
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
File: IjvkLOOp2KZWIHnlEHR8D_xFImM.mft (raw, json)
Hash identifier: S9yhQzA5IGl0OgGO3QefIFQKxcc3ZI31IGo40c1ldNU=
Subject key identifier: F0:28:1F:60:9C:72:4F:43:6E:9A:58:F7:09:71:2C:65:A0:3B:00:3F
Authority key identifier: 22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63
Certificate issuer: /CN=A9156BBA/serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263
Certificate serial: 72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
Manifest number: 72
Signing time: Wed 23 Sep 2026 07:39:29 +0000
Manifest this update: Wed 23 Sep 2026 07:39:29 +0000
Manifest next update: Wed 30 Sep 2026 07:39:29 +0000
Files and hashes: 1: IjvkLOOp2KZWIHnlEHR8D_xFImM.crl (hash: gyuPOkHYdAdRXkqbBkoFeloF2lHid86atc3qsGsjuVA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl
rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156BBA, serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263
Validity
Not Before: Sep 23 07:39:29 2026 GMT
Not After : Sep 30 07:39:29 2026 GMT
Subject: CN=6ab38231-fe4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:99:03:03:63:2c:25:84:2d:5a:4b:b8:4d:
ea:21:a8:2d:a4:04:ee:14:ed:ad:de:99:e3:52:1c:
75:09:cd:bc:1f:f6:91:a7:ca:24:f3:db:bf:62:c3:
2a:8c:9d:25:50:63:53:e2:75:39:96:12:ac:48:c0:
e3:ed:49:27:67:d0:42:b5:61:12:4c:36:42:cd:54:
80:9e:46:ca:46:28:c7:0a:51:fb:93:61:bf:6b:93:
ad:45:ed:e8:9d:6f:df:a8:33:3d:d7:76:af:a3:ad:
0e:80:b9:a1:26:5e:81:d0:38:1a:18:14:f3:98:24:
cb:45:e5:ef:01:94:0b:6c:30:d1:fe:1b:b9:50:84:
52:ac:c5:65:db:74:6e:40:0d:c9:84:ce:25:a0:bc:
91:31:f0:e7:67:05:c2:fe:35:bb:ee:65:a3:e6:9e:
e1:a7:0e:b2:6b:f2:a7:bf:d2:bb:3d:b1:c9:a9:1b:
4b:f0:c3:7d:16:f3:6a:10:30:c7:46:e6:0e:15:7e:
a0:da:0c:f1:1f:d3:cc:73:ab:10:dd:97:68:2f:a4:
31:6d:f6:6b:e9:85:1d:50:5b:99:b1:a3:ec:ed:30:
a9:b1:60:94:d5:e8:c9:94:e2:4a:ef:70:82:4d:28:
50:8c:48:fc:85:a1:5c:c4:47:e4:5e:1c:cc:75:9d:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:28:1F:60:9C:72:4F:43:6E:9A:58:F7:09:71:2C:65:A0:3B:00:3F
X509v3 Authority Key Identifier:
keyid:22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:31:31:93:ce:bd:13:bb:32:4d:65:68:3d:91:37:a7:7c:66:
96:d7:52:74:be:f6:f9:41:57:9d:18:b7:73:53:2d:eb:87:81:
dd:c4:fd:39:62:3f:03:6b:26:5c:1b:0b:f5:87:b3:a9:06:51:
54:6a:6b:8b:1c:0d:f4:cc:8e:c9:6c:d2:40:67:30:79:20:70:
e8:a8:e2:1e:b0:5a:22:2b:c2:57:26:3c:60:61:4a:12:49:7b:
43:82:6a:96:bd:3c:d8:3a:b0:3b:9d:f0:ed:a2:5e:f1:27:aa:
31:f3:7e:fa:7e:4a:9c:23:6e:f4:0f:c2:46:ed:ac:1c:d2:61:
81:17:98:ba:c5:a3:d3:fc:93:1f:10:96:d7:2a:c8:8b:d0:e9:
e5:24:6c:12:7c:9e:39:2a:c6:4a:b3:f2:f3:bb:22:01:b2:5b:
f9:b3:07:1d:14:51:59:d2:a5:69:d9:da:79:49:18:16:96:ce:
96:6f:30:78:d3:a8:27:06:a8:41:34:c3:bc:de:f4:b3:bc:b6:
c8:6e:57:7a:e0:17:23:4a:1f:15:0b:a8:35:ca:ad:1d:ec:39:
d4:65:dc:60:a3:dc:41:9e:d9:1f:1f:6b:b0:39:9b:82:72:6b:
a4:07:47:73:e6:39:a9:b5:0b:72:2f:23:dc:f0:89:68:84:f9:
2f:36:15:35
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NkJCQTExMC8GA1UEBRMoMjIzQkU0MkNFM0E5RDhBNjU2MjA3OUU1MTA3NDdDMEZG
QzQ1MjI2MzAeFw0yNjA5MjMwNzM5MjlaFw0yNjA5MzAwNzM5MjlaMBgxFjAUBgNV
BAMTDTZhYjM4MjMxLWZlNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCXGJkDA2MsJYQtWku4TeohqC2kBO4U7a3emeNSHHUJzbwf9pGnyiTz279iwyqM
nSVQY1PidTmWEqxIwOPtSSdn0EK1YRJMNkLNVICeRspGKMcKUfuTYb9rk61F7eid
b9+oMz3Xdq+jrQ6AuaEmXoHQOBoYFPOYJMtF5e8BlAtsMNH+G7lQhFKsxWXbdG5A
DcmEziWgvJEx8OdnBcL+NbvuZaPmnuGnDrJr8qe/0rs9scmpG0vww30W82oQMMdG
5g4VfqDaDPEf08xzqxDdl2gvpDFt9mvphR1QW5mxo+ztMKmxYJTV6MmU4krvcIJN
KFCMSPyFoVzER+ReHMx1naNvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8CgfYJxy
T0Numlj3CXEsZaA7AD8wHwYDVR0jBBgwFoAUIjvkLOOp2KZWIHnlEHR8D/xFImMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QkJBL0EyQ0E0M0RDMEQy
MjExRjFCOUI3MUU1OTA4M0Q4QzY3L0lqdmtMT09wMktaV0lIbmxFSFI4RF94Rklt
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSWp2a0xPT3AyS1pXSUhubEVIUjhEX3hGSW1NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2
QkJBL0EyQ0E0M0RDMEQyMjExRjFCOUI3MUU1OTA4M0Q4QzY3L0lqdmtMT09wMkta
V0lIbmxFSFI4RF94RkltTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCtMTGTzr0TuzJNZWg9kTenfGaW11J0vvb5QVedGLdzUy3rh4HdxP05Yj8DayZc
Gwv1h7OpBlFUamuLHA30zI7JbNJAZzB5IHDoqOIesFoiK8JXJjxgYUoSSXtDgmqW
vTzYOrA7nfDtol7xJ6ox8376fkqcI270D8JG7awc0mGBF5i6xaPT/JMfEJbXKsiL
0OnlJGwSfJ45KsZKs/LzuyIBslv5swcdFFFZ0qVp2dp5SRgWls6WbzB406gnBqhB
NMO83vSzvLbIbld64BcjSh8VC6g1yq0d7DnUZdxgo9xBntkfH2uwOZuCcmukB0dz
5jmptQtyLyPc8IlohPkvNhU1
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:59:42 2026 by rpki-client