
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json)
Hash identifier: /+NbnbrTFpJ2ezVpa92holGR2YqbxQ/1XliGQVvvBAw=
Subject key identifier: AC:7F:42:BD:FE:A2:C1:83:89:DC:8B:CE:74:B0:5D:01:4E:CB:2F:44
Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E
Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E
Certificate serial: 0D00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
Manifest number: 0CF5
Signing time: Tue 12 May 2026 18:18:32 +0000
Manifest this update: Tue 12 May 2026 18:18:32 +0000
Manifest next update: Tue 19 May 2026 18:18:32 +0000
Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: ENC3GBurydUsVxTKr5PhnFQa1HtRbIWxDH6hrV3WP4M=)
2: 778B8788063711EA981E916CC4F9AE02.roa (hash: lLzLMFvq75P6s11FcUbySa49RP0prDTXCNFomk88MZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl
rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3328 (0xd00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E
Validity
Not Before: May 12 18:18:32 2026 GMT
Not After : May 19 18:18:32 2026 GMT
Subject: CN=6a036ef8-e10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:8e:d6:61:9a:40:17:af:a5:b2:87:e4:c6:
48:b1:e6:db:a1:5e:b9:92:03:3b:48:d7:74:35:bb:
95:5a:90:c9:41:53:95:83:98:c6:ac:87:54:b8:02:
bf:3b:7f:cf:45:80:ba:8d:d5:5d:83:61:cd:d8:90:
03:a7:c0:ee:b3:b9:a5:67:08:d8:07:3d:ea:51:58:
7b:b2:52:74:cc:14:9e:35:cd:de:83:3e:9a:09:ce:
34:1b:da:81:f4:bb:89:5e:d0:94:0c:76:e5:84:4b:
0b:e6:bf:46:c7:8d:4a:3a:7e:cf:57:31:e8:3f:88:
f0:03:14:ce:c0:12:d3:29:79:c3:82:87:65:3b:d2:
a9:17:fa:87:f0:3e:fa:00:96:bb:2a:a8:f1:67:fe:
11:b5:5b:8b:1a:08:95:1d:c1:ac:25:18:02:50:ce:
3d:da:38:95:c1:ae:b3:0d:ae:68:77:d3:90:73:98:
ac:b7:b6:71:1e:f5:67:40:b5:73:58:12:ec:b6:d2:
c5:1f:16:ea:63:55:21:d6:d1:32:91:cf:31:3c:df:
1c:d6:32:bc:16:57:97:67:4f:d3:a9:71:cf:2a:ec:
84:4f:24:bb:64:1e:cd:9a:44:3e:02:08:b1:67:c8:
3f:3d:76:c3:c7:57:52:c3:30:9e:f2:1a:8e:89:81:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7F:42:BD:FE:A2:C1:83:89:DC:8B:CE:74:B0:5D:01:4E:CB:2F:44
X509v3 Authority Key Identifier:
keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:14:40:41:44:70:29:c4:d2:1d:a9:62:ce:cc:76:9c:f1:3e:
9c:f5:ed:02:2b:76:e1:4c:6c:ae:7f:09:35:6f:92:ca:12:af:
fb:c2:34:ec:dd:78:35:6c:80:8b:4d:3e:4a:62:f6:ca:1d:64:
c5:ad:27:70:85:1a:0a:48:91:67:2f:84:37:03:11:1a:a5:28:
cc:67:0c:b2:4b:3a:17:9c:9a:d0:d1:69:ab:1c:8d:06:84:38:
29:ce:d2:5b:7e:93:98:83:47:fd:db:aa:1a:15:fe:d7:1f:4b:
96:cb:b4:00:0c:b5:e2:f6:e3:64:bf:07:8e:0f:1e:e6:c6:e6:
7d:13:91:21:75:3e:bb:fb:ec:2f:90:c3:4a:75:fe:b3:1a:3b:
54:9b:5a:01:31:c2:0a:27:59:85:4f:c4:0a:75:e4:58:dd:e1:
18:89:69:26:18:97:40:f7:ec:7b:9a:24:ae:bb:cc:04:fc:48:
bb:2b:01:df:02:0c:db:e3:d4:32:09:71:d4:f9:ee:30:a4:02:
5d:cf:92:87:aa:57:db:d9:b7:40:d8:3a:1e:b1:32:87:92:23:
3d:8a:24:3a:e9:ae:92:eb:99:16:d5:49:e0:8c:38:ca:bb:2c:
ce:07:25:47:b0:6b:d3:f8:49:61:78:59:50:a1:e5:82:1a:69:
b6:7e:5a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:31:54 2026 by rpki-client