
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft
File: iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft (raw, json)
Hash identifier: T1pVRF9wZEMfBx0wVckcH9HZEFjaF/F2aRV0hHSjXw8=
Subject key identifier: 19:70:B6:79:C0:0C:62:F5:23:EA:D2:4D:A4:10:DA:06:6F:76:C2:FE
Authority key identifier: 88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44
Certificate issuer: /CN=A9157DA0/serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44
Certificate serial: 356B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft
Manifest number: 354F
Signing time: Tue 12 May 2026 14:36:50 +0000
Manifest this update: Tue 12 May 2026 14:36:49 +0000
Manifest next update: Tue 19 May 2026 14:36:49 +0000
Files and hashes: 1: iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl (hash: p+JX3X//1HMPMG5mH7T5T5cSj/EeOyHkDrZEpMQIPJQ=)
2: 075152B253CB11F09DA22358C4F9AE02.roa (hash: fGf/PGVtu9coS4OTxiQfwTin94woH0RC8SYgnjce7aM=)
3: E4BA3CE8DFCE11EFBC4CD631C4F9AE02.roa (hash: EmtqkldBy+S1KrrhPoPa/VOGFTeYDwSx06Mb2C05cC8=)
4: 10BC8836509B11F0A1C78F35C4F9AE02.roa (hash: 8vDZoZnTL3EsLAf9lWoggGQcc7J0/U/rlfaQO/B5nJw=)
5: E52708AADFCE11EFBC4CD631C4F9AE02.roa (hash: UwLoOyaZbHGVyc3Yo+XyKXXwqdXa6YKf1q7At4kg4i0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl
rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13675 (0x356b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DA0, serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44
Validity
Not Before: May 12 14:36:49 2026 GMT
Not After : May 19 14:36:49 2026 GMT
Subject: CN=6a033b01-8767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:13:ab:33:c9:be:af:cc:65:f7:f1:5d:9c:
e4:50:66:04:86:3d:27:da:69:9d:4e:2e:5d:22:d3:
99:ec:cd:f6:15:17:fa:a2:35:5a:ec:dd:62:67:7b:
dd:fa:9f:51:ae:b9:5c:f5:84:85:95:44:d2:22:74:
74:5d:0e:ef:3d:e4:e1:77:47:ea:29:5e:83:76:c8:
9b:6f:d0:84:0a:64:90:96:f5:f0:73:7d:08:a6:f7:
84:45:46:75:3d:f1:49:86:bd:f5:74:3b:b8:25:8e:
62:cf:1f:04:bf:7e:42:e1:86:54:26:1a:86:98:e3:
bd:0f:aa:79:a9:4d:c1:a0:86:86:e1:cf:a9:ec:fd:
60:c1:cd:fe:03:3d:e0:30:45:78:39:75:09:a5:24:
07:96:93:67:e3:b5:5f:d0:02:2e:ce:75:d9:9d:af:
c3:1b:96:2f:66:a5:3b:6e:d6:2c:01:36:b5:57:04:
f9:1b:92:9a:86:23:38:a5:60:7c:44:3a:fe:15:fe:
41:35:a0:4a:15:30:1b:5d:97:71:e3:1c:29:bb:99:
97:5b:fd:46:e7:6b:dc:46:bf:26:15:56:95:e4:6a:
d1:d5:66:64:7c:ca:0b:2b:81:44:74:23:ca:16:c8:
9d:bc:6c:67:c2:22:e1:25:90:cf:21:7b:61:62:38:
ad:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:70:B6:79:C0:0C:62:F5:23:EA:D2:4D:A4:10:DA:06:6F:76:C2:FE
X509v3 Authority Key Identifier:
keyid:88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:18:4a:ca:95:b0:3b:3c:d3:3d:6d:b6:66:2e:d2:f1:ef:0b:
72:9b:ec:41:75:8b:25:37:49:51:e4:74:d7:f6:d0:c9:c5:3d:
07:89:a4:28:41:a8:e1:ea:fc:63:d1:7b:ab:ee:c8:ee:7c:dc:
c2:8b:9e:89:d2:d4:27:41:a5:60:a2:90:7d:31:d0:5b:a1:63:
3e:e0:24:ed:2e:6d:14:30:60:b6:42:87:59:76:6f:6e:2e:16:
cc:2c:dd:a8:e7:eb:b2:e6:a4:18:66:31:ab:6b:67:f1:33:0d:
0a:3a:2a:57:95:d2:46:8a:ed:f5:42:8a:f0:15:d7:c0:61:3b:
1b:22:5e:fe:ca:d2:06:a3:27:b1:4f:e3:f3:91:8b:fa:1b:16:
32:c8:a8:63:0c:7a:ab:7c:79:46:bf:e2:ed:01:d7:49:c8:07:
87:d5:7e:75:5e:b7:05:b2:9a:33:51:e5:44:66:fa:ce:27:06:
70:de:e2:81:57:28:80:a0:0c:33:5d:5a:bd:1e:a6:4a:db:39:
24:88:f6:c4:fc:1a:a7:34:fb:52:eb:a2:a1:04:07:ed:ce:c8:
3f:a0:5c:1b:b9:02:98:f2:26:eb:dc:ae:b7:7d:b4:3a:94:8b:
82:38:30:d0:f8:05:9d:16:6e:33:ef:5a:a9:06:68:d9:31:03:
b7:c5:91:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:57 2026 by rpki-client