
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
File: IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json)
Hash identifier: LDfvZwjbF8HxoEJy7nH/aXUxoTszs7HCG6+kC7ZXwe8=
Subject key identifier: 85:76:33:76:F0:FC:D1:3B:D1:4F:26:BF:57:F4:AA:CB:BA:CD:3D:71
Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
Certificate issuer: /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
Certificate serial: 3589
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
Manifest number: 3556
Signing time: Tue 12 May 2026 14:19:54 +0000
Manifest this update: Tue 12 May 2026 14:19:53 +0000
Manifest next update: Tue 19 May 2026 14:19:53 +0000
Files and hashes: 1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: ulOMM64wQP7Ltc1izHx8quxA4o2JZWyEfyL71IIdnL4=)
2: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: t1FUONQlvo1z1vAcNEflgs9l4NJNKngDzGvyUzZvKfw=)
3: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: htjWNsJYRCHi02awtSfLaI7Ni5BaFwbvL87PQ+0VPg4=)
4: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: 2V0xaBVMH3qwSFGGeVHjMLvkAdaeXJP/NN3OOPBpG2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl
rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:19:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13705 (0x3589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
Validity
Not Before: May 12 14:19:53 2026 GMT
Not After : May 19 14:19:53 2026 GMT
Subject: CN=6a03370a-cf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:f3:10:0e:6d:31:54:b0:76:88:8d:5d:37:
0b:4b:49:c4:60:d0:35:79:2b:9c:cb:d0:64:1b:f6:
6a:b8:bb:bd:3b:0c:3f:b5:10:a3:26:46:13:d7:c3:
fc:88:07:c8:54:2f:1d:fe:af:b6:f4:5a:2a:3a:ec:
bf:f6:72:f6:81:eb:e2:29:b8:d1:13:49:31:70:cf:
20:5c:2d:70:ee:ef:d5:e3:18:ef:2d:e7:0b:f3:e9:
b8:3e:9b:3b:54:5a:ca:db:0f:ff:fc:55:90:e9:e8:
5e:49:21:ab:f2:3b:4b:01:d0:99:44:6e:48:79:48:
e4:eb:a3:b4:fe:82:ad:9b:f6:b9:e8:a8:84:56:5c:
53:22:78:db:34:50:00:92:7e:d2:54:d8:87:f7:46:
48:1a:cc:51:eb:d2:75:12:70:5a:99:d2:f2:14:28:
27:a4:af:9f:1b:a1:63:6d:f2:fe:e9:21:18:76:46:
08:b2:38:7b:fd:eb:40:db:5e:3f:f0:6a:b6:30:1d:
73:21:62:41:5e:6b:0b:bd:d5:a8:ef:28:e7:fd:f0:
40:3b:6d:29:3f:74:59:c2:80:2c:78:d4:25:b8:58:
45:cb:7b:98:0d:22:37:1b:1d:65:d4:b4:ca:8c:33:
db:94:43:93:66:ec:64:57:86:05:24:c5:89:ee:1b:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:76:33:76:F0:FC:D1:3B:D1:4F:26:BF:57:F4:AA:CB:BA:CD:3D:71
X509v3 Authority Key Identifier:
keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:f6:34:4b:a6:5e:d7:7d:18:69:73:a2:88:45:ad:ed:bf:fc:
42:33:8b:60:79:df:bf:a4:9d:55:7a:32:07:c8:0c:8d:f7:42:
99:8d:05:99:1f:a5:18:cf:d3:e8:c3:b1:fa:86:df:b5:8a:a0:
f8:e8:48:99:9e:fc:c1:77:f0:e5:c6:90:f1:c8:86:73:7d:c2:
e4:c1:3d:e9:f3:31:13:1c:d0:e1:51:a9:12:37:d2:6e:26:66:
88:9c:a1:ce:cb:74:ec:c6:6a:95:88:97:39:aa:dc:39:74:f3:
55:1b:8a:39:1b:7c:e2:9e:ab:22:f4:87:36:1c:1d:73:c5:98:
df:c2:b9:60:9c:60:dd:1d:b2:13:96:3e:a6:2b:7b:1b:92:a5:
96:a9:e4:9e:36:bd:06:9c:09:ce:e3:69:72:e6:d4:c5:39:e6:
c6:2c:e7:ca:55:49:3d:72:38:fd:b7:e6:03:7f:4a:90:49:eb:
c8:a8:34:de:d0:a6:9f:77:2e:ae:94:03:dd:76:dd:8b:40:4a:
4b:f9:8c:db:a3:59:11:20:7d:44:d5:9f:e5:e4:23:c1:aa:17:
45:5e:52:1e:3d:05:75:13:a1:cf:6e:f6:3a:01:73:5c:50:d4:
b0:e6:cb:25:a7:cb:dd:2b:01:3d:9f:6b:72:00:2e:5d:84:b7:
5a:9b:c9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:28 2026 by rpki-client