
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
File: ilHqWMRcL0Rg46sT62pnRUZdr4s.mft (raw, json)
Hash identifier: RfCtrW7J7G3ibAsWmbsykAhkqJwlIiQ/k0Znuyj4OwY=
Subject key identifier: FF:0F:F6:E6:8D:3E:82:65:25:88:97:36:3B:AB:8B:A1:5F:35:A9:64
Authority key identifier: 8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
Certificate issuer: /CN=A911AF72/serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Certificate serial: 7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
Manifest number: 79
Signing time: Mon 11 May 2026 07:53:18 +0000
Manifest this update: Mon 11 May 2026 07:53:18 +0000
Manifest next update: Mon 18 May 2026 07:53:18 +0000
Files and hashes: 1: ilHqWMRcL0Rg46sT62pnRUZdr4s.crl (hash: aX7QTr0HileBLkB6Q5+P5bNsYfHxtCPuFV0aE5mWVV4=)
2: A537B070BA4B11F0BD639513C4F9AE02.roa (hash: zfUTfDN6MNZwyyQaYTs7HfwVxHWJRQ0R4nx1a49wJN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AF72, serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Validity
Not Before: May 11 07:53:18 2026 GMT
Not After : May 18 07:53:18 2026 GMT
Subject: CN=6a018aee-581b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:1f:69:15:c4:4b:0c:92:67:22:81:04:e4:
5e:b2:64:53:f5:af:24:75:3e:99:37:77:a9:ba:ce:
13:37:04:70:93:a7:3b:3c:0c:77:06:fe:89:81:01:
49:00:da:23:69:06:40:a7:9c:ba:9a:4f:a1:d9:14:
c3:27:4e:ab:9d:0d:22:65:09:fc:93:0f:85:4d:40:
80:04:88:c5:e2:89:16:73:70:63:a5:51:bc:17:08:
0a:68:5d:56:36:4b:fb:38:9a:22:36:b0:8c:4b:9f:
91:4b:c0:61:98:e2:b6:92:d0:50:2e:c1:b6:da:bb:
70:85:b8:72:a0:08:1a:da:38:4c:95:65:3b:a9:5a:
b5:27:0e:42:ac:1e:41:92:00:ea:30:29:db:c2:97:
52:ba:42:39:05:b3:32:23:b4:4a:e4:04:89:0c:6c:
9b:36:2f:f5:16:90:78:86:b9:d3:07:1d:13:f0:d2:
1c:1a:48:cc:a9:bc:f3:7b:ca:0a:be:fc:66:0d:1f:
ec:60:10:14:02:90:1a:6b:d3:a3:b9:43:d7:f7:28:
97:e3:c9:4d:94:72:4e:9a:b2:2c:97:9e:46:59:a3:
7e:93:cd:f0:65:fc:00:25:36:0a:6e:ec:bc:ec:78:
d0:52:f6:16:d1:7a:2b:43:34:5c:88:97:77:ec:15:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0F:F6:E6:8D:3E:82:65:25:88:97:36:3B:AB:8B:A1:5F:35:A9:64
X509v3 Authority Key Identifier:
keyid:8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:b4:25:ba:23:b3:fe:0d:b4:cf:ce:0e:57:5f:e7:84:e2:a2:
b7:17:5f:15:52:72:3f:36:13:8e:56:cd:98:22:f9:b2:a7:bf:
cb:3c:57:78:2d:24:02:ff:c7:ad:81:24:c9:ff:83:1b:0c:d1:
8a:a5:2e:94:ad:5c:44:4f:9f:87:4b:46:b7:f4:ab:4c:81:e6:
f3:78:24:d8:6e:3e:7b:3c:76:05:34:26:c3:1d:ff:c0:7c:93:
59:41:1f:56:c5:7f:b6:4b:63:03:6b:46:ae:70:9b:a5:39:9a:
bd:de:06:42:52:f3:01:1a:7d:17:95:cc:30:4a:a1:31:9e:4e:
0c:ef:16:70:8e:0b:2f:ad:a5:e5:7c:ca:c7:63:6f:dd:6d:21:
71:5c:b1:90:22:5c:42:f0:78:77:1d:d8:10:85:e2:43:c7:b7:
dd:e9:39:e7:ae:cd:81:9e:60:43:63:6c:42:47:a1:4e:d5:b7:
f1:89:d8:3e:f9:b6:4a:76:de:be:43:12:ee:b0:4f:74:c9:d7:
51:27:3b:56:0e:2d:a3:61:d0:61:39:ab:d0:35:ef:e7:77:ac:
3d:39:d2:96:f7:36:83:83:a6:c3:39:bc:ca:f6:8c:77:50:13:
14:7a:b9:af:49:c2:75:be:43:b9:92:86:dc:60:20:a6:30:84:
8f:b3:82:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:15 2026 by rpki-client