
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json)
Hash identifier: L4cqARKx9wajkcjMbb+wOL9eFi4u0QDoYjAJs6F/xUc=
Subject key identifier: 2A:45:72:7F:D2:48:7C:E1:C4:56:E3:A7:55:40:60:C7:F5:FF:02:29
Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Certificate serial: 1118
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
Manifest number: 110C
Signing time: Tue 12 May 2026 17:18:20 +0000
Manifest this update: Tue 12 May 2026 17:18:20 +0000
Manifest next update: Tue 19 May 2026 17:18:20 +0000
Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: Jfnak5eEXjbyicFWTVqIys7OElVl9xeJ/ezA5cubVrE=)
2: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: RiDf1XLYKZh+wmu0a6//ACSvTiLlex2fq/GN1xb8xX0=)
3: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (hash: UBjBwHlmM/IFjT10AU767yueXJrZgOYMUiv13BTyuu0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4376 (0x1118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Validity
Not Before: May 12 17:18:20 2026 GMT
Not After : May 19 17:18:20 2026 GMT
Subject: CN=6a0360dc-e512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:d0:96:5d:32:b1:f8:f8:6c:31:1c:4b:9f:
25:cb:40:b3:0f:ea:8f:b3:93:1f:59:40:bb:8d:51:
24:a8:d6:0d:af:68:f2:e9:48:ba:39:dc:67:fe:70:
d9:1e:17:96:41:fd:85:c4:79:b1:cc:46:5e:d4:4c:
cf:54:36:84:cc:9f:5d:32:6c:41:ce:b6:e3:b1:48:
dc:96:6b:d2:67:81:29:dd:09:a8:4a:73:17:37:c9:
0b:7a:41:93:7d:b3:43:ec:f1:5e:cc:ca:8f:56:87:
e5:e8:24:2b:2b:7f:29:65:3c:e2:94:da:01:e1:9a:
85:34:6b:68:af:7d:1e:5a:f7:e0:58:a0:d0:47:a0:
50:f0:81:81:86:4e:2f:41:21:a7:18:5f:9f:e3:79:
d4:b9:66:27:6e:eb:b4:2a:81:1e:98:1c:5c:75:b5:
92:0e:73:85:26:a7:3b:3a:a3:d2:82:34:5f:b7:d7:
48:fd:d5:82:3b:63:74:c4:7f:dc:9a:81:97:56:3c:
50:40:c8:32:af:49:71:67:5e:bc:9c:3b:7b:4f:9f:
5a:5b:9b:c0:64:81:1c:b4:56:0f:8e:73:2f:af:18:
cc:08:a9:42:d3:22:05:ad:a7:2b:5f:2b:cf:b6:ae:
f3:f7:af:35:fb:75:d9:96:c4:30:a1:e6:8e:4d:d8:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:45:72:7F:D2:48:7C:E1:C4:56:E3:A7:55:40:60:C7:F5:FF:02:29
X509v3 Authority Key Identifier:
keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:aa:48:02:d8:e4:bf:ce:5a:8a:c8:fc:48:f0:04:a9:fb:aa:
cd:92:c4:66:40:1a:6b:2f:b1:26:5c:ec:d0:f0:df:e8:c9:b4:
c9:35:4e:2a:47:7a:bf:8a:89:5c:e1:e7:5e:14:c7:77:7d:7d:
6c:ae:20:49:48:21:2d:e8:00:a2:c8:2f:6f:c3:fa:73:7d:d4:
48:38:0e:5d:7c:5b:eb:db:b9:5f:92:ac:49:33:23:cd:a3:5b:
6d:f2:7f:7e:6b:a8:ab:bf:73:d0:ff:03:c8:22:38:c9:64:0a:
39:18:c4:b3:5b:f2:01:b8:11:7f:b3:39:c5:d0:26:5b:0a:8e:
f1:cf:24:5d:30:0c:87:1c:d6:8c:5d:37:25:1d:6c:65:cf:25:
72:e7:09:bd:36:f9:a4:a8:0a:02:5f:30:aa:bc:e1:11:23:9a:
ed:cc:3c:d8:31:df:71:84:b9:98:84:81:24:04:ad:48:4a:4c:
79:1c:b7:70:bb:f9:a5:ba:eb:57:c9:e0:35:c7:96:69:eb:64:
58:0b:ac:75:7c:89:a6:a7:58:bc:79:bd:0b:bd:94:8d:e5:d7:
1d:99:7c:4d:74:47:62:ef:6d:a0:5b:16:0f:f1:73:ea:af:ff:
f0:62:f2:b3:51:0b:fc:4c:ce:fe:07:f9:84:c6:7e:ee:10:29:
9f:4a:1b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:14:29 2026 by rpki-client