
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
File: iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json)
Hash identifier: tTflQjj04+SzWHUhFG1trFmoTTUF8qws/3kv87O20oI=
Subject key identifier: AC:9A:29:5F:08:3E:22:2F:6B:88:28:80:10:C9:2A:78:8C:A4:8D:FB
Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Certificate serial: 08FE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
Manifest number: 08CC
Signing time: Thu 23 Jul 2026 01:42:37 +0000
Manifest this update: Thu 23 Jul 2026 01:42:37 +0000
Manifest next update: Thu 30 Jul 2026 01:42:37 +0000
Files and hashes: 1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: 2+g24SeT/XiKQCE3uaTU+hFvWEOT4eBqXpD1ofbtD4c=)
2: 6205FF52113D11F1BF40122E203D8C67.roa (hash: HYGpX1P0ZQb1AWd79Cf4Iy8OWUD08H2zPMbvoOVsRME=)
3: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: Hn2QIPMqRjmWgqhNxIKc+CdGL22owDCN1yqXrEf97OM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:42:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2302 (0x8fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Validity
Not Before: Jul 23 01:42:37 2026 GMT
Not After : Jul 30 01:42:37 2026 GMT
Subject: CN=6a61718d-d577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:5f:64:bd:44:71:ca:c5:0b:c3:e5:ce:49:
fc:d8:30:a7:00:84:b4:29:2b:dd:fc:13:d0:fd:f0:
a3:70:0e:a4:c6:7d:47:0b:21:8e:e2:d4:4b:cf:41:
5b:60:95:90:c0:42:c7:8a:e3:b2:59:2e:90:c2:b5:
26:2e:fa:3d:65:76:a6:5a:ce:15:cb:84:a9:aa:09:
b0:25:f2:da:1b:91:e5:1a:cb:22:f0:46:da:e2:e9:
32:0c:06:c0:cd:e8:1e:b5:5c:0f:9c:2c:90:a6:11:
a9:6d:af:ac:a3:45:74:88:00:a0:02:6d:b0:71:65:
c0:33:11:61:20:99:6e:a8:f3:7f:0a:76:06:88:81:
7c:d9:6d:e1:df:9a:b1:37:20:3e:11:64:79:b5:99:
d0:17:f1:d0:1f:f0:79:82:87:40:04:e9:56:3a:5d:
c3:cd:0c:5b:71:db:40:66:a3:84:e3:67:2f:f4:16:
ec:94:c1:7b:3d:97:b5:ec:76:a4:a5:94:da:f8:18:
ee:0e:16:bb:98:c3:20:af:64:58:fa:13:7e:9b:1d:
c9:a4:b9:62:57:9e:fb:57:9e:e0:23:8b:e1:42:ac:
71:66:82:c8:f9:c0:58:fc:ac:5a:2b:c9:2c:86:32:
2e:37:5b:f5:7b:b5:da:41:9c:6b:ab:1d:3f:89:90:
99:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9A:29:5F:08:3E:22:2F:6B:88:28:80:10:C9:2A:78:8C:A4:8D:FB
X509v3 Authority Key Identifier:
keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:35:fb:eb:0b:f3:0f:10:bf:82:83:cc:09:e5:50:85:da:53:
28:50:c8:d2:0e:ac:9a:e4:6e:6c:9e:66:22:36:9b:5a:98:00:
3c:9c:15:ec:c0:e8:1b:9f:29:7a:c3:59:28:46:fc:09:4c:88:
e2:30:b5:1a:2b:ea:e9:25:cd:46:08:de:0f:ae:cf:ae:e0:f2:
33:33:da:19:ed:1f:6e:64:96:9e:e6:e1:26:e2:c2:6f:07:2a:
78:b4:11:96:65:cb:cd:ce:1e:90:4c:ff:67:66:88:be:0f:b6:
c0:c1:c1:69:dc:d1:cb:3b:6c:4c:62:d5:e7:a3:d6:88:44:91:
5b:77:f4:39:c9:ff:bc:da:b4:ed:31:78:ed:6f:48:f4:fb:a3:
00:49:31:41:fe:a7:63:b2:d5:ed:ad:8c:c3:95:40:c1:4b:b3:
65:d9:74:58:a4:6c:b5:51:5a:a4:de:6d:1b:0a:fc:bb:4d:52:
db:6e:b9:b6:4c:50:76:fe:d1:90:81:e5:03:2b:ce:e9:c3:a3:
3e:70:1a:33:d1:4b:78:64:57:22:37:3d:7b:b1:96:10:02:3b:
56:7b:eb:66:26:cd:02:b2:e9:fe:35:eb:fe:56:7b:9f:91:ef:
e6:6b:25:8c:60:69:3c:51:13:bb:f1:bd:ae:98:39:b6:ad:47:
c7:f3:54:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:59:50 2026 by rpki-client