
$ rpki-client -vvf rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
File: 1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft (raw, json)
Hash identifier: Ztgrx2Prfr/vVrgDvZlVz1GFwxoZhWZuzRJSnhwrRm4=
Subject key identifier: B3:99:7D:95:AB:37:77:D9:E4:97:CC:95:50:5C:28:E1:5C:6F:D4:E1
Authority key identifier: D4:80:9E:AA:A2:51:06:46:DD:85:35:9D:F8:6E:65:25:19:47:0F:C3
Certificate issuer: /CN=A918120B/serialNumber=D4809EAAA2510646DD85359DF86E652519470FC3
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
Manifest number: 4F
Signing time: Wed 13 May 2026 08:28:05 +0000
Manifest this update: Wed 13 May 2026 08:28:04 +0000
Manifest next update: Wed 20 May 2026 08:28:04 +0000
Files and hashes: 1: 1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl (hash: /shUf8fy9Ea5jJmiTEzFnIrzCx2YQnpk0WOU3wHQyV4=)
2: 78DCA304E0B211F0865FCE9C4B6F56BC.roa (hash: fCdO2IYR8h+XOBNLTLZzi7ydktWjtSQEA49QRmJD+zs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl
rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918120B, serialNumber=D4809EAAA2510646DD85359DF86E652519470FC3
Validity
Not Before: May 13 08:28:04 2026 GMT
Not After : May 20 08:28:04 2026 GMT
Subject: CN=6a043615-d63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:61:3d:7e:31:36:ea:f3:bf:e0:1c:c2:64:
bd:a6:ae:5c:eb:3b:36:1a:51:f1:cb:dc:e5:52:4d:
e0:c2:2c:e3:fe:9e:c0:eb:52:d5:fe:cc:3d:cd:2a:
d6:df:58:fe:83:d2:84:1e:64:d6:f6:0f:7b:2f:dd:
c4:05:03:9d:04:e7:4e:69:d1:48:39:52:17:99:94:
49:b8:c7:ac:81:ca:95:4a:3a:e0:6d:49:93:32:cf:
15:b7:1e:93:ea:77:43:3d:a2:35:00:c2:b0:ff:2a:
37:88:ea:d6:31:a6:ca:70:28:c0:b1:5a:97:43:ce:
55:ba:90:71:19:05:31:27:c1:40:4e:f3:c0:20:60:
ad:28:ae:c9:66:62:f4:5e:c5:34:a0:eb:a7:87:d9:
95:07:8a:df:b7:d7:58:ae:05:b5:09:5d:af:cb:eb:
2e:d6:78:48:ab:9f:f0:ea:c7:17:b1:db:f8:50:20:
6e:62:77:18:11:45:5e:34:80:18:e1:45:6f:89:6c:
98:72:1a:f9:fd:b1:36:24:71:ec:45:9a:87:3b:f0:
e2:e1:22:1e:09:9c:83:8c:84:2c:56:6f:f1:49:d4:
81:94:99:6a:a9:12:50:28:dd:ae:61:62:0a:b8:df:
9d:50:8d:65:bf:83:e2:15:bb:9a:90:0b:c2:5a:c1:
43:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:99:7D:95:AB:37:77:D9:E4:97:CC:95:50:5C:28:E1:5C:6F:D4:E1
X509v3 Authority Key Identifier:
keyid:D4:80:9E:AA:A2:51:06:46:DD:85:35:9D:F8:6E:65:25:19:47:0F:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:81:55:69:08:0a:64:2c:6f:e9:1e:25:9c:94:8b:d2:4f:66:
