
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft
File: ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft (raw, json)
Hash identifier: 8LzqOu+oOSC/t+0yZ95IlOYmtxROBoFfDrl0iHVbZU8=
Subject key identifier: 6D:C4:95:61:82:D7:FC:6E:BC:35:52:A5:79:C1:01:72:5F:2D:B8:89
Authority key identifier: 20:B6:5F:35:86:7D:15:CE:0F:79:F1:E8:30:8F:6F:65:E6:4D:25:1A
Certificate issuer: /CN=A917B23B/serialNumber=20B65F35867D15CE0F79F1E8308F6F65E64D251A
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft
Manifest number: 11
Signing time: Fri 25 Sep 2026 09:16:28 +0000
Manifest this update: Fri 25 Sep 2026 09:16:27 +0000
Manifest next update: Fri 02 Oct 2026 09:16:27 +0000
Files and hashes: 1: ILZfNYZ9Fc4PefHoMI9vZeZNJRo.crl (hash: VeAN/r8s9OYtOTf9335KE6OSVrV/IDm+UqUeb6bqYtY=)
2: 99F2CE74A1F011F1BB91A1DB3E11F970.roa (hash: 0f/muL4dbsS2xjRlJDf6C/ZSy3ovWH7NqcxlwtnGGaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.crl
rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 09:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B23B, serialNumber=20B65F35867D15CE0F79F1E8308F6F65E64D251A
Validity
Not Before: Sep 25 09:16:27 2026 GMT
Not After : Oct 2 09:16:27 2026 GMT
Subject: CN=6ab63bec-3c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:cc:7f:e7:b1:82:b7:73:e0:84:41:7d:e5:
37:20:ad:43:0c:3b:f2:db:92:9f:e5:04:60:18:6a:
af:e9:e8:7f:ef:0f:63:84:bf:a2:75:bd:b5:1c:15:
8e:92:c3:7f:7b:7e:d1:77:50:10:b6:99:a2:25:44:
d7:75:b3:e5:a7:41:1a:90:99:20:ae:2c:43:c4:4b:
73:e7:3a:b5:f0:50:a0:0f:9b:56:27:51:2e:5c:db:
ed:89:43:cd:03:a9:75:25:74:51:8e:30:4e:00:b8:
d9:62:f6:2d:6f:7d:5e:c4:dc:b5:ec:70:86:88:0c:
ed:75:33:57:03:09:53:fb:c9:d2:9d:28:9c:56:7f:
33:93:97:59:0a:19:c6:06:e1:b8:81:eb:c4:21:10:
ee:91:b9:bd:e0:7b:13:e7:b1:20:40:a2:9e:fe:ff:
3c:f5:65:d8:fd:92:57:5b:28:8d:26:18:d7:6b:85:
9e:d3:b9:46:c0:49:e0:1d:b0:29:1b:63:19:5a:01:
2a:ac:9a:72:f5:aa:13:7e:cc:62:ef:31:a3:a6:f8:
f5:e8:21:02:0b:13:98:97:7d:b7:9e:e1:3d:97:88:
f0:5d:f9:5a:b8:b0:67:90:c0:63:ef:07:62:92:b7:
ba:7a:ab:00:a3:41:5a:d7:aa:67:7e:1f:17:ef:3a:
da:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C4:95:61:82:D7:FC:6E:BC:35:52:A5:79:C1:01:72:5F:2D:B8:89
X509v3 Authority Key Identifier:
keyid:20:B6:5F:35:86:7D:15:CE:0F:79:F1:E8:30:8F:6F:65:E6:4D:25:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:1c:f1:fc:f4:28:5d:90:ea:99:0f:e4:22:a6:93:b0:29:62:
