
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
File: ilHqWMRcL0Rg46sT62pnRUZdr4s.mft (raw, json)
Hash identifier: nXk5kFPruHBXja00U1EylXpcpMbrj/5RkX6t9udfMaA=
Subject key identifier: 07:6D:25:44:6A:B6:00:25:2B:BD:8B:AD:13:AE:12:42:44:7A:9E:43
Authority key identifier: 8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
Certificate issuer: /CN=A911AF72/serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
Manifest number: BC
Signing time: Mon 21 Sep 2026 06:53:47 +0000
Manifest this update: Mon 21 Sep 2026 06:53:46 +0000
Manifest next update: Mon 28 Sep 2026 06:53:46 +0000
Files and hashes: 1: ilHqWMRcL0Rg46sT62pnRUZdr4s.crl (hash: JbI63M8xcVGfgnha5eLjfMeryyHEJFWfKWKbuiiLl30=)
2: A537B070BA4B11F0BD639513C4F9AE02.roa (hash: zfUTfDN6MNZwyyQaYTs7HfwVxHWJRQ0R4nx1a49wJN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AF72, serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Validity
Not Before: Sep 21 06:53:46 2026 GMT
Not After : Sep 28 06:53:46 2026 GMT
Subject: CN=6ab0d47b-bb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:4f:1d:02:01:2a:10:8a:80:2b:a5:2e:f5:
8e:b5:82:2a:14:9a:2b:d2:66:e9:45:bc:0c:a8:7d:
95:de:b6:d4:f8:c6:6d:1e:7c:68:63:33:5b:b7:08:
73:4e:7b:e2:09:88:5d:32:18:31:e5:6b:e0:ab:40:
a6:bf:f1:fd:15:ae:cf:17:9b:0d:49:84:5c:53:48:
06:98:59:e6:cb:b6:bc:3a:90:88:3c:ed:f8:61:c2:
48:ed:ce:82:29:f6:b3:85:9a:43:44:a7:08:be:c3:
e5:65:8a:24:81:34:98:69:d7:ad:15:e4:89:fa:4c:
7a:d3:86:c6:77:b4:e9:35:70:bc:26:92:56:cc:07:
94:cf:e9:93:e1:15:4a:31:4a:eb:68:76:24:a2:03:
ba:aa:1c:2e:1f:62:7c:d9:ee:ff:e8:b0:d4:23:96:
8f:b1:d9:6c:9f:20:90:99:4b:89:e7:f9:92:df:ed:
f9:16:d6:47:76:a5:1d:fa:e5:a0:8c:87:4d:7a:f5:
3f:ba:0a:f5:dd:0a:b5:fd:d5:46:16:fd:a5:f0:64:
0e:cb:ec:05:92:88:6a:02:57:fb:77:d8:c1:e8:47:
e7:d2:41:0f:22:4c:d0:29:6a:b9:8f:f9:da:54:08:
48:1a:df:14:6d:56:f0:81:ef:b4:c7:a6:61:26:ee:
d6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6D:25:44:6A:B6:00:25:2B:BD:8B:AD:13:AE:12:42:44:7A:9E:43
X509v3 Authority Key Identifier:
keyid:8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:52:d8:1d:5e:2a:b2:66:f0:22:29:ea:49:c5:d0:bd:fe:f5:
15:50:cb:4f:11:02:64:3d:f5:77:f1:c4:dd:3d:57:ab:52:11:
2c:34:d9:ed:74:a3:82:b6:62:7c:f5:7e:50:17:e8:ef:ad:47:
05:10:91:e8:24:3b:f6:fe:ee:69:dc:ee:d9:25:31:9a:ba:93:
34:9a:d7:4d:4a:60:6b:65:5a:11:5a:59:c2:e4:9e:f2:e5:fe:
e7:46:84:f4:3b:79:b5:ea:c5:33:45:80:52:26:12:e0:3d:1e:
ff:da:71:94:a1:4d:72:dc:79:82:f8:d4:88:e3:c4:28:8d:f4:
56:07:69:7d:87:2b:b1:af:89:f8:93:41:0f:25:bc:6f:07:35:
b2:11:59:98:1f:3d:6c:d0:67:93:6c:87:74:a5:8f:25:bc:4a:
dd:dd:d9:cb:6d:e0:62:7d:ab:a9:7c:8d:3e:a5:73:27:50:72:
46:4b:b9:68:c9:d5:12:31:c9:fe:fc:d6:51:bb:e9:9e:67:29:
72:68:26:ef:bb:23:56:60:8a:d8:1c:32:b0:03:b2:8a:a6:eb:
b7:a5:59:78:62:3e:3d:e9:5b:88:32:56:88:87:4f:0a:56:a1:
74:e4:44:7f:b9:b4:bf:49:c4:ad:ae:18:25:13:44:73:3f:02:
7d:2c:7b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:55:14 2026 by rpki-client