
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
File: IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json)
Hash identifier: dxQ1bNVWhnxirUnV63DGjYUUF/3BiB8l1vg61s2q/5I=
Subject key identifier: 51:1E:E6:32:17:62:BC:4C:C9:B4:17:8C:E9:72:20:C4:63:8C:A9:51
Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
Certificate issuer: /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
Certificate serial: 35AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
Manifest number: 357A
Signing time: Wed 22 Jul 2026 14:20:03 +0000
Manifest this update: Wed 22 Jul 2026 14:20:03 +0000
Manifest next update: Wed 29 Jul 2026 14:20:03 +0000
Files and hashes: 1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: fUm2ZjleuuO4zBgihhQwv+9Zpj+qp4qdUMg7QZvac4E=)
2: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: 2V0xaBVMH3qwSFGGeVHjMLvkAdaeXJP/NN3OOPBpG2A=)
3: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: t1FUONQlvo1z1vAcNEflgs9l4NJNKngDzGvyUzZvKfw=)
4: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: htjWNsJYRCHi02awtSfLaI7Ni5BaFwbvL87PQ+0VPg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl
rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13741 (0x35ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
Validity
Not Before: Jul 22 14:20:03 2026 GMT
Not After : Jul 29 14:20:03 2026 GMT
Subject: CN=6a60d193-38b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:5d:48:81:03:70:5f:40:fa:76:3c:2a:05:
1e:cf:51:cb:1e:81:0c:f5:5f:c1:19:a0:ce:2f:f6:
8f:19:64:98:05:e9:89:cb:9c:40:b3:2b:eb:2d:68:
4c:ed:50:5f:18:fe:d5:ef:39:52:5f:be:a3:f7:5d:
e9:df:20:15:7b:13:cd:34:5e:c6:5a:a6:69:0b:35:
49:eb:c3:ed:e3:b7:27:c6:19:b2:91:05:95:cc:49:
e2:88:df:69:5c:44:b2:c3:4a:8a:95:76:f8:90:1b:
a2:9d:aa:1d:cb:2d:d2:76:12:4f:77:a2:56:f5:ab:
70:d0:d0:4b:77:5f:f8:84:ca:4b:75:dd:6a:95:c3:
6d:19:96:02:d8:a6:63:9b:51:28:ec:3c:47:81:d8:
45:a0:9d:3c:b4:6e:44:08:58:50:0b:3a:f4:ad:f4:
e8:26:cc:77:93:e1:5a:fd:78:f6:41:7e:55:c1:87:
64:a9:c1:f6:9b:1c:46:69:54:95:15:71:84:c4:41:
0f:ed:ad:32:44:e5:32:8c:a6:fd:d8:54:98:c2:b9:
2b:23:88:52:80:d9:97:63:ef:90:ba:23:60:0d:7c:
ea:32:6d:99:83:49:02:eb:7e:45:2e:7e:7e:2a:41:
86:45:07:f7:e0:81:dc:e9:63:49:0b:bf:18:9a:8f:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1E:E6:32:17:62:BC:4C:C9:B4:17:8C:E9:72:20:C4:63:8C:A9:51
X509v3 Authority Key Identifier:
keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:36:43:78:a6:2a:b6:08:a7:99:4c:33:75:cf:73:1e:64:4b:
b5:d7:7d:c4:7f:86:a6:30:63:4d:4c:9d:06:64:9b:58:f5:df:
02:e7:1e:1d:6f:69:9b:80:b0:1f:fb:30:f5:82:cc:75:a8:d8:
7d:66:e0:6e:bb:7d:ae:ca:54:37:e5:2c:90:11:e2:f5:6b:b6:
db:37:30:c2:52:39:67:d9:b1:50:b0:0b:64:5a:c4:79:24:85:
f0:49:8c:1f:c3:ff:db:11:86:be:26:d9:4e:5e:f6:84:33:4e:
96:71:26:61:b2:bf:6e:20:58:ff:48:a7:d7:93:bf:14:14:43:
8e:de:2e:e3:b7:1c:7e:39:c4:8d:fe:80:f8:36:60:6d:3b:26:
2b:c7:f8:1f:e5:cf:3a:a8:da:af:25:09:d7:ae:f3:8b:09:04:
dc:5f:1a:3f:ee:8b:f9:93:92:fa:d2:91:96:0f:20:06:c8:72:
07:f1:36:36:02:0a:44:b1:46:df:c1:0f:42:54:c5:c7:24:b6:
30:a8:86:17:81:71:e9:1c:be:92:a1:29:b5:af:df:57:5b:78:
5a:d1:ff:0f:03:6c:89:a7:68:ce:3e:a6:be:a5:63:47:cc:53:
9c:8d:2e:8b:96:1a:e7:93:88:c1:c1:19:8f:50:15:22:48:e0:
df:ca:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:00:52 2026 by rpki-client