
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
File: n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json)
Hash identifier: OErwmVhYu8mFghdp9mZCQNTM37S7c5x2phDPTA6NsMw=
Subject key identifier: CC:5E:EC:BA:3A:22:CE:EA:AC:60:66:88:F2:53:0B:70:70:F9:B3:75
Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
Certificate issuer: /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
Manifest number: 018D
Signing time: Thu 23 Jul 2026 05:51:48 +0000
Manifest this update: Thu 23 Jul 2026 05:51:47 +0000
Manifest next update: Thu 30 Jul 2026 05:51:47 +0000
Files and hashes: 1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: nKLOF9ysZdTZMQUdkZ5lvyOX6vo6e0Vd7eXdEqF+WcY=)
2: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: H04/8UCM0HIwt/kQIuV1r0Bul5P9qNZh2AavqYuBxdQ=)
3: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: rA7V1naVvYRqsHEWb7MBLZbTli7oyFi0ZmHVez4sKpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:51:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Validity
Not Before: Jul 23 05:51:47 2026 GMT
Not After : Jul 30 05:51:47 2026 GMT
Subject: CN=6a61abf4-5865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:06:66:95:4a:62:59:e7:7d:d7:5d:27:11:0b:
b5:b2:5f:98:a5:b2:2e:f5:3f:9f:bb:b3:25:7a:60:
fe:7f:1e:b1:2c:f2:f6:c2:08:71:e8:ae:14:5c:b2:
0e:02:fe:92:40:2b:57:79:ac:0e:72:56:62:ff:d9:
0b:dd:a3:1c:5f:5c:4c:c4:e7:30:db:3c:83:6b:8b:
03:65:03:1e:70:ca:b3:07:66:87:01:04:0e:e5:ae:
f3:49:03:dd:e5:0f:e5:27:93:48:18:59:65:68:45:
8e:5f:75:be:f2:ba:9b:c2:2c:c7:26:e1:6c:e7:42:
9c:74:1e:58:cc:b5:0e:57:45:ce:38:bc:bc:77:df:
15:23:fd:4e:c5:36:53:f3:ef:e1:85:bf:7b:26:cf:
e2:ae:48:74:60:76:5b:7e:af:9a:b3:98:88:7c:c5:
83:f1:91:c4:06:47:b0:1c:8f:c9:50:40:5e:a4:c3:
d4:98:e2:87:e7:82:25:8a:e3:18:19:58:90:2d:b4:
d8:d6:41:fb:78:5d:02:3a:73:e3:6e:40:eb:7e:3b:
74:8b:32:27:0e:94:42:70:07:a9:90:d1:ad:f5:00:
6b:04:23:6e:70:f3:69:a7:26:6c:d0:4c:48:47:ce:
75:04:06:c0:d5:72:d3:a8:a7:be:26:40:88:a6:de:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5E:EC:BA:3A:22:CE:EA:AC:60:66:88:F2:53:0B:70:70:F9:B3:75
X509v3 Authority Key Identifier:
keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:c7:d8:9e:19:86:bc:40:25:f0:1b:21:1c:a5:7e:27:5f:75:
1d:f2:af:c0:0c:37:dd:88:62:f7:3b:bd:e0:c6:10:be:bc:17:
c2:c8:b1:8a:ca:13:e6:e8:4a:f0:0c:0d:0e:75:a6:ed:1d:2e:
39:eb:95:cd:6c:71:12:35:6a:42:68:6c:c0:43:4a:f2:2b:a5:
1a:0f:e0:60:4e:6f:b0:c1:f6:86:36:26:12:1d:b8:6a:22:e4:
32:31:7f:24:d8:ac:06:77:9d:0e:c1:19:d6:fa:55:30:a0:6a:
79:d0:40:b5:1c:c5:a5:06:d6:06:02:08:a3:31:73:e9:d7:01:
f3:a2:44:25:2d:5b:73:bf:f9:e4:27:69:40:a0:7e:f6:2e:9d:
a7:81:e3:c6:a0:08:7f:ce:fd:3b:74:ab:ff:a9:a9:ad:6f:94:
8d:93:a6:7c:6f:0a:4b:05:4f:41:90:6c:29:89:cc:98:39:5d:
db:4d:36:bf:8f:8a:89:ba:08:00:8a:f5:d0:78:69:84:0b:02:
ff:d4:fe:b2:78:52:a6:98:bd:f5:2b:42:45:d4:af:03:d6:d4:
8f:51:2b:09:8f:54:fb:30:f2:71:9c:dd:c6:c0:72:b7:5c:b1:
1e:1d:12:21:ad:03:17:0c:4a:d8:00:d4:4a:35:99:e3:26:76:
94:18:b5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:35:31 2026 by rpki-client