
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft
File: iWOqihtflIfiJtJG8ORMlgyPKpg.mft (raw, json)
Hash identifier: jBKidX0ubgNxsYGentQCEbHKf1oQnzoaHoKaWYZ25i0=
Subject key identifier: AA:9B:E8:F1:8B:C3:19:DC:85:67:CA:38:13:3B:FE:15:54:58:E7:70
Authority key identifier: 89:63:AA:8A:1B:5F:94:87:E2:26:D2:46:F0:E4:4C:96:0C:8F:2A:98
Certificate issuer: /CN=A9145CAB/serialNumber=8963AA8A1B5F9487E226D246F0E44C960C8F2A98
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft
Manifest number: 20
Signing time: Mon 11 May 2026 09:06:51 +0000
Manifest this update: Mon 11 May 2026 09:06:51 +0000
Manifest next update: Mon 18 May 2026 09:06:51 +0000
Files and hashes: 1: iWOqihtflIfiJtJG8ORMlgyPKpg.crl (hash: MdWVmVcsiNB/xcXQv6OMwFk955EOkpi/a5nITAh10qc=)
2: F5FB1528251811F19BF603D3C0833773.roa (hash: 8JF1Xwm4ghBxpQhLmUBlUSU0yke5/SmVI3FtoYK94Ho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.crl
rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145CAB, serialNumber=8963AA8A1B5F9487E226D246F0E44C960C8F2A98
Validity
Not Before: May 11 09:06:51 2026 GMT
Not After : May 18 09:06:51 2026 GMT
Subject: CN=6a019c2b-eef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:4f:e7:55:b1:6d:c3:24:a6:57:cd:70:cb:
9e:6c:8a:78:62:1a:8d:74:72:40:0e:1e:37:a0:5e:
4a:04:f4:01:e0:db:7d:cd:ba:7a:b3:ce:f7:1e:67:
91:57:83:6c:ab:38:53:5d:82:bc:48:bc:ec:2a:ac:
15:53:92:06:1c:aa:c3:a6:45:cf:80:e1:6f:1e:ba:
88:86:7a:30:fd:b0:72:7d:78:dd:c8:cf:47:06:02:
eb:aa:28:f7:a1:75:4d:59:e5:21:8b:3f:57:e4:66:
37:75:d4:b4:ab:c0:f2:88:a4:5d:de:07:72:94:79:
e0:ad:97:58:7c:21:a8:20:9b:3d:ac:99:60:f9:f8:
e2:ae:2e:cc:4a:9a:cd:3f:4e:d8:68:a1:5e:fd:1a:
e6:05:8b:b9:75:6a:59:1e:58:e1:4e:8c:31:ab:d8:
2c:24:ae:48:8d:06:13:6d:c0:8c:97:0f:96:68:d9:
45:2c:1e:e8:dc:41:72:54:6d:dc:2e:53:ff:05:00:
13:a0:c6:21:c0:a0:ae:ba:f7:de:5a:76:c0:0c:c7:
b6:a7:c6:98:62:11:84:a5:e0:1a:53:87:c0:93:78:
36:59:99:d4:53:0d:b3:fd:10:04:92:05:4e:74:13:
17:18:77:51:52:60:b3:32:9b:4f:8c:03:ee:d3:5f:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9B:E8:F1:8B:C3:19:DC:85:67:CA:38:13:3B:FE:15:54:58:E7:70
X509v3 Authority Key Identifier:
keyid:89:63:AA:8A:1B:5F:94:87:E2:26:D2:46:F0:E4:4C:96:0C:8F:2A:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:46:73:c6:c4:ba:2b:f3:00:78:13:1d:c7:8a:a2:4a:bd:e5:
