
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
File: Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json)
Hash identifier: J2ZDdWol5TYfXGAbTKmTHXv8OxrBMgAkq7FKbu1PbU4=
Subject key identifier: 55:7B:29:E4:E1:89:30:4C:F9:11:3D:54:AA:C8:DD:A1:85:84:0B:12
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial: 0521
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
Manifest number: 04D6
Signing time: Wed 13 May 2026 00:07:13 +0000
Manifest this update: Wed 13 May 2026 00:07:12 +0000
Manifest next update: Wed 20 May 2026 00:07:12 +0000
Files and hashes: 1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: QbDtZcwFNGKZEbs0eJO+5wL2ggeS52N9hLyej9B87Ww=)
2: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: J/y5zeodGHbN3vp7O7AJhQI6RPkj8TQkWk7gr7sHHCA=)
3: 4B44D6EC0F3C11F1BF24A2AC1C3D8C67.roa (hash: p+BwKAodmJqbLlqXyZtD+mJHN7NUdRLLCP8+RPEq8R4=)
4: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: 2QtjnY/xrXLEykN5W8u+hPxfRcseLCmC+14qCL2SI+w=)
5: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: sK7hOQtBbdjqCpDICxDk4yk4JTjSJi8T3sqSf4Lha9w=)
6: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: UCg4wJkvMAwrQhdPO9e6tz9kKiLqe8tkbkp5RwOBI9k=)
7: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: 3Nhpzz36VSFEHxJya2rE/6rzHTYaQVksxEeUha/irsc=)
8: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: u+MRGHbFeFUPlLfGYwJEnpOiyClJtJ0KRuVBvJpUNDk=)
9: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: ErPhHuDK3ekByL6ifWQZAzFYI/duFVOlJelFvK4aMbc=)
10: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: ddJzWQzhPMRW8RWCPYnqPYLIbALxTv96n4V/wf2N7x8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1313 (0x521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Validity
Not Before: May 13 00:07:12 2026 GMT
Not After : May 20 00:07:12 2026 GMT
Subject: CN=6a03c0b1-badf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:87:d5:cc:c8:ce:5d:d2:f9:8d:95:28:aa:3e:
a4:93:26:c8:7c:6d:31:29:81:6a:ef:28:71:5a:3e:
3e:64:41:7e:1e:0a:5c:d2:18:8f:92:3c:a0:2f:c1:
fe:dd:12:5e:8b:1b:3b:fd:35:f2:41:8c:2c:60:c4:
0e:b8:0c:5d:2d:8a:95:39:be:bf:00:8a:df:c2:0c:
29:6b:36:78:eb:ae:8f:19:ed:36:fb:46:52:31:c6:
5e:5b:e5:6c:6c:2a:f1:ae:e8:d4:f2:c9:38:fc:b8:
3b:cc:77:f0:49:f1:09:da:c5:39:b3:e3:06:63:d6:
a1:21:61:00:1d:cc:d6:df:14:2c:96:fd:35:9a:f7:
5f:ec:85:6c:b5:f8:9c:b3:03:a0:3b:28:94:18:1d:
47:91:ca:14:17:f3:86:62:39:5e:ff:a5:4f:36:05:
af:8f:f1:b7:17:3c:9c:3a:77:47:f3:95:7a:16:5a:
aa:bc:12:a2:ea:60:77:3c:d8:c3:e4:bf:20:57:ef:
e3:a7:49:30:9e:f5:3e:b2:67:21:ee:95:a3:1a:cd:
07:3e:ea:5c:7d:14:23:80:ae:5b:e1:c7:ed:59:33:
a5:8f:59:5a:ef:b8:b9:8e:b4:a5:d8:f9:c9:64:39:
63:f8:e9:70:7c:83:98:db:00:ea:e3:6f:8e:c0:3c:
7f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7B:29:E4:E1:89:30:4C:F9:11:3D:54:AA:C8:DD:A1:85:84:0B:12
X509v3 Authority Key Identifier:
keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a6:d8:50:8f:4c:85:da:c8:9f:8a:5a:dd:c1:f1:eb:28:e0:
a8:23:d7:56:84:77:39:f2:9a:6b:f1:63:1a:a0:86:d1:ce:2b:
e9:a7:58:f3:73:a8:6c:0a:da:40:3c:b4:1d:89:2e:7e:68:0e:
31:10:02:4c:53:79:50:2c:60:28:1c:de:59:1b:ec:ec:31:f9:
37:21:d8:c6:c1:78:de:1b:f4:b7:6f:a0:cf:c5:4d:be:d4:6d:
ae:15:a8:04:3a:95:f3:96:96:26:1d:a2:a6:5c:fd:69:a7:b2:
bc:5e:c6:b4:b1:75:b5:3d:97:bc:36:da:02:3c:73:86:82:1b:
ec:80:dd:c3:9d:90:4f:34:69:3c:b3:82:3c:a2:47:13:bd:88:
4b:ab:45:05:67:cd:58:0a:a4:1a:e3:ba:34:0f:a7:64:78:e7:
86:bd:27:9a:ba:8a:af:8e:de:4b:69:e4:ca:18:fe:24:56:c9:
ce:ed:b6:90:28:57:9e:1c:b8:94:7c:1b:6e:9b:b3:60:37:71:
af:d2:cd:4e:c9:31:ed:94:77:18:85:15:0c:e4:ed:19:90:72:
38:52:72:56:f0:30:b1:51:f7:00:b9:8b:1d:13:a0:83:ac:34:
4e:22:16:a8:63:99:41:a1:d4:45:87:8a:47:eb:cd:9a:73:1e:
bd:88:a0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:19 2026 by rpki-client