4d:db:59:93:3b:c1:43:30:6e:f6:19:41:6e:4c:fd:1f:f8:0d:
b7:73:c2:35:54:57:9a:af:be:92:d6:ba:52:43:25:98:6a:42:
8e:6c:b2:7e:a5:72:4c:50:52:eb:9e:0d:8c:b5:5f:4c:f3:25:
4d:cc:60:fe:e2:ae:b7:b5:6a:cd:4b:a8:72:c6:3a:ec:b6:b0:
1b:6b:70:05:81:a4:b8:68:b2:c3:8e:c0:ef:fd:10:46:ad:4e:
f8:e7:3c:34:2e:aa:0d:54:fa:c9:c7:94:4a:0f:bf:5d:36:df:
e8:ca:35:b9:d0:c7:ef:22:fb:1d:79:ea:aa:1e:1f:d8:07:09:
3d:75:d9:2f:34:f0:da:35:6e:b8:bc:8b:27:c6:b9:53:ea:be:
1d:62:c3:ae:c9:59:cd:82:b6:94:11:d1:61:51:db:c2:96:fc:
3b:79:c5:67:31:ed:56:83:16:8e:79:66:a0:5a:1f:28:8c:8b:
d4:de:60:bc:17:c1:21:fb:6f:7e:f8:1d:16:9f:b1:dd:21:50:
42:f4:f5:c8:49:c0:9b:52:0c:34:2e:59:05:85:f5:98:ab:53:
26:99:1e:02:4f:2d:77:b0:7f:68:c0:32:3e:18:7d:45:04:b3:
cc:37:c6:e6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MTIwQjExMC8GA1UEBRMoRDQ4MDlFQUFBMjUxMDY0NkREODUzNTlERjg2RTY1MjUx
OTQ3MEZDMzAeFw0yNjA1MTMwODI4MDRaFw0yNjA1MjAwODI4MDRaMBgxFjAUBgNV
BAMTDTZhMDQzNjE1LWQ2M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0TWE9fjE26vO/4BzCZL2mrlzrOzYaUfHL3OVSTeDCLOP+nsDrUtX+zD3NKtbf
WP6D0oQeZNb2D3sv3cQFA50E505p0Ug5UheZlEm4x6yBypVKOuBtSZMyzxW3HpPq
d0M9ojUAwrD/KjeI6tYxpspwKMCxWpdDzlW6kHEZBTEnwUBO88AgYK0orslmYvRe
xTSg66eH2ZUHit+311iuBbUJXa/L6y7WeEirn/Dqxxex2/hQIG5idxgRRV40gBjh
RW+JbJhyGvn9sTYkcexFmoc78OLhIh4JnIOMhCxWb/FJ1IGUmWqpElAo3a5hYgq4
351QjWW/g+IVu5qQC8JawUM/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUs5l9las3
d9nkl8yVUFwo4Vxv1OEwHwYDVR0jBBgwFoAU1ICeqqJRBkbdhTWd+G5lJRlHD8Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMjBCL0NDOTk2OTA0RTBB
RTExRjA5NkQ3RTI4ODQ5NkY1NkJDLzFJQ2VxcUpSQmtiZGhUV2QtRzVsSlJsSEQ4
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMUlDZXFxSlJCa2JkaFRXZC1HNWxKUmxIRDhNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx
MjBCL0NDOTk2OTA0RTBBRTExRjA5NkQ3RTI4ODQ5NkY1NkJDLzFJQ2VxcUpSQmti
ZGhUV2QtRzVsSlJsSEQ4TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAFgVVpCApkLG/pHiWclIvST2ZN21mTO8FDMG72GUFuTP0f+A23c8I1VFear76S
1rpSQyWYakKObLJ+pXJMUFLrng2MtV9M8yVNzGD+4q63tWrNS6hyxjrstrAba3AF
gaS4aLLDjsDv/RBGrU745zw0LqoNVPrJx5RKD79dNt/oyjW50MfvIvsdeeqqHh/Y
Bwk9ddkvNPDaNW64vIsnxrlT6r4dYsOuyVnNgraUEdFhUdvClvw7ecVnMe1WgxaO
eWagWh8ojIvU3mC8F8Eh+29++B0Wn7HdIVBC9PXIScCbUgw0LlkFhfWYq1MmmR4C
Ty13sH9owDI+GH1FBLPMN8bm
-----END CERTIFICATE-----
Generated at Wed May 13 19:07:11 2026 by rpki-client