
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft
File: IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft (raw, json)
Hash identifier: kzeTwIFCgmwdkQqN6NXx0aT1+cpHO9KwlMVJM3dSL7Q=
Subject key identifier: 19:AD:62:16:09:8D:43:EC:9E:E6:55:AE:31:0E:D6:BF:A9:CB:08:44
Authority key identifier: 22:C2:91:67:96:B7:32:87:CE:C9:0C:35:07:B1:C5:9F:F7:75:88:77
Certificate issuer: /CN=A9183249/serialNumber=22C2916796B73287CEC90C3507B1C59FF7758877
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IsKRZ5a3MofOyQw1B7HFn_d1iHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft
Manifest number: 31
Signing time: Thu 23 Jul 2026 10:41:33 +0000
Manifest this update: Thu 23 Jul 2026 10:41:32 +0000
Manifest next update: Thu 30 Jul 2026 10:41:32 +0000
Files and hashes: 1: IsKRZ5a3MofOyQw1B7HFn_d1iHc.crl (hash: SZSq0c7ZXk1O2uNUvgXLWdoJEcIGksv1QrbUYizCA3g=)
2: E90334323E1711F1872CBF7AB0833773.roa (hash: gfbEk0OCCthmwoLDtfzliRliBz11gfjCRa7Rca3Cfko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.crl
rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IsKRZ5a3MofOyQw1B7HFn_d1iHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:41:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183249, serialNumber=22C2916796B73287CEC90C3507B1C59FF7758877
Validity
Not Before: Jul 23 10:41:32 2026 GMT
Not After : Jul 30 10:41:32 2026 GMT
Subject: CN=6a61efdd-2d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:01:c9:af:9d:43:c8:01:0b:6d:6b:6a:27:
fa:52:b0:c2:35:87:a4:74:85:f6:bd:e6:98:c3:01:
44:09:60:c0:f7:16:33:d1:11:22:7f:bf:6f:0d:4d:
5f:20:9a:19:ad:10:86:ce:e1:8a:f9:49:74:1a:ef:
dd:0a:b8:69:a6:7c:2e:13:4b:62:bc:9b:e4:46:a4:
2b:c9:7b:b4:03:33:f3:d3:64:d5:d9:28:85:1b:ba:
12:9f:9a:bb:d1:88:7d:d9:5c:a6:79:94:09:b8:ee:
5b:70:1d:e7:cc:13:42:eb:06:52:b4:81:50:65:1b:
1a:46:e1:8a:58:fb:c3:5e:36:68:c2:9f:97:bd:34:
5e:e6:83:38:3a:ec:cd:d0:6b:f9:80:39:3c:ca:fb:
b8:a9:db:51:7c:70:67:c2:6c:59:0a:73:bb:57:54:
1d:7b:b2:c6:5f:f7:3f:c7:0c:6b:13:35:67:6f:a2:
9f:02:56:f2:07:8f:3b:89:ff:9c:eb:82:97:b7:12:
e0:26:09:cf:de:83:e1:13:5d:52:d9:31:33:c7:a8:
0b:5b:4d:87:c9:a0:f4:01:9d:92:b7:f2:6e:8f:7e:
b7:a0:f3:58:0e:bc:ae:8c:65:48:34:61:c2:88:17:
a0:e8:3a:2f:64:31:11:ca:18:b8:aa:9f:49:6f:fa:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AD:62:16:09:8D:43:EC:9E:E6:55:AE:31:0E:D6:BF:A9:CB:08:44
X509v3 Authority Key Identifier:
