
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
File: IjvhmJLm5stAbl-plW3bzqlcu0Y.mft (raw, json)
Hash identifier: RbrwVPmARy9B+IIflp2Wa6FEvmReWvKvuk+jH26IThY=
Subject key identifier: BC:06:B5:AF:B2:EC:31:EF:30:6A:EA:2E:96:FD:FF:62:9F:A7:2A:31
Authority key identifier: 22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46
Certificate issuer: /CN=A918E6B7/serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46
Certificate serial: 10B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
Manifest number: 10AB
Signing time: Thu 26 Mar 2026 17:17:41 +0000
Manifest this update: Thu 26 Mar 2026 17:17:41 +0000
Manifest next update: Thu 02 Apr 2026 17:17:41 +0000
Files and hashes: 1: IjvhmJLm5stAbl-plW3bzqlcu0Y.crl (hash: Yy64U+9MqVW3SqfbG29kMSLU7KaUP3K1OQHgt9E7XFQ=)
2: 608836D046B111E98B793856C4F9AE02.roa (hash: j/7cfI/0+SrAI6zJ8aTltm4c8iKanonzyycpVr5NLNQ=)
3: 42CBE6BE29F111EEAECAED6FC4F9AE02.roa (hash: geAH95kNtBUqAghRAhDpu6+bO8JNHhHtwzkMrvfTHUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl
rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 17:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4281 (0x10b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E6B7, serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46
Validity
Not Before: Mar 26 17:17:41 2026 GMT
Not After : Apr 2 17:17:41 2026 GMT
Subject: CN=69c56a35-8c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:6d:f6:70:95:59:01:5c:c1:c5:8a:85:a3:
f6:7e:c6:a4:eb:c7:76:af:c0:a6:59:12:6b:9e:57:
69:1a:ea:23:3f:37:ea:6e:b3:f6:4e:be:ea:6e:db:
0d:91:26:a5:1e:56:1c:bc:4d:5f:83:37:52:20:9f:
4c:cf:02:b1:ca:0e:dd:a5:21:59:cf:17:69:f8:18:
68:5b:c5:0b:f2:87:73:05:e3:d7:f3:c6:d5:fa:7a:
6a:ab:1b:d0:94:36:6b:2f:a7:59:ee:9b:3d:7c:76:
d3:88:93:16:92:74:43:1b:26:49:79:32:8d:89:f4:
00:88:10:2f:1c:a2:65:0b:d1:be:3d:3d:4c:06:dd:
76:bb:ee:e6:6e:dc:84:b8:11:a8:a4:08:35:75:73:
34:ab:17:93:cc:63:a6:49:27:49:00:10:8c:6e:c5:
03:36:20:d0:7e:5d:54:2d:96:92:1b:bb:55:7e:26:
cf:d6:a1:c0:fe:95:35:c6:cd:64:f9:80:b7:07:7d:
25:f0:73:f0:da:e2:22:d4:93:8c:60:92:00:5c:5a:
5e:20:f4:6d:2b:b9:e5:b6:24:65:15:92:0e:e9:90:
25:00:d1:ef:77:90:12:dc:19:54:6c:97:06:a0:87:
3b:bd:86:fa:64:f5:0c:cc:89:be:ea:0c:8b:63:2e:
8a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:06:B5:AF:B2:EC:31:EF:30:6A:EA:2E:96:FD:FF:62:9F:A7:2A:31
X509v3 Authority Key Identifier:
keyid:22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:61:83:a8:16:f5:97:a3:7d:71:51:78:23:e4:76:af:46:32:
39:56:7b:a6:99:88:26:4f:5b:68:e6:75:88:af:13:e9:9f:96:
c3:64:fa:67:e6:18:18:b5:3d:bf:ec:41:32:d5:5b:f1:a7:a1:
d7:73:25:3c:a4:22:fc:72:78:24:b2:f8:ea:32:ab:6e:83:10:
b8:a6:08:12:b2:85:35:f5:63:54:63:dd:26:1e:59:67:92:f4:
73:06:b1:1d:f0:3c:86:ed:5c:4a:0f:69:cb:b7:42:2c:99:d5:
c6:2f:9f:e4:5e:e2:3c:1e:1e:6e:33:95:2b:a9:84:0b:90:69:
87:a1:d4:cb:39:e1:9b:f2:f9:6c:06:1d:84:0b:ff:60:a9:17:
25:91:a0:c6:4a:a0:47:fc:04:f2:d2:1b:61:4e:d1:e2:af:94:
1b:13:56:2d:c6:9c:ce:c8:49:8b:3a:20:ec:b3:66:44:a7:65:
fa:ee:04:ae:2a:41:ae:c7:37:07:3c:f8:ee:d3:bf:9c:14:38:
17:3f:85:d6:35:40:8c:63:a1:77:77:eb:b9:da:c2:68:1b:c1:
4d:4b:70:30:88:d6:48:66:85:7b:d9:9c:f5:a7:19:d8:2f:84:
65:99:98:c1:4c:11:af:69:84:44:3b:f7:11:2d:eb:20:71:f8:
7e:eb:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:38:10 2026 by rpki-client