
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
File: H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft (raw, json)
Hash identifier: tlVOhtoOna+g/G5GF4EiB9tuECIoA7Ot6nZ4VuNUpDU=
Subject key identifier: BD:A9:7C:83:36:05:A0:9A:C4:B0:4C:A7:7C:6C:86:5F:5B:B9:AE:F8
Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14
Certificate issuer: /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14
Certificate serial: 0276
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
Manifest number: 026F
Signing time: Wed 25 Mar 2026 01:28:38 +0000
Manifest this update: Wed 25 Mar 2026 01:28:37 +0000
Manifest next update: Wed 01 Apr 2026 01:28:37 +0000
Files and hashes: 1: H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl (hash: HFIFT1U1SSJ27m5FAwC6EugAtNng0PBMwd0N8q7BhKk=)
2: 51CC97DE72D711ED95179B5EC4F9AE02.roa (hash: dEReDEDJySfii8pKlYcee3L1HbPziwJ3gRBbj65y4hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl
rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 630 (0x276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3ED8, serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14
Validity
Not Before: Mar 25 01:28:37 2026 GMT
Not After : Apr 1 01:28:37 2026 GMT
Subject: CN=69c33a46-a85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:be:7c:9b:23:fc:67:88:35:34:38:4e:52:
89:5f:12:64:74:7d:6d:59:63:d9:83:2e:99:58:b1:
8a:ad:d7:f6:f6:1f:d4:e0:b0:8f:47:ae:8b:66:55:
8b:e4:b9:08:79:c2:0b:05:39:43:3a:07:b2:6c:e6:
fb:a4:f5:85:e0:c3:6d:b3:b7:28:a7:fd:5c:dd:7d:
eb:73:d6:be:dd:af:18:82:07:98:ed:72:70:9f:b1:
a3:3f:7b:e3:fe:f5:3e:ad:c9:8d:6e:0a:80:67:19:
ec:81:5b:5d:e8:84:de:57:b9:68:78:1a:42:2c:b0:
59:17:16:fc:b5:8d:28:a5:26:49:ab:17:8f:32:53:
6d:ee:04:14:d5:70:3d:ed:c8:2c:16:22:72:88:e9:
6f:93:7d:9d:fa:30:32:da:63:81:1a:08:1f:de:fd:
6c:6d:95:75:7f:46:39:61:36:80:8d:ee:48:00:e4:
b5:df:5c:0b:a8:cb:55:34:f3:37:b6:ac:d8:fb:e1:
c4:df:bf:3a:0a:ef:e0:95:cd:df:be:82:b0:62:d0:
af:ec:7d:60:79:25:1c:7c:56:b5:18:2d:ec:26:f8:
66:58:c6:30:8d:3a:2a:c5:eb:2f:be:d3:ca:12:f9:
47:86:ab:6a:68:66:73:d3:6d:a2:38:f4:ec:fd:e1:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A9:7C:83:36:05:A0:9A:C4:B0:4C:A7:7C:6C:86:5F:5B:B9:AE:F8
X509v3 Authority Key Identifier:
keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dc:a6:15:9d:ff:4c:3c:41:d5:b6:7a:d4:0e:7f:3e:da:32:
a7:75:15:17:d4:1c:c7:bb:05:a4:a9:c5:11:07:8d:59:2b:cb:
36:8e:2d:9c:f3:18:7a:32:91:e5:55:96:96:f9:d2:2f:cc:43:
46:44:36:2a:43:b5:35:41:5c:03:b6:3d:5f:fd:a2:72:6f:19:
86:7d:f7:3f:df:09:71:15:dd:44:b5:73:ad:e6:10:7b:27:c6:
16:5c:2d:ee:56:99:86:3c:1d:78:2d:56:e7:63:fb:a0:02:d0:
fa:92:94:1f:83:43:ed:4f:db:e4:d4:03:b8:a1:9c:ff:7b:07:
1f:34:ed:5b:8d:6f:b5:8f:8a:01:6b:70:3f:95:76:b0:d9:ff:
80:29:5c:08:05:d1:e6:84:c8:75:22:8b:42:52:db:63:a5:39:
d0:44:9a:fe:e6:cc:4b:23:5c:a6:e6:1b:54:6d:b6:09:65:40:
98:7c:0e:51:e9:12:44:e2:be:f9:24:32:0b:24:c2:f7:ae:dd:
b7:9f:d4:7d:ff:f7:07:c1:31:5a:25:f0:5f:32:a1:ac:ab:ee:
f9:70:32:38:29:ae:18:da:50:a2:d1:de:b9:89:c3:e5:d7:6f:
08:01:d8:3e:24:50:4f:56:0f:74:26:0c:a2:f4:77:93:a8:b1:
b5:39:92:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:28 2026 by rpki-client