4:66:b6:
c8:63:ca:1f:c3:a9:dd:7b:75:90:72:57:01:9c:a1:66:f9:24:
ac:46:b3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:00:53 2026 by rpki-client