
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
File: izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json)
Hash identifier: 61oMvMefoU52i1DDHe6JR8UQ+p5vDqDzDsphTS45NVg=
Subject key identifier: 23:1E:01:E1:92:59:78:2F:B7:FA:12:9D:24:20:7C:E3:76:DE:9D:8E
Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79
Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
Manifest number: 0125
Signing time: Thu 23 Jul 2026 07:24:18 +0000
Manifest this update: Thu 23 Jul 2026 07:24:17 +0000
Manifest next update: Thu 30 Jul 2026 07:24:17 +0000
Files and hashes: 1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: b2ZgKc778ud3+j4eiM+OD6pJwTLaN6258qCA8Y0MhGo=)
2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: 9RAPwgPmDHz4AiSmQ6kh7IGZ3ghd3v7puVNtDWxpvZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl
rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179
Validity
Not Before: Jul 23 07:24:17 2026 GMT
Not After : Jul 30 07:24:17 2026 GMT
Subject: CN=6a61c1a1-0ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:1d:7f:37:f5:92:8f:dc:22:ad:75:d7:c9:
02:82:76:a0:56:40:ff:5d:d1:81:ff:ed:0c:f3:d8:
af:96:b8:97:59:bb:38:26:40:0f:e8:27:01:06:97:
89:6e:6b:62:f5:d0:17:c1:76:46:84:23:34:bd:ac:
53:f7:2a:5c:f7:6f:e8:ef:27:5d:c5:f6:d5:d6:48:
0c:2b:db:b9:e4:02:13:67:c5:80:61:11:f5:fe:e1:
58:e9:76:71:1b:b3:ea:16:d4:d1:e5:b2:a6:03:fd:
c5:5d:13:e3:fe:db:bb:57:df:61:41:ea:a6:81:bc:
46:d0:c5:46:3f:f4:9f:72:18:3b:5f:7b:1f:de:d4:
30:4e:9a:91:47:ef:6b:9d:cd:72:7a:53:cb:1b:b3:
e0:39:d8:35:d8:f7:21:20:19:53:e7:75:4c:95:58:
0d:ce:5f:2c:87:a4:9a:54:c8:a9:eb:cd:90:d0:81:
9e:0e:fd:42:e8:fb:12:27:3d:f9:a4:cc:5c:1f:a3:
44:74:2d:e1:0b:d4:40:ed:38:c0:91:df:f6:0d:d1:
16:ff:04:b6:bf:c6:69:39:f3:f5:0d:c2:55:0c:42:
30:65:64:0f:2a:df:05:e3:d3:ad:ab:14:99:f2:f2:
74:48:ba:1e:24:e6:f9:13:1f:bf:9a:e0:43:01:c8:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1E:01:E1:92:59:78:2F:B7:FA:12:9D:24:20:7C:E3:76:DE:9D:8E
X509v3 Authority Key Identifier:
keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:ed:50:99:d6:bb:55:fb:be:b4:78:a9:3f:39:7c:8b:32:cb:
70:32:21:e8:2d:29:d8:63:57:ed:84:e0:49:52:64:1c:44:2e:
b0:ad:05:18:0f:b7:21:25:e9:1a:aa:c1:10:17:83:af:b7:da:
1e:f2:3b:79:65:8b:d4:d0:56:4e:32:de:36:e7:31:d6:d2:2c:
04:e6:74:e4:41:5e:56:3e:7a:c2:a0:d6:87:dd:10:b0:f1:ed:
73:9c:b6:6f:af:4c:29:0e:aa:0a:d4:84:02:40:d8:0d:71:b3:
1d:85:d9:af:31:04:36:f5:eb:c6:6a:6d:fe:f1:91:c8:ae:b1:
43:b6:c1:83:eb:aa:d6:e3:76:57:bd:e4:3a:35:7a:69:c3:46:
67:c4:dd:78:aa:5e:17:93:6e:ea:94:18:57:2b:80:78:65:c8:
c9:19:c6:c8:ac:ae:da:f1:28:33:00:5c:73:e3:65:81:5a:3e:
28:10:fb:da:aa:29:10:ac:4d:22:56:20:03:16:11:a0:63:96:
b4:d5:94:f0:01:34:81:15:35:30:f7:26:eb:73:db:f9:86:e1:
cf:04:ad:d7:ca:1a:db:e2:75:ae:3a:7d:d7:26:83:17:5a:6b:
ab:6a:c1:ed:5d:79:4c:0e:e9:be:dc:32:e5:56:ae:0e:2f:92:
33:9c:4b:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY4NTQxMTAvBgNVBAUTKDhCMzQ3MUI5MEI3QTVCQzc2Q0UzRkMwOUFDQUM4OTI4
RUI0RDgxNzkwHhcNMjYwNzIzMDcyNDE3WhcNMjYwNzMwMDcyNDE3WjAYMRYwFAYD
VQQDEw02YTYxYzFhMS0wYWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqJodfzf1ko/cIq1118kCgnagVkD/XdGB/+0M89ivlriXWbs4JkAP6CcBBpeJ
bmti9dAXwXZGhCM0vaxT9ypc92/o7yddxfbV1kgMK9u55AITZ8WAYRH1/uFY6XZx
G7PqFtTR5bKmA/3FXRPj/tu7V99hQeqmgbxG0MVGP/Sfchg7X3sf3tQwTpqRR+9r
nc1yelPLG7PgOdg12PchIBlT53VMlVgNzl8sh6SaVMip682Q0IGeDv1C6PsSJz35
pMxcH6NEdC3hC9RA7TjAkd/2DdEW/wS2v8ZpOfP1DcJVDEIwZWQPKt8F49OtqxSZ
8vJ0SLoeJOb5Ex+/muBDAch72QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCMeAeGS
WXgvt/oSnSQgfON23p2OMB8GA1UdIwQYMBaAFIs0cbkLelvHbOP8CaysiSjrTYF5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njg1NC9ENTNFMUI2RUNC
MjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9pelJ4dVF0Nlc4ZHM0X3dKckt5SktPdE5n
WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2l6Unh1UXQ2VzhkczRfd0pyS3lKS090TmdYay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Njg1NC9ENTNFMUI2RUNCMjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9pelJ4dVF0Nlc4
ZHM0X3dKckt5SktPdE5nWGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKO1Qmda7Vfu+tHipPzl8izLLcDIh6C0p2GNX7YTgSVJkHEQusK0FGA+3ISXp
GqrBEBeDr7faHvI7eWWL1NBWTjLeNucx1tIsBOZ05EFeVj56wqDWh90QsPHtc5y2
b69MKQ6qCtSEAkDYDXGzHYXZrzEENvXrxmpt/vGRyK6xQ7bBg+uq1uN2V73kOjV6
acNGZ8TdeKpeF5Nu6pQYVyuAeGXIyRnGyKyu2vEoMwBcc+NlgVo+KBD72qopEKxN
IlYgAxYRoGOWtNWU8AE0gRU1MPcm63Pb+YbhzwSt18oa2+J1rjp91yaDF1prq2rB
7V15TA7pvtwy5VauDi+SM5xLEA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:25:16 2026 by rpki-client