6e:2c:24:76:d3:b3:18:8a:74:f6:d7:49:c3:40:e7:e6:c7:73:
5f:05:4a:dc:07:e8:9d:d9:47:23:bc:02:a2:6f:70:61:ae:7a:
77:07:21:80:dc:12:50:8f:96:29:29:a5:be:08:d3:ab:8c:53:
e0:6e:fd:14:73:cd:be:6b:34:64:b3:df:6c:f3:64:7b:02:20:
27:8f:1e:9e:b1:73:7c:fd:cd:93:96:65:22:a0:2b:fb:b9:fc:
37:ba:d2:5a:91:72:97:48:79:b5:50:25:ec:3e:11:1b:a3:c6:
f6:19:35:f4:74:d8:29:3f:8d:8b:68:78:ed:a5:d0:83:70:76:
6a:cf:f3:e7:72:de:4b:33:fe:3b:6a:3d:2a:e2:10:46:ca:36:
f7:3a:e7:23:34:ff:b4:cf:6b:57:a1:d5:71:f1:97:92:de:93:
05:49:15:25:34:90:cc:d1:e9:b4:e7:49:7c:fb:c4:11:f4:25:
fd:5d:75:a2:54:eb:9a:05:52:20:64:be:c9:4b:de:fe:77:4f:
f2:c8:d8:68:dc:31:31:60:71:0a:db:b9:a9:fc:4c:c1:0d:9d:
8d:44:b9:b5:f3:03:e6:db:0e:40:b1:b4:63:2c:f2:23:b8:37:
33:51:70:37
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NUNBQjExMC8GA1UEBRMoODk2M0FBOEExQjVGOTQ4N0UyMjZEMjQ2RjBFNDRDOTYw
QzhGMkE5ODAeFw0yNjA1MTEwOTA2NTFaFw0yNjA1MTgwOTA2NTFaMBgxFjAUBgNV
BAMTDTZhMDE5YzJiLWVlZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPe0/nVbFtwySmV81wy55sinhiGo10ckAOHjegXkoE9AHg233NunqzzvceZ5FX
g2yrOFNdgrxIvOwqrBVTkgYcqsOmRc+A4W8euoiGejD9sHJ9eN3Iz0cGAuuqKPeh
dU1Z5SGLP1fkZjd11LSrwPKIpF3eB3KUeeCtl1h8Iaggmz2smWD5+OKuLsxKms0/
TthooV79GuYFi7l1alkeWOFOjDGr2CwkrkiNBhNtwIyXD5Zo2UUsHujcQXJUbdwu
U/8FABOgxiHAoK66995adsAMx7anxphiEYSl4BpTh8CTeDZZmdRTDbP9EASSBU50
ExcYd1FSYLMym0+MA+7TX/9zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqpvo8YvD
GdyFZ8o4Ezv+FVRY53AwHwYDVR0jBBgwFoAUiWOqihtflIfiJtJG8ORMlgyPKpgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1Q0FCLzJFNUM0NUM0MjRD
QzExRjE5QURCQTQwNUE4ODMzNzczL2lXT3FpaHRmbElmaUp0Skc4T1JNbGd5UEtw
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaVdPcWlodGZsSWZpSnRKRzhPUk1sZ3lQS3BnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1
Q0FCLzJFNUM0NUM0MjRDQzExRjE5QURCQTQwNUE4ODMzNzczL2lXT3FpaHRmbElm
aUp0Skc4T1JNbGd5UEtwZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAqRnPGxLor8wB4Ex3HiqJKveVuLCR207MYinT210nDQOfmx3NfBUrcB+id2Ucj
vAKib3Bhrnp3ByGA3BJQj5YpKaW+CNOrjFPgbv0Uc82+azRks99s82R7AiAnjx6e
sXN8/c2TlmUioCv7ufw3utJakXKXSHm1UCXsPhEbo8b2GTX0dNgpP42LaHjtpdCD
cHZqz/Pnct5LM/47aj0q4hBGyjb3OucjNP+0z2tXodVx8ZeS3pMFSRUlNJDM0em0
50l8+8QR9CX9XXWiVOuaBVIgZL7JS97+d0/yyNho3DExYHEK27mp/EzBDZ2NRLm1
8wPm2w5AsbRjLPIjuDczUXA3
-----END CERTIFICATE-----
Generated at Wed May 13 08:21:31 2026 by rpki-client