keyid:22:C2:91:67:96:B7:32:87:CE:C9:0C:35:07:B1:C5:9F:F7:75:88:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IsKRZ5a3MofOyQw1B7HFn_d1iHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d0:6f:61:15:8f:88:fe:39:d2:c7:af:3a:1a:8d:22:b0:33:
c2:90:dd:30:af:0f:19:e5:f7:c8:a8:19:ae:f1:cf:a7:8b:f5:
6e:39:75:10:5e:6d:85:3d:6d:24:0e:ae:28:c1:49:bf:cd:53:
ba:da:f9:09:27:1b:c7:49:61:d9:42:40:38:81:b4:b4:c6:a6:
47:2c:aa:be:e2:38:00:b9:16:83:bb:11:68:69:70:58:97:92:
91:e3:8a:a0:ba:5f:84:98:24:b7:ea:c5:20:78:df:7a:20:13:
af:3b:d0:c8:07:28:e9:44:2b:8f:23:88:cd:e9:32:6b:64:91:
16:56:28:52:63:b6:6f:ff:9e:25:41:c2:6f:4a:67:86:2f:c6:
fd:da:a2:4e:6a:7e:49:58:ad:10:6b:17:ca:3d:07:b9:c8:cb:
c7:a8:aa:92:ce:bc:68:cb:86:a3:85:56:65:1e:df:d6:6d:4f:
e8:2e:48:a8:7e:89:a6:c1:c9:91:f6:b9:77:9e:29:b9:c5:2b:
03:8e:51:86:94:6b:e0:93:7f:c1:28:8f:3b:91:7e:ff:2e:30:
3a:f8:69:a1:ce:b7:7f:b1:25:9d:e2:68:5e:a0:96:85:ef:22:
ad:95:bc:16:8e:76:70:4d:b7:54:d4:c2:f2:3e:62:c3:8d:4e:
74:3d:39:4b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MzI0OTExMC8GA1UEBRMoMjJDMjkxNjc5NkI3MzI4N0NFQzkwQzM1MDdCMUM1OUZG
Nzc1ODg3NzAeFw0yNjA3MjMxMDQxMzJaFw0yNjA3MzAxMDQxMzJaMBgxFjAUBgNV
BAMTDTZhNjFlZmRkLTJkNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC65wHJr51DyAELbWtqJ/pSsMI1h6R0hfa95pjDAUQJYMD3FjPRESJ/v28NTV8g
mhmtEIbO4Yr5SXQa790KuGmmfC4TS2K8m+RGpCvJe7QDM/PTZNXZKIUbuhKfmrvR
iH3ZXKZ5lAm47ltwHefME0LrBlK0gVBlGxpG4YpY+8NeNmjCn5e9NF7mgzg67M3Q
a/mAOTzK+7ip21F8cGfCbFkKc7tXVB17ssZf9z/HDGsTNWdvop8CVvIHjzuJ/5zr
gpe3EuAmCc/eg+ETXVLZMTPHqAtbTYfJoPQBnZK38m6Pfreg81gOvK6MZUg0YcKI
F6DoOi9kMRHKGLiqn0lv+klBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGa1iFgmN
Q+ye5lWuMQ7Wv6nLCEQwHwYDVR0jBBgwFoAUIsKRZ5a3MofOyQw1B7HFn/d1iHcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzMjQ5LzA5ODFFNURBM0Ux
MDExRjE5MzBCQkJEMUFBODMzNzczL0lzS1JaNWEzTW9mT3lRdzFCN0hGbl9kMWlI
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSXNLUlo1YTNNb2ZPeVF3MUI3SEZuX2QxaUhjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz
MjQ5LzA5ODFFNURBM0UxMDExRjE5MzBCQkJEMUFBODMzNzczL0lzS1JaNWEzTW9m
T3lRdzFCN0hGbl9kMWlIYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC90G9hFY+I/jnSx686Go0isDPCkN0wrw8Z5ffIqBmu8c+ni/VuOXUQXm2FPW0k
Dq4owUm/zVO62vkJJxvHSWHZQkA4gbS0xqZHLKq+4jgAuRaDuxFoaXBYl5KR44qg
ul+EmCS36sUgeN96IBOvO9DIByjpRCuPI4jN6TJrZJEWVihSY7Zv/54lQcJvSmeG
L8b92qJOan5JWK0QaxfKPQe5yMvHqKqSzrxoy4ajhVZlHt/WbU/oLkiofommwcmR
9rl3nim5xSsDjlGGlGvgk3/BKI87kX7/LjA6+Gmhzrd/sSWd4mheoJaF7yKtlbwW
jnZwTbdU1MLyPmLDjU50PTlL
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:09:21 2026 by rpki-client