
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
File: iH4RB6g_EXT_fj54CIjbVyO3kls.mft (raw, json)
Hash identifier: Y7cZCy/VTzZ00sIQRlS6AuGcX/a7/QtMvPfbvg9vs08=
Subject key identifier: CD:93:51:14:FB:F5:40:C7:35:C3:EC:C8:4E:81:3E:CF:0A:4C:4D:A9
Authority key identifier: 88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B
Certificate issuer: /CN=A9155806/serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
Manifest number: 0167
Signing time: Thu 23 Jul 2026 06:33:36 +0000
Manifest this update: Thu 23 Jul 2026 06:33:35 +0000
Manifest next update: Thu 30 Jul 2026 06:33:35 +0000
Files and hashes: 1: iH4RB6g_EXT_fj54CIjbVyO3kls.crl (hash: RgUZkanlpgcuxdWPHa/PoX/gHiGJRPdqYD1OJYJhg/8=)
2: 10435EE8740511EF93658977C4F9AE02.roa (hash: 6+dRrxPmWRCMlxCcSYhpVStcDeLZfIKjMMz2mDaOI+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl
rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155806, serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B
Validity
Not Before: Jul 23 06:33:35 2026 GMT
Not After : Jul 30 06:33:35 2026 GMT
Subject: CN=6a61b5c0-9fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:29:51:e9:1e:c5:77:60:60:e8:40:69:1c:5b:
df:b0:15:ed:7f:96:52:b8:ec:5c:fe:34:f9:3f:f9:
c8:3c:7e:3b:08:74:5f:c2:ea:2e:a1:99:be:92:fd:
2f:cf:c6:38:41:ae:f4:ab:75:58:cb:f0:f1:11:98:
26:6b:8b:c0:03:b4:45:75:82:4c:96:25:6e:75:5d:
9c:df:d4:47:c8:f5:de:09:e1:31:10:cf:a8:11:04:
cb:fd:13:d3:7f:97:de:be:e8:30:d9:5d:b4:4f:f0:
92:93:c9:f4:8e:74:0c:0b:30:d3:7b:81:61:b7:1e:
17:bf:6f:f1:c3:da:a9:a4:be:95:bd:fb:7e:46:53:
54:e5:2a:18:e5:bd:99:42:1b:96:91:c2:cd:76:80:
67:ea:26:67:e1:ae:5b:64:5a:1e:d8:ef:09:e5:51:
76:3d:18:2a:b0:9e:73:12:89:74:a4:b2:fc:8d:8d:
ac:64:ec:b4:40:f5:fc:9d:af:93:8c:ee:a4:c8:9e:
d6:d2:50:99:cf:b9:83:d4:07:0b:71:45:b5:ee:f4:
64:ad:62:db:7f:be:a2:e5:be:81:2f:60:28:91:87:
64:3f:80:d1:cd:ba:47:7d:49:ed:37:7b:25:c9:3f:
fd:6d:96:60:da:34:fb:f2:c3:c8:4f:b1:88:2a:aa:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:93:51:14:FB:F5:40:C7:35:C3:EC:C8:4E:81:3E:CF:0A:4C:4D:A9
X509v3 Authority Key Identifier:
keyid:88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:50:4b:5d:c7:d9:23:d9:3b:44:d4:69:45:bd:de:8b:1f:9f:
c7:48:fa:6f:0f:21:2f:18:cb:bf:a4:83:96:d3:61:36:2c:3e:
63:50:1b:70:8b:ad:45:8b:87:b2:a2:06:c6:bf:dc:fe:e9:5e:
76:40:59:b1:d2:31:83:b9:c4:24:6f:ad:1f:8f:f4:b7:07:e2:
84:4e:e0:b3:03:f5:6c:79:7a:26:0b:02:40:f2:51:26:9a:08:
52:73:c4:67:77:ef:3d:46:8a:af:c6:25:de:bb:22:3b:89:9e:
1f:a7:30:9a:1d:d4:d7:3d:b5:b5:d2:b8:32:ae:d1:e4:63:dd:
c9:d1:ae:7c:ff:83:ca:27:c1:ec:c1:d8:98:77:c3:ea:3d:ea:
d7:27:bb:81:1a:51:a5:d1:fb:23:9b:e5:72:69:0d:e3:8e:99:
2f:e0:8b:d0:da:26:f3:f0:c2:17:a3:2b:8f:7e:ed:63:6d:ee:
fa:8d:a2:2f:1c:06:45:db:41:91:92:e4:38:a0:9a:b1:d4:03:
4e:38:93:9b:19:13:8b:4d:a5:b7:87:02:e9:46:a6:08:66:37:
38:c5:e8:e5:66:74:8d:7c:a4:5f:1b:9c:a0:d2:02:03:d1:c1:
db:cc:2c:e0:cd:89:92:60:4b:90:ec:4c:27:e5:20:5b:fe:78:
07:f2:39:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:29 2026 by rpki-client