
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
File: -IHZTXommvaISDplHTc5GOeGUB4.mft (raw, json)
Hash identifier: 3u2lvIU94Qs01vbkZWnGXIUmsq3Gys9Ag4J9PFbCjEA=
Subject key identifier: 1F:12:A6:FA:51:CA:86:52:CA:92:9B:62:CC:30:89:DF:79:22:6C:41
Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
Certificate issuer: /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
Manifest number: 01F3
Signing time: Wed 25 Mar 2026 02:34:27 +0000
Manifest this update: Wed 25 Mar 2026 02:34:27 +0000
Manifest next update: Wed 01 Apr 2026 02:34:27 +0000
Files and hashes: 1: -IHZTXommvaISDplHTc5GOeGUB4.crl (hash: vLaWkyFFi/cVdET54K6vgwHvynYOWssiXQ6Gjm5ZJ04=)
2: 89E0172A2F2B11EE8CD3F880C4F9AE02.roa (hash: dd8IIaigjdeFVHSi8ZJQL2JFa2im8RBvLxqCRUWskxU=)
3: 8A50B69C2F2B11EE8CD3F880C4F9AE02.roa (hash: 8yrKk69D5xN242remo4AGa14gprPSgbcyqKZK/Du0rY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:34:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182644, serialNumber=F881D94D7A269AF688483A651D373918E786501E
Validity
Not Before: Mar 25 02:34:27 2026 GMT
Not After : Apr 1 02:34:27 2026 GMT
Subject: CN=69c349b3-5531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6c:4a:09:b3:2d:31:ef:5d:b3:cd:ef:32:2e:
e0:8d:40:f6:53:a3:86:8a:c5:ef:99:f8:63:10:79:
c1:e5:0e:4b:14:79:29:ef:2a:eb:65:ff:95:03:62:
d3:cf:ea:97:41:49:04:cb:48:73:6f:9a:a4:e5:bc:
5e:b1:f0:57:96:84:d8:ca:37:d2:86:2f:fb:94:09:
e0:2d:7f:f9:a4:3d:bf:7f:e7:68:94:f4:f0:7c:8a:
c4:19:b4:2a:f9:2a:ca:d2:0d:ba:48:d7:09:42:c1:
cc:49:6f:b6:5c:23:1a:15:3a:da:a5:50:68:ea:71:
80:2d:d8:02:10:9b:51:c4:d5:f1:37:2a:52:63:ab:
c9:c4:ae:b0:9d:13:d6:bd:ad:ee:e0:64:ef:84:32:
e5:4d:0e:e4:87:30:7a:a4:6e:8e:cb:3d:f7:f8:94:
1b:fb:22:f3:dd:c2:b8:66:2c:db:2b:62:a1:e1:fd:
ba:47:c6:b2:f3:5d:b5:af:c0:79:5b:0b:8c:00:b2:
81:42:21:e5:28:c9:3d:bb:6d:1e:ab:e7:95:7f:85:
2c:f1:bc:10:6a:b1:39:b7:5c:2f:cd:69:e9:69:4e:
0f:db:b5:60:c5:b1:a9:c4:c9:3e:b8:16:26:4f:46:
39:e9:57:ca:4d:b3:9f:e4:1d:79:6c:0b:d1:83:ed:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:12:A6:FA:51:CA:86:52:CA:92:9B:62:CC:30:89:DF:79:22:6C:41
X509v3 Authority Key Identifier:
keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:d5:dc:4f:2c:47:8e:43:44:18:23:80:2b:a1:83:de:c2:58:
bf:2c:7d:81:aa:f2:85:71:10:b0:b7:fc:92:21:ad:98:b0:2e:
94:8b:3f:2e:f7:75:f6:54:01:01:be:26:cf:97:b0:e9:03:0f:
b2:75:bb:52:c6:e3:b9:69:00:81:c3:95:15:5c:0e:b8:4c:80:
bc:e5:e4:dc:cf:6d:e7:da:19:54:bb:41:62:e0:57:22:5c:e0:
29:93:7e:8f:fd:d1:bf:b8:77:6c:5c:e2:30:a1:70:93:48:d4:
3b:a2:64:09:7f:0d:3f:65:7a:29:82:ad:17:cc:7c:48:62:eb:
58:62:07:bb:16:ba:d6:99:1e:d5:b7:8f:4f:03:61:d0:e0:81:
c2:7e:36:09:14:9f:a3:ea:6b:b0:fd:be:23:20:0a:be:04:48:
ee:ad:cb:28:59:24:2d:29:6b:46:e1:c8:14:ae:fc:a6:aa:65:
9d:d3:31:b5:83:f5:b4:af:4c:45:71:1c:d5:7a:a4:c5:20:81:
8f:83:2b:b9:a5:79:bd:69:f2:f1:25:ed:b6:ef:8f:a3:11:60:
23:cf:ef:e4:ee:e8:a4:a5:c5:46:3a:ba:e7:95:09:77:84:35:
dc:5c:dd:38:ab:da:23:bf:6d:1c:4d:48:f2:61:0e:c4:67:38:
70:f2:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:07 2026 by rpki-client