
$ rpki-client -vvf rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft
File: I2o4zV7FL3Doi4BtcV63sELNfr8.mft (raw, json)
Hash identifier: ukd+dy8WDNIkZCVAXD7v9lmiUz2bLLPv6Hqzb9cA+48=
Subject key identifier: 3C:42:00:D3:5D:72:3F:DC:3C:03:5A:32:7B:B2:12:BF:E5:BC:EE:95
Authority key identifier: 23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF
Certificate issuer: /CN=A918120B/serialNumber=236A38CD5EC52F70E88B806D715EB7B042CD7EBF
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft
Manifest number: 75
Signing time: Thu 23 Jul 2026 09:51:11 +0000
Manifest this update: Thu 23 Jul 2026 09:51:11 +0000
Manifest next update: Thu 30 Jul 2026 09:51:11 +0000
Files and hashes: 1: I2o4zV7FL3Doi4BtcV63sELNfr8.crl (hash: bY7NweagaY4wX42ZEB59xva4KRlHCrsKgBO8R9rrlx0=)
2: 4C5380C8E0B211F084C35B824B6F56BC.roa (hash: ReH7NwBS0TVPrmwTTmCzxQPZCsV/M0H3BbFbbRjxNaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.crl
rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918120B, serialNumber=236A38CD5EC52F70E88B806D715EB7B042CD7EBF
Validity
Not Before: Jul 23 09:51:11 2026 GMT
Not After : Jul 30 09:51:11 2026 GMT
Subject: CN=6a61e40f-b262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:6e:38:b2:7d:d6:5e:37:55:e3:e9:3f:ba:
38:70:73:27:31:02:21:fe:f7:ca:43:2e:36:39:b4:
ea:65:4e:1d:96:e3:74:9e:9c:bf:68:3a:08:6c:59:
5f:a7:31:be:7e:d6:ad:50:96:a5:75:7f:80:49:f5:
41:c1:7e:3a:6f:dc:6f:7b:fc:f3:b0:6a:50:7e:e2:
52:a7:04:fc:02:5c:a3:95:24:f3:cd:21:82:fb:cc:
56:2c:77:43:83:67:04:b5:8b:be:cc:f5:be:00:78:
71:50:6e:a4:ed:31:b3:f2:66:d8:41:45:e8:ab:ee:
31:63:f0:ef:0f:46:d0:a3:37:2d:3c:a2:fc:11:e9:
13:7b:15:ec:61:03:ee:3a:4b:81:86:aa:94:85:e2:
65:c3:6a:b8:2b:80:94:d2:3d:76:98:92:ee:87:d2:
da:10:d9:85:f2:f1:ba:3b:55:b3:f7:ee:2a:1c:fb:
ed:de:5e:50:1a:d5:b6:ab:2c:20:d3:8c:79:5e:72:
93:b1:8c:a4:4a:bf:d7:b7:40:be:b2:70:f9:78:73:
cb:0d:23:6e:fe:9c:f9:cf:d3:6b:5d:6d:65:1c:9c:
44:62:c1:68:6f:29:ea:65:66:80:fd:3c:4d:f5:20:
c8:37:cf:b5:25:03:17:6e:8a:6c:73:44:fa:3f:87:
bf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:42:00:D3:5D:72:3F:DC:3C:03:5A:32:7B:B2:12:BF:E5:BC:EE:95
X509v3 Authority Key Identifier:
keyid:23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:a3:48:b5:96:c7:72:27:44:81:8f:ea:5a:81:d8:a5:8a:c1:
3a:8d:28:a8:d9:4f:90:cb:2f:76:ef:7f:0d:62:01:23:a5:9f:
cf:be:57:ad:2e:65:c4:f4:7e:de:3f:73:28:5f:38:cb:e5:00:
ea:4c:a2:46:89:93:9e:9d:ca:67:5f:30:fb:c0:e0:39:4b:09:
d3:8a:69:20:83:b3:15:bf:ed:f6:46:b8:a8:fa:5d:ce:f5:d0:
5d:c2:07:e4:f9:49:81:eb:7f:db:43:b4:dd:59:c8:37:41:ac:
d7:6c:5d:c0:9c:0c:43:32:ee:82:58:b8:4b:ea:5c:39:51:1a:
bb:da:98:4f:e2:0a:d9:f3:87:47:c1:e5:d5:bc:ae:cd:32:9a:
2f:f8:35:35:13:ee:9a:5c:db:9f:8c:d7:17:c6:b6:4f:c3:13:
a6:eb:30:ce:94:a4:8f:14:28:f9:69:9d:14:ab:be:b0:b7:86:
06:8e:b5:59:1b:9f:cf:8e:21:81:e3:b1:c3:e3:e4:ff:c1:5b:
3c:8f:48:61:07:91:62:a9:e0:c9:8f:b0:69:1f:f9:60:ff:c4:
0b:ec:53:86:a8:00:5c:05:49:1a:17:89:63:ef:dd:9a:d8:7c:
71:37:d4:3c:19:11:f2:73:af:ab:05:59:ec:5c:5a:18:98:6a:
da:aa:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:54:20 2026 by rpki-client