
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
File: ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft (raw, json)
Hash identifier: N2qSt3kEZ9uOJW6F5yrKEEpdkQ4E35GkvwcSks/aTAM=
Subject key identifier: 20:96:0A:18:F6:8B:2B:1A:42:C7:2E:6F:88:43:76:54:75:58:FE:65
Authority key identifier: 8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54
Certificate issuer: /CN=A9167671/serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
Manifest number: A6
Signing time: Wed 23 Sep 2026 06:49:50 +0000
Manifest this update: Wed 23 Sep 2026 06:49:50 +0000
Manifest next update: Wed 30 Sep 2026 06:49:50 +0000
Files and hashes: 1: ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl (hash: rb52dpKFBdSt3J7BOXVIHrgLy9RuTIgQeuwd/7+lLCE=)
2: 42AD4128C0FD11F0883D987DC4F9AE02.roa (hash: vGDLBHhQ2uCZ7yDty8cYd4H0mY/09AkesOUGu4E2fks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl
rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167671, serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
Validity
Not Before: Sep 23 06:49:50 2026 GMT
Not After : Sep 30 06:49:50 2026 GMT
Subject: CN=6ab3768e-8588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:77:e0:f8:d3:0b:f5:12:c7:13:d9:54:43:
6c:b1:87:13:8b:b6:e7:a3:99:7c:f5:4a:89:ab:a6:
39:91:39:3b:8a:38:6d:77:85:c5:fd:22:4d:fc:2d:
78:e2:bb:10:4b:35:a5:b8:af:19:dd:54:72:ae:d7:
a0:30:8b:ed:b7:a3:d2:77:09:c6:0f:5c:ab:4f:0e:
c1:72:3d:88:fd:df:43:ca:29:3b:47:ca:f6:3e:8f:
e3:bd:b3:f4:d8:fe:ca:0a:f1:08:d0:30:28:30:c9:
14:47:6a:11:1a:17:2e:f1:38:f3:75:34:6d:41:83:
ee:52:24:92:a1:71:a6:b8:0b:77:e0:13:a5:7e:ae:
20:29:ac:db:07:91:df:eb:fd:9d:ed:2a:4f:6f:3b:
0a:8f:34:59:34:87:ab:4c:46:8d:73:d5:4e:1d:28:
34:74:f9:e0:e4:ad:dc:b5:7b:c3:79:8b:ff:bc:ac:
84:b7:d8:02:ba:6c:7c:ac:ea:fd:18:e4:47:47:2a:
b7:0a:65:fd:41:91:25:82:9f:95:ba:bb:93:69:a0:
22:0a:39:a8:82:c0:bb:fb:bd:f5:75:e9:ad:12:55:
3f:39:3b:15:cf:58:e9:95:a3:ce:e4:8b:22:f4:a7:
d4:e9:8d:38:3d:1b:ef:2e:6c:98:e3:e4:8a:68:5c:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:96:0A:18:F6:8B:2B:1A:42:C7:2E:6F:88:43:76:54:75:58:FE:65
X509v3 Authority Key Identifier:
keyid:8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:76:03:bd:d7:bd:89:1a:1e:f0:97:c0:1e:7d:36:4f:27:ca:
f5:21:83:e4:f7:f1:61:7b:f9:5e:b2:a3:7a:97:fc:f3:08:ad:
e6:e6:f2:f8:dc:df:91:0c:c8:92:ee:91:a6:8a:cd:95:81:44:
d0:bc:27:f8:26:b3:0a:13:41:af:3c:23:99:a3:46:2e:96:0c:
9c:50:6e:1c:51:fa:9e:7e:70:b7:5f:72:16:64:0a:5d:8c:5d:
39:47:75:4d:aa:c7:5f:f6:9c:dd:f7:0e:ff:bc:33:a2:b0:02:
e4:3c:f2:9a:15:5b:58:7a:38:21:a3:f3:10:69:85:bb:2f:68:
71:88:91:c9:de:b5:3d:66:d9:bd:12:2e:ab:fa:a9:82:ba:f6:
fe:a5:f8:2d:ac:f8:43:e2:91:17:13:68:74:21:73:e2:4f:41:
f2:06:11:8b:6f:ab:6d:1d:73:b0:23:39:64:7f:ab:09:51:42:
ab:30:1d:2f:6f:b3:37:53:ab:4a:9a:e8:c5:f6:98:86:d4:09:
13:45:18:c5:77:a3:85:a3:e4:a9:07:54:5c:0a:7f:25:10:d5:
76:b6:b7:ec:00:ef:6e:ff:85:aa:9a:b9:38:00:63:2b:f8:0e:
b5:5e:f5:43:18:dd:3d:b4:ea:19:fe:e3:e0:4e:db:7a:9e:0d:
e4:47:1a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:43:05 2026 by rpki-client