
$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
File: IiZie3PlFUazvVEODioN6qglIHg.mft (raw, json)
Hash identifier: ugr59t45szPOGdFiy81SowyzaxRkjjhhVAKmJBbvgMs=
Subject key identifier: 22:C3:19:3A:87:39:94:39:F9:4F:47:C1:39:C5:2E:AD:8F:BF:7D:7C
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Certificate issuer: /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
Manifest number: 81
Signing time: Thu 23 Jul 2026 09:37:11 +0000
Manifest this update: Thu 23 Jul 2026 09:37:10 +0000
Manifest next update: Thu 30 Jul 2026 09:37:10 +0000
Files and hashes: 1: IiZie3PlFUazvVEODioN6qglIHg.crl (hash: K/FeBLCnW+tuQVGQIEci5ZpopZ6t/oif7X59QZ5VONA=)
2: 1D6F4D7EEEC611F0B6553517716F56BC.roa (hash: mjkSPSU1CtFx25rdmfQRNQYhUhcPGhgag+X4DPy+syU=)
3: 1CED22CCEEC611F0B6553517716F56BC.roa (hash: yCZ1YjOxjTNparFE9ezut6qYMPYgcu+lh0VxqkB60X0=)
4: 1DF3803AEEC611F0B6553517716F56BC.roa (hash: ATMgVxPSynGqWdcAfi8xFi3AYSDzSjTxt/zALkRAATU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:37:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Validity
Not Before: Jul 23 09:37:10 2026 GMT
Not After : Jul 30 09:37:10 2026 GMT
Subject: CN=6a61e0c6-66b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:8e:7a:42:99:be:4a:ef:c7:7b:ed:d6:e4:
b2:1b:f7:88:93:c8:b6:8e:55:7a:c2:96:60:04:15:
2b:76:e1:10:b9:68:e4:7c:81:4b:6d:27:ed:c1:16:
18:ef:57:2f:32:87:00:c2:76:e4:b4:a2:32:72:c6:
99:e3:a6:9c:a4:57:1c:42:c0:14:b2:7f:23:46:b6:
ac:d9:99:37:af:49:28:a7:e3:57:cd:44:c2:f2:cb:
07:68:bf:55:8f:2e:fc:63:86:92:18:6f:4c:c5:8d:
ba:67:8d:0c:9c:11:9b:fe:74:c8:d2:a7:07:8a:86:
6c:4a:66:a7:f0:5c:1b:b2:96:66:23:92:ec:7c:4e:
e5:69:28:91:1f:15:e8:72:a5:e1:a4:5a:7a:6b:0a:
d9:dd:b7:23:09:69:fc:c9:4a:c6:72:f5:c7:04:66:
f8:5b:fe:bf:89:76:a3:5e:d0:3b:4a:86:3c:07:9c:
5d:b1:38:7a:14:93:af:50:16:a6:ce:aa:d4:08:a0:
9f:28:b1:e1:a0:1d:df:1f:27:6e:94:63:27:dc:ad:
8c:2d:cf:00:94:1f:00:95:25:1d:ec:0a:d1:a8:3c:
8d:ba:52:98:f8:6c:4d:a1:d8:24:31:df:fb:5a:4a:
77:a7:1a:2d:85:83:9a:b1:ae:b1:3d:3e:2d:ec:2d:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C3:19:3A:87:39:94:39:F9:4F:47:C1:39:C5:2E:AD:8F:BF:7D:7C
X509v3 Authority Key Identifier:
keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:40:35:17:ce:03:2c:28:f2:bb:de:b9:03:68:3c:3f:87:37:
06:66:3a:e2:b1:84:dc:c3:0c:b9:b5:3e:f3:0c:03:13:7e:73:
74:f4:ef:25:2f:98:42:ff:ab:44:8e:21:25:4d:1b:ab:d3:fe:
11:1d:24:4d:c0:c1:d3:bc:c1:a0:ca:b9:01:ca:f5:f6:ec:bc:
74:88:d1:6c:6c:95:1f:7f:00:45:1b:00:fb:9a:89:01:89:26:
1f:a7:56:7c:1f:15:a9:ab:6a:92:ae:c6:27:f8:83:f4:c4:08:
9e:3d:e9:82:e3:e3:22:92:7b:61:b1:2c:ad:6a:a5:89:63:2e:
ea:a8:ff:b1:6e:f8:9d:90:66:14:69:40:19:e9:1e:82:fa:d0:
28:61:7b:d7:dc:b3:fe:4d:fe:73:84:5b:17:61:3d:ca:65:3f:
9d:4a:43:df:2c:e7:68:2d:ef:7c:59:71:94:90:45:35:4b:65:
b7:be:ea:7e:42:b3:6e:ee:59:06:44:18:fb:a2:37:af:59:b0:
1d:26:a5:4a:83:12:43:e4:cc:0d:e2:b9:28:57:d6:ac:e3:07:
84:9d:37:a4:00:55:89:26:17:04:22:d5:a6:96:be:b1:68:91:
1e:4e:73:c9:3c:c0:22:38:85:00:a4:66:6a:81:d5:96:3b:4c:
0c:65:41:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:26 2026 by rpki-client