
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
File: IjvkLOOp2KZWIHnlEHR8D_xFImM.mft (raw, json)
Hash identifier: wK+0Lfg3VKsJDF5Bvn/utalKIS4enS7FqMAqML4ZcO8=
Subject key identifier: 85:02:F8:34:C5:78:23:BF:C8:E2:75:95:69:02:72:AC:6A:ED:37:88
Authority key identifier: 22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63
Certificate issuer: /CN=A9156BBA/serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
Manifest number: 2E
Signing time: Mon 11 May 2026 08:54:35 +0000
Manifest this update: Mon 11 May 2026 08:54:34 +0000
Manifest next update: Mon 18 May 2026 08:54:34 +0000
Files and hashes: 1: IjvkLOOp2KZWIHnlEHR8D_xFImM.crl (hash: fU0M5qtWAtFmwuk1OyP8HmUvB9mWUO4Biqic8DlM36A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl
rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156BBA, serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263
Validity
Not Before: May 11 08:54:34 2026 GMT
Not After : May 18 08:54:34 2026 GMT
Subject: CN=6a01994a-8635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:2c:e7:a9:de:66:c8:45:32:af:b3:c2:dc:
93:6f:07:e3:36:17:2e:80:ab:17:86:12:3e:16:22:
da:0a:53:99:15:14:27:d6:84:82:64:73:67:65:a1:
f7:da:bd:3d:ec:38:73:d6:8f:74:e7:ab:bc:2f:97:
1c:38:fe:e3:0e:db:0f:d9:6f:c4:24:ee:7f:60:92:
99:3f:d7:4a:67:3a:b9:77:61:43:c0:2a:a3:9c:68:
f5:f2:c2:6c:93:ac:6a:89:3e:31:6b:6a:ec:72:9e:
4b:5d:c2:5a:f7:4f:f3:61:1d:b0:ec:52:bd:17:be:
b8:13:fb:d4:b6:ed:03:a9:b5:9f:2e:be:a8:bf:71:
47:47:c4:b7:08:9a:8f:18:f2:02:d2:80:0a:98:9a:
4a:72:dc:57:70:29:1a:9a:21:8c:da:89:94:25:8a:
25:37:34:33:60:6e:ea:d4:90:df:95:61:e3:41:63:
09:7e:5c:b1:68:39:fc:2e:a0:02:2e:c4:60:f6:26:
97:1b:46:fc:e5:32:76:7c:f6:ca:e1:44:dd:40:26:
15:d2:29:d3:4d:99:55:d9:53:b5:15:9f:de:f9:6f:
ee:4b:d6:2e:77:8e:fb:ee:40:93:be:d9:4b:5e:65:
e6:7d:c4:d1:18:fb:ef:24:e7:37:a8:09:d0:6a:25:
b0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:02:F8:34:C5:78:23:BF:C8:E2:75:95:69:02:72:AC:6A:ED:37:88
X509v3 Authority Key Identifier:
keyid:22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b4:dd:61:bc:db:db:23:ee:58:6c:05:92:5f:fd:6a:0e:53:
3d:70:76:06:80:bf:24:1f:23:a2:03:8c:5f:f1:7a:8e:34:16:
99:2b:da:36:93:be:09:bb:ec:1c:56:97:3a:85:0d:14:09:e3:
fa:0b:78:ed:73:6d:85:65:26:26:f5:b9:31:a6:24:79:f8:d9:
11:74:a0:e4:ce:84:aa:9d:ae:78:1c:01:57:ff:0e:4a:68:64:
d7:2a:00:5e:b4:2d:9b:50:8e:50:16:88:b2:31:c2:60:94:d2:
e6:d4:89:6f:69:a3:95:71:51:90:47:3b:15:0f:1d:ce:84:d6:
dc:e8:47:cf:59:1a:e4:54:27:9e:cc:f7:8c:22:cb:9d:79:53:
71:8f:95:1e:d7:da:24:c0:b0:98:92:10:71:e8:1b:3f:c6:51:
0e:5e:4e:d8:7b:ff:3b:49:d8:19:79:93:46:67:3c:ba:d1:7a:
57:74:6e:dd:60:8d:65:35:07:67:34:42:fa:65:0c:1c:2f:70:
32:d9:7f:cf:e4:7f:60:6a:fc:6e:35:65:bc:f5:26:27:8a:4b:
91:2d:bf:72:fa:08:c3:5f:7a:ea:9f:71:c0:0f:81:fc:2a:e6:
f3:23:b9:df:fa:67:3d:a2:e2:8e:34:25:0e:94:85:43:15:b1:
b4:e1:b7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:40 2026 by rpki-client