
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
File: ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft (raw, json)
Hash identifier: JwThm0pKv9euPnvWIRBbR8IVARjCsPpHEHqGFXcE8yo=
Subject key identifier: BA:F7:6E:9D:FA:34:CF:53:A4:57:9A:3A:60:7D:75:0A:57:00:FB:8D
Authority key identifier: 8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54
Certificate issuer: /CN=A9167671/serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
Manifest number: 86
Signing time: Thu 23 Jul 2026 09:20:44 +0000
Manifest this update: Thu 23 Jul 2026 09:20:43 +0000
Manifest next update: Thu 30 Jul 2026 09:20:43 +0000
Files and hashes: 1: ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl (hash: i83VjcCkIIELVNb3btmcMpE7pxRyouDTpiXXU80Pxyo=)
2: 42AD4128C0FD11F0883D987DC4F9AE02.roa (hash: vGDLBHhQ2uCZ7yDty8cYd4H0mY/09AkesOUGu4E2fks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl
rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167671, serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
Validity
Not Before: Jul 23 09:20:43 2026 GMT
Not After : Jul 30 09:20:43 2026 GMT
Subject: CN=6a61dcec-6107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:ee:88:59:ef:6f:dc:93:24:30:65:d1:b1:
cf:ef:54:65:33:75:f0:b3:c4:40:eb:11:c5:f5:b8:
91:c6:37:cf:b1:5d:1a:4c:10:24:45:9b:a6:b1:8d:
3e:0a:79:0c:69:7e:fd:27:6b:a4:62:6c:ef:89:d9:
c1:1f:7a:37:5d:12:48:1c:47:c5:ec:fb:9d:1c:80:
30:ea:f5:6e:eb:d3:e9:2b:4c:27:71:f5:12:82:1e:
54:40:97:fe:d5:00:a9:83:f4:be:f1:02:2e:c4:85:
ac:90:e6:b5:f1:96:4c:eb:64:e6:97:55:27:f4:2a:
ba:7e:1d:fd:87:ad:be:83:a0:ee:bc:9d:52:38:dc:
8b:96:67:09:06:99:79:36:3c:b6:85:aa:86:21:f1:
82:ff:d2:d2:56:c0:23:64:ab:f9:cf:b9:3d:9d:0e:
2c:a1:8e:f3:5b:b1:05:78:31:f9:13:dd:bc:cc:a5:
81:9d:9c:12:02:8d:99:a4:92:da:5b:66:53:aa:e5:
6d:fd:b6:18:f4:db:23:5d:84:e8:56:1c:d9:03:fc:
b7:cb:ee:6f:83:11:2d:89:6a:bf:49:f2:40:8e:e4:
c6:c2:46:35:16:8c:6a:5e:8d:25:64:b5:08:e5:d5:
19:38:c2:ea:75:f0:cb:41:a5:81:48:dd:bf:dc:ed:
7a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F7:6E:9D:FA:34:CF:53:A4:57:9A:3A:60:7D:75:0A:57:00:FB:8D
X509v3 Authority Key Identifier:
keyid:8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:08:ff:d3:4a:d2:c6:48:78:29:e0:97:dc:57:a6:ee:69:39:
1c:b8:67:44:6c:bf:61:c2:1c:c0:96:8c:f9:12:fa:df:5d:50:
e3:dd:40:c4:f3:9e:36:ae:11:e6:42:9f:85:ff:3e:cc:ad:11:
93:81:4c:52:f9:6c:30:2e:41:04:47:54:69:cd:05:40:0d:97:
3c:03:d9:2c:0a:ec:ca:3e:e6:86:df:c7:64:7d:9b:8f:80:7a:
2d:04:8a:66:88:e3:b1:3b:f5:2c:aa:37:84:e7:7f:e4:14:09:
c2:d9:c2:70:32:c6:a2:26:17:bd:c8:22:f6:22:db:6f:8c:f1:
dd:67:40:8d:af:26:94:64:a5:75:b6:8e:64:6f:e2:57:0f:6e:
fc:d3:76:ff:78:dc:4b:63:02:97:e2:4f:39:0a:a4:ec:41:8b:
3a:fe:03:f4:1c:d4:29:b3:df:07:c8:7f:e9:94:4d:b9:62:06:
58:45:fa:13:0d:21:84:92:f8:0b:8a:4d:9d:7c:78:8b:d8:66:
61:07:a9:29:03:14:9f:79:13:d0:e4:6e:ad:c8:0e:ee:f8:d6:
a4:c0:c0:eb:ee:3c:59:a3:c8:ca:ee:98:db:1b:15:55:46:ee:
c8:73:43:5c:23:b9:93:06:18:c8:29:a2:49:6b:ed:a3:b4:0e:
42:8d:ef:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:22 2026 by rpki-client