
$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
File: IiZie3PlFUazvVEODioN6qglIHg.mft (raw, json)
Hash identifier: j3ISqKzcRELVZH4BuZWbYfrVggy5B6xZ2lYetK5C3bg=
Subject key identifier: 1B:43:B6:B4:0D:63:2A:84:8E:F9:34:45:64:3E:F0:1A:50:37:3B:DA
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Certificate issuer: /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
Manifest number: 5D
Signing time: Mon 11 May 2026 08:17:29 +0000
Manifest this update: Mon 11 May 2026 08:17:29 +0000
Manifest next update: Mon 18 May 2026 08:17:29 +0000
Files and hashes: 1: IiZie3PlFUazvVEODioN6qglIHg.crl (hash: ThTDsFCEyYnYRzIW8qBqbZ3vPXJ3NcWUtlKkaVfp3Uc=)
2: 1DF3803AEEC611F0B6553517716F56BC.roa (hash: ATMgVxPSynGqWdcAfi8xFi3AYSDzSjTxt/zALkRAATU=)
3: 1CED22CCEEC611F0B6553517716F56BC.roa (hash: yCZ1YjOxjTNparFE9ezut6qYMPYgcu+lh0VxqkB60X0=)
4: 1D6F4D7EEEC611F0B6553517716F56BC.roa (hash: mjkSPSU1CtFx25rdmfQRNQYhUhcPGhgag+X4DPy+syU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Validity
Not Before: May 11 08:17:29 2026 GMT
Not After : May 18 08:17:29 2026 GMT
Subject: CN=6a019099-8b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:12:e6:ae:18:6d:1e:c4:15:b2:df:6a:2a:
83:ca:60:72:46:70:00:78:7a:22:be:31:b1:cd:5c:
ef:dc:a4:aa:c2:f2:ca:d1:6b:40:f4:95:74:50:d1:
89:46:55:7e:5f:24:4e:f8:6c:24:31:85:cb:9e:fb:
a9:6e:85:59:b8:36:1c:89:39:eb:2f:1b:a9:46:e0:
42:f4:2e:1d:96:79:ff:45:6a:25:59:fd:27:a3:b3:
b6:2d:c4:38:e6:7f:6f:4a:41:c7:93:50:d2:f7:9f:
35:ab:ee:74:37:d2:eb:2f:10:f3:bc:d8:a5:02:8d:
3f:54:64:77:20:1f:f2:88:24:4a:68:cd:b4:c5:24:
40:c4:93:c9:04:f7:3d:77:f8:cd:2b:41:79:b3:b9:
7b:18:5a:61:e8:c8:d9:10:a5:5a:82:9c:e2:31:ea:
71:b1:16:81:8f:d0:81:94:47:b0:b5:9c:b0:73:7d:
29:f9:ef:bc:b7:a4:63:f4:7f:db:a3:13:dd:9c:a5:
5e:be:fc:12:ff:65:24:1e:99:3f:4f:ff:9b:3b:88:
01:c7:4f:87:59:ec:8a:3f:55:95:e0:9d:15:4e:6f:
64:ee:21:3f:d8:bf:94:98:b1:57:6f:ba:9f:83:63:
6c:32:66:3e:26:b4:f4:75:c2:d8:c1:ca:d7:39:1a:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:43:B6:B4:0D:63:2A:84:8E:F9:34:45:64:3E:F0:1A:50:37:3B:DA
X509v3 Authority Key Identifier:
keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:79:8e:f4:09:b9:36:74:57:18:c8:14:76:ff:2e:01:7c:b5:
5a:45:ca:22:eb:a7:8f:4b:4e:a4:8e:69:aa:f5:24:c7:9d:92:
55:2d:85:9f:ba:e0:84:e9:59:c0:08:98:46:d5:5e:28:ba:f4:
80:d0:df:5d:e1:3b:5c:ca:39:60:6f:ca:f4:7e:05:84:d4:2a:
7d:15:aa:b8:7c:f1:2a:cd:35:92:9a:a1:59:a4:c2:fb:d2:0a:
08:e3:72:17:90:ce:bd:73:ce:81:d4:0d:6c:3b:58:7f:56:11:
3f:cb:68:ce:e7:63:0f:74:b7:6a:32:48:67:ae:7d:7a:d7:31:
36:06:3e:43:ba:b3:36:19:02:45:2b:18:b1:b1:8d:56:69:1d:
76:df:73:fb:dd:8c:64:da:90:0b:fb:d7:74:80:a8:eb:ad:c6:
08:1c:a5:7a:57:3a:55:fa:b8:05:ba:9a:35:c3:6c:81:8d:a9:
70:32:16:01:7a:1e:af:2f:72:d8:d6:d2:c6:cd:b2:66:06:53:
9c:72:86:63:0c:3e:8b:f8:79:12:f5:be:1c:5b:21:5a:47:9b:
c0:bd:89:b3:56:e4:f9:55:93:ab:17:c2:11:de:3b:2d:dc:f7:
76:fa:57:ea:51:56:cd:3d:57:04:f7:81:4b:f6:0e:c5:c4:22:
e4:17:d9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:25:29 2026 by rpki-client