
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json)
Hash identifier: 7WKuvtwfo+XlpNBBL/c57MtPbDdwSgsTaV8+fuS0u70=
Subject key identifier: 9E:1D:E1:BB:08:57:63:30:0F:FF:72:B2:2D:1C:D2:E6:20:97:CD:50
Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Certificate serial: 1775
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
Manifest number: 1758
Signing time: Thu 24 Sep 2026 16:34:41 +0000
Manifest this update: Thu 24 Sep 2026 16:34:41 +0000
Manifest next update: Thu 01 Oct 2026 16:34:41 +0000
Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: RA3taydZfXZK3cjUXjzK+UKL1oGc1QiUyeFF3XldtzM=)
2: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: ABbCRm4169Zmlom/mbAM7SPDMmE+tdeoPLo48LZrXpg=)
3: E259315C57CA11EA8D931284C4F9AE02.roa (hash: bxgVx+Ckcae/iQQ31WregWFbQ2YBNnnGGH36C1uq1eE=)
4: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: sk2XL2BNft3Qb5DlW0IYmAxdXBhZMlrkB9WLp+WKc50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6005 (0x1775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Validity
Not Before: Sep 24 16:34:41 2026 GMT
Not After : Oct 1 16:34:41 2026 GMT
Subject: CN=6ab55121-ebd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:bb:f6:33:4f:05:67:5a:e0:e6:ff:65:1b:
d7:f1:c8:0c:16:8e:57:e9:3c:e8:a8:4d:9e:b1:a2:
1e:c0:25:38:c6:ca:cc:88:3c:c2:84:16:b3:ae:11:
52:23:b7:4f:03:7e:76:6c:66:25:a4:d0:81:ab:38:
4a:5a:0b:41:94:c5:28:35:e8:37:9d:84:4f:d1:8f:
98:ca:d9:59:15:ed:e7:85:f3:80:31:e9:42:e2:57:
cb:70:07:b2:f3:6f:0c:21:4b:da:b2:06:1f:09:0f:
da:b4:b9:09:26:b6:c8:44:f6:c3:ca:0e:86:79:53:
6d:ce:33:5e:96:13:63:83:35:88:94:06:27:cd:62:
3d:49:f7:ad:86:fe:a5:5f:14:e5:fd:b3:a4:d4:81:
12:3a:90:32:ec:76:34:47:d3:d4:db:8d:99:8e:bb:
fa:e0:4c:aa:fa:ea:d3:01:cc:c4:dd:ea:ec:3a:e0:
a3:cb:2d:98:ee:92:0d:72:1d:42:c1:56:45:2b:1a:
93:0e:0b:9a:45:89:e5:35:a3:ae:e6:b0:44:73:24:
9e:05:77:4b:b2:f9:e7:80:fe:12:0e:44:6a:fd:36:
aa:74:77:7a:3d:34:32:88:44:81:fe:0c:54:62:db:
a0:25:f5:fa:d1:67:ce:a9:6c:c4:e2:fa:ff:da:95:
78:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1D:E1:BB:08:57:63:30:0F:FF:72:B2:2D:1C:D2:E6:20:97:CD:50
X509v3 Authority Key Identifier:
keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:37:5b:8e:3a:7f:fb:e0:1c:24:9c:90:a0:fd:4d:53:3a:3e:
04:3c:da:23:6e:29:51:00:7b:b7:e2:25:4c:15:1f:30:21:b1:
2b:c7:b5:38:39:99:3f:8c:65:f3:61:36:ee:d9:5f:2d:cb:ba:
9d:ea:fb:5d:02:76:2a:00:bd:d3:46:f2:90:ca:5e:9e:02:8f:
a5:08:fc:82:d6:6a:de:3e:4e:89:6f:2a:eb:14:ed:4b:d0:f9:
92:db:56:6d:90:15:67:d3:8e:58:ab:b5:72:e6:6b:cc:70:d5:
6a:0e:ba:d0:17:eb:cb:27:0e:6f:f4:b3:db:59:07:d2:ba:82:
cb:04:e6:02:8c:a0:d1:78:6a:15:a7:aa:68:d2:95:18:69:11:
57:b3:7d:60:78:5e:50:38:32:fd:38:09:f2:a3:9b:07:36:cb:
e7:f1:66:7e:ea:4f:4b:9c:34:d9:04:37:f3:e9:b0:24:5b:54:
f7:a2:70:bb:91:ec:84:ea:5e:84:b5:e2:1a:c8:fb:ef:2b:ff:
67:a3:86:95:04:58:8c:33:f2:72:53:18:fb:74:97:b3:f7:4c:
06:ae:5c:e7:3d:71:fb:6d:e7:fa:7a:5a:02:c0:4a:88:dc:ae:
e2:93:d0:01:48:fa:eb:c8:71:f8:fe:d8:5d:ef:8d:d8:f4:24:
16:8d:af:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:22:57 2026 by rpki-client