
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
File: 0rolH4MRa7tToMiSMQ9P963v_es.mft (raw, json)
Hash identifier: VlVm+EzmrFWO6b7CrOXh5dciJpAqUVyrWaTKukUVM84=
Subject key identifier: 70:B6:E2:60:6D:40:DC:46:43:38:C5:71:84:0A:3C:BF:CC:45:CA:38
Authority key identifier: D2:BA:25:1F:83:11:6B:BB:53:A0:C8:92:31:0F:4F:F7:AD:EF:FD:EB
Certificate issuer: /CN=A9175B42/serialNumber=D2BA251F83116BBB53A0C892310F4FF7ADEFFDEB
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
Manifest number: A7
Signing time: Wed 25 Mar 2026 06:24:56 +0000
Manifest this update: Wed 25 Mar 2026 06:24:56 +0000
Manifest next update: Wed 01 Apr 2026 06:24:56 +0000
Files and hashes: 1: 0rolH4MRa7tToMiSMQ9P963v_es.crl (hash: ObUHYmKxZCzYp1i8cLipEZUUuhuV3zMA1mMgWOrmR/I=)
2: EABFF866266511F0A3060E66C4F9AE02.roa (hash: 3VcOAffEJ0gAEFY9o/GWgUHQvlmy/gzyZiJXevjQCoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.crl
rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175B42, serialNumber=D2BA251F83116BBB53A0C892310F4FF7ADEFFDEB
Validity
Not Before: Mar 25 06:24:56 2026 GMT
Not After : Apr 1 06:24:56 2026 GMT
Subject: CN=69c37fb8-55bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:6d:a4:6c:f3:4e:f2:f5:fc:44:f4:e2:08:
4f:00:e1:4c:fc:a7:36:41:28:38:f9:f6:87:7e:d7:
37:0e:d5:d6:37:3f:59:52:ae:67:02:3b:ed:e0:6b:
d7:b8:80:b2:30:b4:02:b2:a9:1b:fc:89:4f:25:8a:
76:5c:76:3e:e0:6d:27:74:14:f9:e4:b8:29:cd:b0:
73:b4:88:ea:66:e8:4e:d3:d4:7f:d3:96:38:d4:18:
01:98:c0:3e:50:88:c0:7f:67:50:2a:5a:11:28:f8:
1e:e8:ff:d6:4e:15:0e:cf:90:b4:59:40:f2:d6:ba:
bc:09:4f:7f:7f:67:e2:59:2c:4f:06:ff:46:ca:4f:
ab:79:9e:77:7b:58:65:56:94:59:72:cd:a8:e5:01:
0c:ef:90:5d:00:c2:26:36:d9:48:ed:03:74:26:07:
2f:a5:91:af:66:d7:c2:b1:9b:a6:53:36:47:1c:86:
da:57:b5:e0:c7:25:3a:78:1d:c1:b9:ee:d6:42:6a:
78:06:58:a4:73:00:3f:74:4f:73:10:45:b3:5e:c6:
bd:7c:e6:2f:4b:f1:96:12:8c:ed:55:7a:ec:c4:1d:
c4:95:06:7c:c0:0d:7d:2f:83:ea:40:35:de:db:94:
00:10:b2:46:40:58:73:79:9a:9f:25:11:cc:f5:ea:
e5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B6:E2:60:6D:40:DC:46:43:38:C5:71:84:0A:3C:BF:CC:45:CA:38
X509v3 Authority Key Identifier:
keyid:D2:BA:25:1F:83:11:6B:BB:53:A0:C8:92:31:0F:4F:F7:AD:EF:FD:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:af:54:8c:e5:41:e4:8f:1f:36:c1:57:06:6b:f4:25:23:cf:
0a:4f:7d:48:38:c1:89:91:58:58:a8:74:1f:f8:b7:07:67:fa:
4d:39:62:ce:1f:2b:d1:6b:a2:94:08:75:27:33:ac:b8:03:89:
34:06:ef:2a:54:bd:86:12:cf:60:06:bc:cd:0b:8b:44:fb:c7:
75:51:01:7f:a7:81:cc:dc:83:2d:0d:97:b2:78:68:2a:55:a3:
e1:eb:bc:82:e9:e8:2a:6a:30:39:b4:d7:c4:a9:21:fb:4b:d6:
15:cd:4e:2a:0b:1a:a2:04:37:26:68:d9:8a:98:cd:68:3c:2e:
4e:8f:72:4f:b9:cb:99:e5:b3:30:ef:65:9c:1c:80:c4:d6:d6:
f4:0a:fd:e8:44:54:df:ab:a0:85:8b:7b:43:b1:dc:c0:21:37:
24:c8:49:9e:f8:a4:c3:cd:5f:17:08:e2:26:73:44:60:8b:15:
dd:9f:55:23:c4:29:ca:7d:b3:88:df:08:ac:09:fc:50:74:74:
5c:7a:8e:6d:d0:65:6f:3e:5f:6a:82:0e:76:3a:70:9f:8a:0b:
3f:e6:f2:92:e5:67:d0:57:e4:fc:9f:89:2d:cd:f4:24:4f:71:
b8:5f:a3:b4:a3:90:7a:a9:5a:c9:86:cc:11:09:b5:d8:35:1a:
ad:49:1e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:55 2026 by rpki-client