4c:50:9a:b4:87:f9:18:64:b3:50:36:1a:85:8a:f8:0d:f1:42:
75:8a:7f:24:bc:0d:f4:b8:61:54:9e:e5:36:39:8f:78:f6:50:
40:de:1e:71:3e:7a:ae:91:a2:9a:12:94:1a:c0:35:89:31:e9:
f0:4b:17:43:3b:0f:eb:65:7c:69:b3:d6:f0:b1:11:a2:09:96:
bc:c9:b3:99:c9:5b:01:b2:f3:12:4f:41:fb:85:c1:b8:81:a5:
07:15:c1:a4:8b:c4:39:a4:23:77:b6:d5:d8:a3:fb:83:d9:4e:
ae:43:c7:a3:d5:e0:55:43:ee:42:cb:2e:51:d2:91:b0:2b:5a:
24:73:87:c9:22:45:57:29:4d:31:29:6e:f0:78:9b:93:66:31:
6f:21:4e:9e:29:2a:c9:cd:5a:2a:36:50:06:1e:35:39:7d:56:
61:e5:fe:77:a1:3c:3f:71:5a:77:ef:26:41:f7:54:8e:f4:5a:
ba:0d:ab:14:c4:bc:f0:ac:f2:b7:4c:24:27:28:5a:a5:0e:8f:
63:05:bb:ef:5f:7c:b7:54:31:2a:3a:58:92:65:eb:fa:bb:8c:
0c:51:b0:07:d8:98:f8:28:8f:9f:e8:20:07:ec:1f:a9:27:5d:
5a:5d:3f:b9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QjIzQjExMC8GA1UEBRMoMjBCNjVGMzU4NjdEMTVDRTBGNzlGMUU4MzA4RjZGNjVF
NjREMjUxQTAeFw0yNjA5MjUwOTE2MjdaFw0yNjEwMDIwOTE2MjdaMBgxFjAUBgNV
BAMTDTZhYjYzYmVjLTNjNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnuMx/57GCt3PghEF95TcgrUMMO/Lbkp/lBGAYaq/p6H/vD2OEv6J1vbUcFY6S
w397ftF3UBC2maIlRNd1s+WnQRqQmSCuLEPES3PnOrXwUKAPm1YnUS5c2+2JQ80D
qXUldFGOME4AuNli9i1vfV7E3LXscIaIDO11M1cDCVP7ydKdKJxWfzOTl1kKGcYG
4biB68QhEO6Rub3gexPnsSBAop7+/zz1Zdj9kldbKI0mGNdrhZ7TuUbASeAdsCkb
YxlaASqsmnL1qhN+zGLvMaOm+PXoIQILE5iXfbee4T2XiPBd+Vq4sGeQwGPvB2KS
t7p6qwCjQVrXqmd+HxfvOtrhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbcSVYYLX
/G68NVKlecEBcl8tuIkwHwYDVR0jBBgwFoAUILZfNYZ9Fc4PefHoMI9vZeZNJRow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCMjNCLzIzREE2QUU0QTFG
MDExRjFBNjUyQ0JGNjNEMTFGOTcwL0lMWmZOWVo5RmM0UGVmSG9NSTl2WmVaTkpS
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSUxaZk5ZWjlGYzRQZWZIb01JOXZaZVpOSlJvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC
MjNCLzIzREE2QUU0QTFGMDExRjFBNjUyQ0JGNjNEMTFGOTcwL0lMWmZOWVo5RmM0
UGVmSG9NSTl2WmVaTkpSby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCVHPH89ChdkOqZD+QippOwKWJMUJq0h/kYZLNQNhqFivgN8UJ1in8kvA30uGFU
nuU2OY949lBA3h5xPnqukaKaEpQawDWJMenwSxdDOw/rZXxps9bwsRGiCZa8ybOZ
yVsBsvMST0H7hcG4gaUHFcGki8Q5pCN3ttXYo/uD2U6uQ8ej1eBVQ+5Cyy5R0pGw
K1okc4fJIkVXKU0xKW7weJuTZjFvIU6eKSrJzVoqNlAGHjU5fVZh5f53oTw/cVp3
7yZB91SO9Fq6DasUxLzwrPK3TCQnKFqlDo9jBbvvX3y3VDEqOliSZev6u4wMUbAH
2Jj4KI+f6CAH7B+pJ11aXT+5
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:56:19 2026 by rpki-client