
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
File: IHRtqWxsk0jpS7t03MtZAcbst7M.mft (raw, json)
Hash identifier: zE2SsiB1nxFLhuwO9nqIxXzCW/a295++jv0NqbXpQCE=
Subject key identifier: 41:25:A9:8F:B4:E8:57:B0:AC:67:4D:DD:60:01:C2:60:88:A5:EA:61
Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3
Certificate issuer: /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
Certificate serial: 0468
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
Manifest number: 045E
Signing time: Wed 13 May 2026 00:17:40 +0000
Manifest this update: Wed 13 May 2026 00:17:40 +0000
Manifest next update: Wed 20 May 2026 00:17:40 +0000
Files and hashes: 1: IHRtqWxsk0jpS7t03MtZAcbst7M.crl (hash: mkQ53kPIQkStXv2eCCWgKL32PFsobElZO7AkP9AqACI=)
2: FC11F400240611EFA8F45A54C4F9AE02.roa (hash: w+uFKuxo46pJbz+0z1J4ppzq0IlEaMPLvCuS0oM/T0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl
rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1128 (0x468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BD1A, serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
Validity
Not Before: May 13 00:17:40 2026 GMT
Not After : May 20 00:17:40 2026 GMT
Subject: CN=6a03c324-fca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:44:d3:eb:92:5d:00:da:66:f0:9d:20:f6:
e0:21:24:86:5a:ef:11:ad:23:17:a5:9b:f9:7e:43:
31:29:69:92:63:3a:78:8b:b7:3c:a4:d7:bb:a0:dc:
b2:db:71:b8:93:0b:b1:32:2d:fe:98:93:b4:08:cd:
9d:78:dc:88:4d:43:24:ae:bf:46:35:13:08:4e:97:
44:1e:e8:08:ae:c4:ed:b8:93:92:d5:55:a1:79:5d:
59:c5:88:9a:62:ca:fb:55:46:b8:89:89:2a:ad:f2:
71:c6:93:21:e4:fa:96:07:c7:2b:d4:a0:fa:5f:28:
17:9e:73:88:bc:86:28:51:7d:76:0d:d5:92:c5:18:
22:4c:0e:3a:fd:bd:8d:ad:36:27:7b:8d:a3:29:05:
ec:2a:22:1e:d3:b0:de:92:98:14:7d:84:ac:6a:2e:
29:78:b4:2e:84:52:c6:cd:0e:cf:12:69:21:9e:09:
13:c9:7a:93:35:dc:a8:b2:3d:ff:f3:59:70:2d:77:
f5:f2:ed:7f:6f:72:8d:4d:97:b0:74:18:e7:ea:a0:
52:e1:12:9d:e2:a5:c7:28:c5:07:91:15:49:30:2a:
fb:c1:91:a5:1d:b0:72:38:07:91:72:46:ac:17:2d:
e7:58:96:8b:89:0c:37:fb:7c:21:cf:31:5f:19:08:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:25:A9:8F:B4:E8:57:B0:AC:67:4D:DD:60:01:C2:60:88:A5:EA:61
X509v3 Authority Key Identifier:
keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ad:2f:78:71:e6:7e:d6:bf:da:26:e6:69:c0:fe:d8:61:32:
b8:5d:2c:26:7a:bf:18:8e:a0:fc:77:f0:10:1b:5c:68:63:c0:
96:46:90:d5:64:06:9c:ac:5f:40:50:37:7d:3b:32:2b:73:31:
20:ad:b5:ac:db:0f:c8:ad:20:c1:80:86:0b:31:da:8a:20:fd:
2a:64:24:c8:b3:ca:3f:3c:af:60:22:0e:d8:3d:7e:c0:04:e5:
f8:e3:13:4d:ce:2b:93:97:1c:07:74:91:28:3c:9a:21:a3:c1:
1b:a3:c3:8f:5a:04:dd:60:e6:1e:b9:9c:cd:ad:51:87:72:e3:
4c:e2:fd:41:f2:8a:04:67:a9:1b:6a:fe:da:1b:d1:d6:d0:2b:
90:8a:9b:a2:cd:27:2c:f8:fe:8b:b4:36:78:ef:2e:70:99:4b:
e4:a9:ca:10:b2:71:a2:0d:03:6f:a4:c9:51:e0:23:ab:94:85:
af:e9:26:ee:72:2b:d8:e2:21:a6:07:46:d4:8b:44:0f:c6:d3:
6a:86:02:02:cb:c1:55:32:cc:50:64:ab:d7:0b:2a:a9:7e:20:
fd:fe:17:bb:4b:26:43:0d:31:0b:9a:e4:c3:e9:eb:98:87:e3:
a1:42:34:e4:31:e2:c5:7b:3c:99:54:d7:61:bf:44:d4:b9:c7:
58:91:73:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:19:09 2026 by rpki-client