
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft
File: ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft (raw, json)
Hash identifier: KUx0dYMFgUycQM3lU11f8jU4crY5R0Xsx/3wCKClUsg=
Subject key identifier: A3:3D:3D:FF:1B:96:FB:8B:66:85:20:80:02:DA:32:CD:67:B3:1C:BF
Authority key identifier: 22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01
Certificate issuer: /CN=A911A828/serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft
Manifest number: 0262
Signing time: Mon 11 May 2026 02:10:03 +0000
Manifest this update: Mon 11 May 2026 02:10:03 +0000
Manifest next update: Mon 18 May 2026 02:10:03 +0000
Files and hashes: 1: ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl (hash: qCfcTONY8SYsTc1x+9XUpcoxF05RCwmZu7Z3Bv49B0U=)
2: E816DFFAA90111ED867DA161C4F9AE02.roa (hash: vb4T8uZCf2x+8euqTgS7w/JHSG99MYAiBw0Tkw+k354=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl
rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A828, serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001
Validity
Not Before: May 11 02:10:03 2026 GMT
Not After : May 18 02:10:03 2026 GMT
Subject: CN=6a013a7b-c9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:26:1d:32:a2:03:0a:e5:29:0a:8d:bc:89:
a8:3e:3f:40:21:c9:fc:92:8b:d6:ae:b1:00:81:07:
56:04:98:5b:26:4b:a9:1e:34:75:dd:7a:58:73:c1:
88:7c:b0:60:8b:10:eb:f9:5f:cd:2e:8f:5a:69:0e:
d3:f8:1d:31:41:24:36:14:bc:23:8a:88:8e:73:5d:
fc:19:28:d1:5f:a3:b8:35:56:61:d0:9b:3b:f3:3e:
6e:1b:0f:e1:f5:68:77:68:61:42:0c:36:80:25:95:
bb:5f:32:b0:c0:a3:f9:4e:e0:90:c5:de:b6:b2:ab:
e7:7e:c9:aa:19:dd:88:e4:59:26:ec:e7:72:2b:55:
be:bb:e7:5c:a5:7b:da:be:1c:82:78:12:89:c0:b6:
9e:37:99:1a:44:f8:f3:99:c6:8e:23:2e:62:26:a1:
da:5b:52:53:96:c9:4f:aa:bb:56:d0:8c:7d:d2:bb:
f3:eb:72:5c:ed:83:9a:d3:f6:74:17:75:06:91:4d:
3a:a2:6f:33:1c:56:0e:2e:81:2b:8b:ee:3c:49:9b:
ae:15:fa:42:8d:bf:90:8d:ad:9f:c8:1b:2b:8b:fc:
3f:7e:cd:d8:f2:4a:c5:25:af:0e:5a:fb:d5:fe:e7:
1d:ec:95:58:f2:53:62:0b:76:95:6d:f7:29:7d:47:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3D:3D:FF:1B:96:FB:8B:66:85:20:80:02:DA:32:CD:67:B3:1C:BF
X509v3 Authority Key Identifier:
keyid:22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:6a:fe:1f:5b:c9:56:f5:8d:78:d8:4f:a8:a3:f8:31:54:08:
d1:d4:3e:c6:d5:4e:6f:79:8b:ea:2d:cb:b7:5e:6f:9b:b3:4a:
b5:47:ae:c5:3f:de:2e:f3:82:37:b6:a4:12:f8:68:87:b4:13:
f7:9d:65:61:76:47:66:82:48:a5:66:7f:87:3f:58:cc:5d:15:
ce:07:b5:34:fc:56:59:a2:31:f4:70:9b:d9:b7:21:82:be:53:
38:c6:e6:fc:44:31:32:68:55:4f:df:6e:a3:62:fc:e6:9d:4a:
a7:84:37:7f:ee:07:2f:3b:18:06:a6:78:b0:bd:f8:5b:ad:8e:
36:4d:10:c8:81:9b:ff:a5:0a:bb:db:a1:0b:08:29:f1:6a:35:
9e:11:e1:d0:08:08:7d:c6:dc:46:cc:de:dc:1e:f5:fc:a4:88:
ec:ae:39:99:18:3f:9e:cd:b0:5d:a6:39:a7:5f:30:33:18:b6:
d2:e4:fe:f7:e4:4f:5c:93:7e:dc:3c:f4:14:e7:93:de:47:6f:
dc:29:7b:7e:24:1a:70:1f:21:be:93:e9:b5:25:fe:78:4b:5f:
85:a2:8e:4e:77:a0:40:49:1c:48:13:6a:b2:86:0d:bb:fe:5e:
6d:88:ce:1c:2f:0b:0f:e0:e1:05:95:49:3e:0f:19:e8:7e:6c:
0b:e4:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:33:09 2026 by rpki-client