
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
File: 0rolH4MRa7tToMiSMQ9P963v_es.mft (raw, json)
Hash identifier: 0RPmGnfW7pDNKqBzs4ptoMNcYfz2nHm9DnT/ZmH1nmk=
Subject key identifier: 01:02:93:4F:C8:CF:7C:42:B7:FA:86:83:03:65:39:DF:2C:C4:D5:20
Authority key identifier: D2:BA:25:1F:83:11:6B:BB:53:A0:C8:92:31:0F:4F:F7:AD:EF:FD:EB
Certificate issuer: /CN=A9175B42/serialNumber=D2BA251F83116BBB53A0C892310F4FF7ADEFFDEB
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
Manifest number: E5
Signing time: Thu 23 Jul 2026 08:13:44 +0000
Manifest this update: Thu 23 Jul 2026 08:13:44 +0000
Manifest next update: Thu 30 Jul 2026 08:13:44 +0000
Files and hashes: 1: 0rolH4MRa7tToMiSMQ9P963v_es.crl (hash: /hsIRAiRznQ5PuDJksCqKFQYzCqquLAfp0GsWl0BRo0=)
2: EABFF866266511F0A3060E66C4F9AE02.roa (hash: FisgyItAVG3Y15df/opUvBoxNb4fchWDbDPeeu269Zk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.crl
rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175B42, serialNumber=D2BA251F83116BBB53A0C892310F4FF7ADEFFDEB
Validity
Not Before: Jul 23 08:13:44 2026 GMT
Not After : Jul 30 08:13:44 2026 GMT
Subject: CN=6a61cd38-c94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:a9:a1:f3:e0:d7:01:3d:a7:aa:3a:f9:f8:
61:9c:89:52:3f:93:c5:a3:0f:df:4e:3b:b4:ca:cc:
7b:0b:a8:4a:b0:df:25:a1:6c:10:f0:7a:ed:5e:3e:
6d:27:6c:1a:2e:a3:ca:90:b9:a6:fb:fd:a9:5b:5f:
ac:19:a2:ad:28:84:fe:18:f6:33:ec:6c:6a:6a:66:
28:80:a9:0f:e8:a7:ef:b6:31:e7:2b:2f:99:e1:88:
28:4b:1c:2b:8d:7f:38:87:c3:5c:f6:0f:d0:13:89:
d9:48:8d:24:86:af:99:ea:73:c0:a1:44:9e:63:c6:
86:53:cd:59:87:6a:4e:8a:4d:fa:61:f6:8d:58:7c:
12:74:95:7f:37:58:ae:42:c4:a5:3b:1e:10:a4:8b:
d8:27:13:23:bf:8c:85:44:d2:86:b8:76:7f:db:ef:
ee:9e:7a:59:1e:bd:76:06:19:eb:f3:a9:84:b3:d0:
b0:eb:92:4c:1a:0d:7e:b0:50:71:19:d6:f5:05:0f:
4b:03:9c:ba:bb:f6:2d:5b:a4:80:15:6e:c0:6f:84:
b7:21:fa:6b:ae:83:6d:aa:87:60:31:37:57:66:1a:
7e:dc:ce:1d:ec:cd:55:70:f2:57:a3:d9:9a:bf:64:
8a:81:f4:b8:8e:8d:89:40:3a:d5:44:7d:c4:05:70:
23:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:93:4F:C8:CF:7C:42:B7:FA:86:83:03:65:39:DF:2C:C4:D5:20
X509v3 Authority Key Identifier:
keyid:D2:BA:25:1F:83:11:6B:BB:53:A0:C8:92:31:0F:4F:F7:AD:EF:FD:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:11:9c:bb:c5:44:fe:0d:3d:f5:5e:45:d5:34:62:e5:be:d0:
dc:a7:5b:7b:f5:83:50:8d:64:5a:db:8d:32:9d:9b:03:0b:57:
f7:60:03:b2:af:64:d3:55:30:22:81:9c:b8:a4:91:91:ca:c5:
3d:b0:56:97:0c:f2:8e:e3:aa:57:c5:83:4b:0d:9b:73:a7:0c:
3c:c4:77:bb:cc:6e:0a:37:dd:50:69:94:81:4b:75:b1:40:a0:
83:09:03:3e:ba:0b:a5:c8:ac:0e:ad:af:b1:20:56:f5:e7:09:
71:34:4d:18:c5:11:d6:95:8b:c4:06:a0:08:e6:ad:9c:19:df:
1e:fa:2f:82:45:da:8d:f9:d0:7a:0a:a5:09:5d:30:80:01:72:
87:29:32:b5:a5:42:a7:38:16:6e:4b:e6:ec:27:8c:48:63:37:
f6:d3:29:96:71:79:7c:ea:3a:2d:bf:54:9d:f4:7d:4b:9f:27:
e7:db:5f:35:54:74:64:ae:b9:12:ff:93:77:42:a1:e5:eb:70:
3a:89:1b:7e:bf:e6:bb:51:1f:b6:34:fb:6b:99:19:aa:d2:7f:
f9:a3:3f:18:c4:55:5f:2a:f7:70:e1:b6:cb:bc:ae:98:9f:be:
59:e1:c6:9f:d3:0a:a9:b7:85:d2:5e:e1:98:ba:8d:4e:c2:66:
74:c5:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:31 2026 by rpki-client