
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
File: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft (raw, json)
Hash identifier: KTM7+iWJ9D7Eb+W9f+YWU68puDT8tGDNl7w77ME+e7I=
Subject key identifier: 7D:87:5F:19:72:21:8A:B0:73:69:A3:CE:A5:47:38:E5:F3:41:35:01
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Certificate issuer: /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial: 0E52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
Manifest number: 0E2F
Signing time: Tue 12 May 2026 17:50:16 +0000
Manifest this update: Tue 12 May 2026 17:50:15 +0000
Manifest next update: Tue 19 May 2026 17:50:15 +0000
Files and hashes: 1: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl (hash: MmU+Syrto/uF/kFnJpPMfA8csFGcHO13LKwAbYuY4NA=)
2: 22639692E6FC11EEB3BCD10EC4F9AE02.roa (hash: jTINudEF1PytBKZidbXRaxHONjKZ1aZaJMZAVtgeI8c=)
3: 6D83AA1CBF5711EEAB9A037FC4F9AE02.roa (hash: BuWqwvZP/WAlc5pltyqdqjYN2tYsPZenNwkSyiZ+IjM=)
4: 471FC532E6FC11EE84213C0FC4F9AE02.roa (hash: Ec8W4gQuX0b++CAV01O5jV4Wjhz49qlbass79pnKtTU=)
5: 79666614E79311EC81D3720BC4F9AE02.roa (hash: zwfI7z3VRHjM1UE44yYU3R88zP61K+ImfUlgTgT4/G4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3666 (0xe52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Validity
Not Before: May 12 17:50:15 2026 GMT
Not After : May 19 17:50:15 2026 GMT
Subject: CN=6a036858-82e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:44:48:34:ee:60:66:e3:eb:c5:98:65:a9:
df:29:d9:c3:83:6b:04:ed:9c:e8:c8:8c:23:0f:84:
d6:32:e4:68:9e:d8:58:c2:d0:a4:01:f8:c9:68:51:
5d:ac:19:3b:5d:d3:12:0d:76:be:85:00:f0:21:c4:
94:bb:b8:b4:72:17:16:71:cc:90:fe:6d:0d:31:8e:
6d:62:d9:4b:1a:d3:d5:56:65:41:d0:8a:d7:b8:03:
c7:96:9b:1f:2a:6f:49:63:65:87:bf:d9:58:d4:3c:
53:10:c3:a2:d7:10:d1:84:59:22:f1:7c:b4:d7:4d:
81:02:f4:37:da:e6:36:8e:52:b2:0e:56:03:c3:a5:
ca:b0:84:5d:a2:4b:90:08:aa:77:80:f0:b6:7e:af:
45:7d:48:bc:3d:7d:ac:ae:cf:e5:a5:37:cc:57:d2:
f3:83:f1:c3:ce:2a:e0:58:d4:5b:45:cb:09:6e:c4:
83:5c:7f:90:ec:6a:98:6b:a4:3f:6f:f2:f2:8c:cc:
70:9d:4d:66:49:07:d1:63:5d:72:ba:b5:c4:ad:d2:
a7:64:09:58:b0:20:28:08:66:f5:54:2b:ff:82:3f:
27:24:2f:50:bc:8c:13:db:a1:d4:7b:d8:b7:9d:2f:
0f:dc:89:b3:96:e5:02:a0:aa:fc:66:63:e3:b0:04:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:87:5F:19:72:21:8A:B0:73:69:A3:CE:A5:47:38:E5:F3:41:35:01
X509v3 Authority Key Identifier:
keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:69:e9:58:c8:16:57:cb:e0:f7:a6:5f:7f:d6:2a:37:96:71:
ab:eb:fe:87:f6:cc:96:7f:8d:5a:01:9c:de:a9:11:41:2f:96:
95:25:6f:cb:24:9e:f3:1b:6b:26:b7:46:40:85:97:f5:d0:39:
2b:0b:82:1d:cb:65:5a:da:10:54:c6:06:83:b4:29:0f:75:2d:
e0:85:76:d2:72:5f:26:f3:50:18:73:72:3d:a4:85:64:cd:8d:
7c:01:2f:c4:25:8f:c5:8b:ee:7b:48:30:d3:ce:aa:36:eb:ff:
dd:88:cc:d5:b5:5b:f5:e7:d6:96:9c:0d:59:1e:94:15:39:22:
1b:cb:f8:81:64:99:e2:30:68:6c:ce:08:7c:54:37:f7:01:ba:
e3:ab:cb:ef:50:26:fe:55:50:bc:35:dd:a8:c4:0e:d9:f1:83:
4e:c5:fb:eb:90:b1:91:28:a1:42:7d:2a:3e:2d:16:d0:eb:c2:
4f:09:f4:d7:a5:29:5d:c0:b9:c9:8c:30:2c:66:27:06:3f:cc:
6d:90:cb:8c:d2:51:99:a4:f8:33:a2:4f:4f:82:f7:3a:98:4a:
df:95:99:a4:8d:b9:14:47:29:0d:5c:1b:7c:1c:37:c5:79:54:
9e:52:50:de:84:52:8f:98:e4:33:73:13:63:0a:a0:75:a7:a4:
ea:85:4c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:52:32 2026 by rpki-client