
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json)
Hash identifier: EMSxI9qObDfMNShS9gPDO08G3wTgZaW8tBTlxTqAlow=
Subject key identifier: 91:56:66:87:5D:3A:99:6B:43:99:83:F3:4B:1D:92:9A:D4:AE:D7:54
Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93
Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093
Certificate serial: 0B60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
Manifest number: 0B3A
Signing time: Wed 22 Jul 2026 19:38:00 +0000
Manifest this update: Wed 22 Jul 2026 19:38:00 +0000
Manifest next update: Wed 29 Jul 2026 19:38:00 +0000
Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: BMN0HtIJwZTRuHtBIm1Dv0wP3DPjeDn/MoijZz/osRw=)
2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: XwrzlM0letqZh+/RvWS8GdyBop29NFs5TR8e33g5dvY=)
3: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: 7AD0EtO6OgTcq7iPrxEzW9VN1IAYjbMxwXVENNdHRmk=)
4: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: eo+fVmREjn0E/C8IX23s1pespE6vPSqglnEAEQntZB8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl
rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2912 (0xb60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093
Validity
Not Before: Jul 22 19:38:00 2026 GMT
Not After : Jul 29 19:38:00 2026 GMT
Subject: CN=6a611c18-7fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:64:ef:3d:f7:e3:15:ea:50:9d:0e:a8:cb:
96:14:e8:f4:db:da:e5:55:b7:27:dc:88:9c:03:40:
8d:9b:ec:83:81:eb:3f:87:09:78:7e:f4:88:eb:20:
69:61:18:60:52:36:d1:f3:31:a4:a0:5c:42:60:70:
af:18:67:66:d9:6b:35:93:c4:66:de:73:cb:a1:01:
86:3c:63:3a:9d:9e:a7:fd:63:4a:14:d5:a8:4c:53:
33:2f:95:25:33:9a:88:52:a0:03:21:73:a0:40:d0:
6d:a3:05:3c:f1:fb:dc:54:b1:50:2f:36:bd:25:48:
44:66:11:df:4c:2b:31:f5:3d:6a:f4:05:aa:56:83:
23:12:fc:de:55:12:45:8a:8c:85:cd:c4:15:b8:57:
f0:be:3d:ca:fd:ba:a9:87:b3:45:4a:05:9e:18:76:
ce:2c:71:67:32:9d:a3:98:86:6c:7a:87:06:84:5f:
47:8c:8a:c9:63:08:fd:85:af:ea:eb:eb:75:a6:f9:
e2:25:a0:04:df:cb:25:a4:ba:05:d8:eb:70:40:5e:
f1:9e:d1:a6:26:33:3f:3c:ee:87:25:ba:19:31:be:
a9:7c:b3:81:99:30:58:33:44:fd:bf:1f:4d:a9:cc:
00:97:54:1d:42:59:5d:c4:2f:c6:c2:5a:9a:6b:f4:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:56:66:87:5D:3A:99:6B:43:99:83:F3:4B:1D:92:9A:D4:AE:D7:54
X509v3 Authority Key Identifier:
keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:7a:1f:db:d4:96:be:bd:24:24:27:53:c1:6f:ea:29:00:1e:
b7:63:01:d5:85:87:f0:f5:ba:3a:b7:b7:e5:65:73:12:b2:19:
93:2f:e6:52:37:81:53:16:8f:24:c8:d6:4f:73:ff:b1:fd:df:
1c:35:00:b1:16:ef:48:3b:d4:a4:71:c9:90:93:30:7a:a0:20:
cd:51:4a:8c:9c:10:00:fe:56:f3:89:56:48:a5:fd:79:3b:9d:
5e:1c:00:e6:3a:81:30:14:50:8d:57:f7:a9:f5:39:c9:ee:fd:
83:75:d2:36:b5:e2:d9:0b:48:5d:97:d3:f1:68:80:33:0d:44:
4c:ff:7a:af:5b:54:e8:8f:b6:44:b4:ac:9c:9e:04:ca:2a:b1:
37:1a:0d:5e:e8:d8:c8:9c:4b:ce:b1:89:4e:67:f0:f8:24:b5:
0f:ba:86:22:fb:e6:5e:4d:ed:21:3e:e4:b8:2d:7d:cf:97:7c:
a2:d6:40:09:a5:08:db:d3:c5:61:0d:87:86:4d:84:c7:32:7a:
1b:d3:ce:2c:c2:4e:11:36:e7:dc:c4:32:11:d2:ef:ab:a7:5e:
d6:4d:55:2b:cb:78:07:6e:93:9f:98:e9:d8:00:b1:f5:ef:5c:
c8:8c:f4:b7:49:be:3e:16:fd:fa:60:09:9a:29:b3:05:07:4e:
ee:a5:c8:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2
RTRBQkYwOTMwHhcNMjYwNzIyMTkzODAwWhcNMjYwNzI5MTkzODAwWjAYMRYwFAYD
VQQDEw02YTYxMWMxOC03ZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApRJk7z334xXqUJ0OqMuWFOj029rlVbcn3IicA0CNm+yDges/hwl4fvSI6yBp
YRhgUjbR8zGkoFxCYHCvGGdm2Ws1k8Rm3nPLoQGGPGM6nZ6n/WNKFNWoTFMzL5Ul
M5qIUqADIXOgQNBtowU88fvcVLFQLza9JUhEZhHfTCsx9T1q9AWqVoMjEvzeVRJF
ioyFzcQVuFfwvj3K/bqph7NFSgWeGHbOLHFnMp2jmIZseocGhF9HjIrJYwj9ha/q
6+t1pvniJaAE38slpLoF2OtwQF7xntGmJjM/PO6HJboZMb6pfLOBmTBYM0T9vx9N
qcwAl1QdQlldxC/Gwlqaa/TsJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJFWZodd
OplrQ5mD80sdkprUrtdUMB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2
OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4
Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH
S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApXof29SWvr0kJCdTwW/qKQAet2MB1YWH8PW6Ore35WVzErIZky/mUjeBUxaP
JMjWT3P/sf3fHDUAsRbvSDvUpHHJkJMweqAgzVFKjJwQAP5W84lWSKX9eTudXhwA
5jqBMBRQjVf3qfU5ye79g3XSNrXi2QtIXZfT8WiAMw1ETP96r1tU6I+2RLSsnJ4E
yiqxNxoNXujYyJxLzrGJTmfw+CS1D7qGIvvmXk3tIT7kuC19z5d8otZACaUI29PF
YQ2Hhk2ExzJ6G9POLMJOETbn3MQyEdLvq6de1k1VK8t4B26Tn5jp2ACx9e9cyIz0
t0m+Phb9+mAJmimzBQdO7qXIew==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:29 2026 by rpki-client