
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
File: I9szI90s15w3OFgdQvSrD0mINMI.mft (raw, json)
Hash identifier: 000BOjI7iTk2bFHQGusjuUJOFD2TAc/rMsxynY3ikd4=
Subject key identifier: AD:27:7C:46:58:BA:84:6E:48:02:F9:E9:BD:44:D3:2E:AF:88:CE:E7
Authority key identifier: 23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2
Certificate issuer: /CN=A911C28A/serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2
Certificate serial: 0680
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
Manifest number: 0678
Signing time: Tue 12 May 2026 22:39:43 +0000
Manifest this update: Tue 12 May 2026 22:39:43 +0000
Manifest next update: Tue 19 May 2026 22:39:43 +0000
Files and hashes: 1: I9szI90s15w3OFgdQvSrD0mINMI.crl (hash: 3A071gR0/5qoHBFezn99NinS5pkxfy1sbJFGwDIgMpc=)
2: 2D5E84AAC2A911EBB2025B36C4F9AE02.roa (hash: c0M+m0+FJnT9213Y2elavdnEvd9Z/5c3ESENVkryjmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl
rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1664 (0x680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28A, serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2
Validity
Not Before: May 12 22:39:43 2026 GMT
Not After : May 19 22:39:43 2026 GMT
Subject: CN=6a03ac2f-7499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:14:4e:75:73:5d:24:3b:2f:20:64:2d:50:
72:e1:7e:f5:d1:25:73:0f:da:4e:6a:13:aa:e7:f9:
af:93:c0:bd:39:95:dd:36:34:16:93:39:f6:aa:46:
38:27:6e:ff:bd:33:7a:7d:77:4a:ee:94:05:8b:f6:
45:df:10:e8:26:e4:dc:ab:e3:ff:3a:c4:68:99:d8:
96:8f:f3:b0:fd:ed:87:18:42:89:d1:67:61:1a:fa:
ab:cb:9c:7d:93:eb:b2:6e:a6:af:bb:97:11:f8:1c:
9c:0f:ec:c7:03:cd:86:b2:be:50:85:9e:1c:72:cd:
a3:bc:82:95:bd:6e:de:24:4c:fd:de:fc:be:57:0a:
28:5f:dd:de:e5:cd:e3:e1:b4:5c:a1:86:74:ea:07:
8f:d6:34:f7:ef:ee:01:5a:c3:70:97:08:0a:74:de:
b7:73:81:7a:aa:ce:5e:22:bf:a4:02:1f:95:ec:f6:
df:41:84:ec:ec:c7:df:98:23:d0:7f:aa:10:67:13:
f2:1f:3e:3d:a5:fb:da:a2:86:6c:71:1a:30:08:8c:
e0:3e:b4:d5:7e:7a:40:2b:5c:02:5d:7d:70:7b:e7:
e7:b4:3d:00:9c:1d:df:aa:66:61:93:58:36:77:2e:
a8:88:65:cd:aa:08:f9:fa:f2:39:81:4a:b1:d5:0c:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:27:7C:46:58:BA:84:6E:48:02:F9:E9:BD:44:D3:2E:AF:88:CE:E7
X509v3 Authority Key Identifier:
keyid:23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:24:88:8e:60:4c:9a:d7:d7:f4:aa:ea:70:1e:a9:96:05:ae:
77:bd:a7:ab:c1:71:43:b2:a4:7f:fd:4a:31:86:d3:9d:8a:f5:
4b:ec:f9:6a:cf:da:31:0c:b0:6f:06:7d:ea:74:8e:25:6a:61:
42:2c:cf:ee:07:92:79:7e:72:37:79:24:83:ea:04:e6:9f:96:
58:fa:06:bf:96:c3:21:e9:c4:2f:fd:82:a6:dc:09:15:62:7d:
4c:80:4d:59:01:65:fe:88:f9:66:1f:42:9a:a9:f3:15:17:a2:
a2:ce:35:e6:66:57:6c:b5:2f:70:0f:72:ac:f1:ba:c1:7c:a3:
16:f7:c2:d6:b4:40:52:5c:75:c5:88:b9:de:76:4e:ee:54:b3:
9a:0f:cf:47:79:9d:14:ca:a0:d4:e8:af:30:ee:02:fd:e2:dc:
91:de:18:9d:1f:cb:02:76:6d:e0:39:eb:26:0b:cd:3f:3f:67:
cb:13:b3:7d:bf:34:07:af:e0:c5:9a:72:b8:62:eb:07:ff:b6:
6a:9d:07:e6:06:bd:98:d1:fa:58:d8:61:42:7f:e2:7a:30:11:
67:56:07:fd:86:8c:be:a5:5b:7f:b5:f3:e5:9c:97:87:4c:0f:
cc:5b:4a:cb:33:73:f7:d4:e7:d3:84:76:a5:3a:fb:29:fd:f1:
63:11:84:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEExMTAvBgNVBAUTKDIzREIzMzIzREQyQ0Q3OUMzNzM4NTgxRDQyRjRBQjBG
NDk4ODM0QzIwHhcNMjYwNTEyMjIzOTQzWhcNMjYwNTE5MjIzOTQzWjAYMRYwFAYD
VQQDEw02YTAzYWMyZi03NDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArrcUTnVzXSQ7LyBkLVBy4X710SVzD9pOahOq5/mvk8C9OZXdNjQWkzn2qkY4
J27/vTN6fXdK7pQFi/ZF3xDoJuTcq+P/OsRomdiWj/Ow/e2HGEKJ0WdhGvqry5x9
k+uybqavu5cR+BycD+zHA82Gsr5QhZ4ccs2jvIKVvW7eJEz93vy+VwooX93e5c3j
4bRcoYZ06geP1jT37+4BWsNwlwgKdN63c4F6qs5eIr+kAh+V7PbfQYTs7MffmCPQ
f6oQZxPyHz49pfvaooZscRowCIzgPrTVfnpAK1wCXX1we+fntD0AnB3fqmZhk1g2
dy6oiGXNqgj5+vI5gUqx1QxrrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK0nfEZY
uoRuSAL56b1E0y6viM7nMB8GA1UdIwQYMBaAFCPbMyPdLNecNzhYHUL0qw9JiDTC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4QS8yQTM1NjZBOEMy
QTUxMUVCQjREMzRFMzVDNEY5QUUwMi9JOXN6STkwczE1dzNPRmdkUXZTckQwbUlO
TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k5c3pJOTBzMTV3M09GZ2RRdlNyRDBtSU5NSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzI4QS8yQTM1NjZBOEMyQTUxMUVCQjREMzRFMzVDNEY5QUUwMi9JOXN6STkwczE1
dzNPRmdkUXZTckQwbUlOTUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPSSIjmBMmtfX9KrqcB6plgWud72nq8FxQ7Kkf/1KMYbTnYr1S+z5as/aMQyw
bwZ96nSOJWphQizP7geSeX5yN3kkg+oE5p+WWPoGv5bDIenEL/2CptwJFWJ9TIBN
WQFl/oj5Zh9CmqnzFReios415mZXbLUvcA9yrPG6wXyjFvfC1rRAUlx1xYi53nZO
7lSzmg/PR3mdFMqg1OivMO4C/eLckd4YnR/LAnZt4DnrJgvNPz9nyxOzfb80B6/g
xZpyuGLrB/+2ap0H5ga9mNH6WNhhQn/iejARZ1YH/YaMvqVbf7Xz5ZyXh0wPzFtK
yzNz99Tn04R2pTr7Kf3xYxGE4w==
-----END CERTIFICATE-----
Generated at Wed May 13 08:04:50 2026 by rpki-client