
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json)
Hash identifier: kX77rkchrK5GQ65zZ2tCMylfmVypOZKXBi1Ey2FTNRg=
Subject key identifier: CE:8C:32:FB:CE:09:6E:A7:B3:9E:B3:8C:FC:5D:A6:17:A9:6C:DE:B6
Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Certificate serial: 08EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
Manifest number: 08D2
Signing time: Wed 22 Jul 2026 20:53:43 +0000
Manifest this update: Wed 22 Jul 2026 20:53:42 +0000
Manifest next update: Wed 29 Jul 2026 20:53:42 +0000
Files and hashes: 1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: UnePYDLG8IhMVePhng8VBLDOG0hKb1IZFTk/7aX6BlA=)
2: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: mf6qln82PscHDH0xPIvnUcgowJvdgyrORzlGrhrol0w=)
3: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: +xbbDGKjJ6DqQpBrbDd8JJCmqdHxccmvBDGEJY8Y1eA=)
4: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: GhHf45/vb5I/X0MIOpzOvwX20CEWTC0IaH/0NH4EfF4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl
rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2284 (0x8ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Validity
Not Before: Jul 22 20:53:42 2026 GMT
Not After : Jul 29 20:53:42 2026 GMT
Subject: CN=6a612dd7-35ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:47:18:c9:2a:69:1e:c8:a8:b6:de:3f:c2:
ed:bd:5d:b4:5e:44:98:f8:80:32:f7:5e:de:3d:59:
7a:07:9e:4d:b6:0a:f1:8a:28:ad:42:cf:e8:fb:a5:
6f:91:45:8a:62:d6:48:ba:e1:2e:46:f9:98:ec:df:
dc:cd:89:27:9e:0c:35:8c:ee:2d:10:d3:ad:c8:2d:
b1:e6:ab:6e:c7:e7:5c:fa:a8:22:6c:f0:0f:85:2f:
ab:b6:cf:6b:cb:95:71:4c:9a:94:b6:30:e6:df:c7:
36:52:47:b9:06:5f:ce:05:b9:d8:8f:a2:d4:ce:e6:
ea:e5:d9:eb:2e:58:e3:0c:7e:9f:bd:f3:4b:51:f3:
79:22:63:ee:e3:21:2b:fd:62:53:8e:d6:1a:9a:14:
c9:6c:1b:8c:df:85:bb:8a:ac:c2:7c:0a:89:75:29:
36:a9:ff:17:ea:20:d4:75:0f:b0:5f:19:9d:41:2e:
68:7f:a1:89:a1:77:ab:c5:ce:70:f3:ae:6b:43:db:
c6:22:c5:3e:47:76:a2:c1:5c:a0:01:b2:d7:d9:8e:
53:d6:f2:51:32:7a:0d:7c:bc:fd:61:79:ca:22:78:
f4:72:c9:7d:44:f1:26:b0:ba:2f:fb:8d:24:a2:95:
52:1a:13:04:5b:86:7a:19:27:21:4a:4f:21:7e:69:
3b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8C:32:FB:CE:09:6E:A7:B3:9E:B3:8C:FC:5D:A6:17:A9:6C:DE:B6
X509v3 Authority Key Identifier:
keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:5d:35:51:cd:a7:cb:12:6b:76:61:51:96:56:ad:ec:23:87:
02:aa:73:3c:e4:ab:67:40:da:7a:ec:21:24:0c:4d:7a:cc:e6:
ad:ea:4f:d0:f1:bc:fa:de:1c:18:ec:1b:dc:b4:c0:95:a3:15:
16:c1:9e:98:0a:80:cb:11:98:a7:5f:8e:42:74:2d:39:d0:8d:
51:e2:1e:a0:6d:d3:87:5a:bb:4a:b5:98:fd:98:f4:52:98:6e:
b0:03:15:03:ee:ca:95:a5:e2:94:38:a5:15:ce:05:ae:e0:65:
69:a4:c4:2e:ab:df:12:2d:59:89:7a:58:1c:9b:a1:28:7a:5a:
d1:2f:ed:99:cc:7e:6c:b4:63:05:de:fc:46:63:fb:50:f9:26:
e2:32:03:46:a6:76:98:af:56:a3:51:56:b3:8a:fd:da:12:8b:
38:3a:58:0f:21:a0:52:c3:33:58:a3:3b:80:b2:15:e9:5a:5b:
5b:0d:8e:e5:ee:18:2a:cf:7f:6d:c2:51:ba:05:78:8a:79:55:
42:f7:8e:bd:71:5b:d7:ac:83:1b:75:e0:9f:cb:5d:2b:99:a2:
8e:ac:ed:94:42:d8:70:0c:b3:f8:8b:f1:76:54:54:83:11:a5:
83:11:97:ce:94:53:27:8d:28:d5:88:49:a0:bf:fa:9f:bb:ff:
61:64:43:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFDOUZFRTdBMjRE
RTgwMUYyRDcwHhcNMjYwNzIyMjA1MzQyWhcNMjYwNzI5MjA1MzQyWjAYMRYwFAYD
VQQDEw02YTYxMmRkNy0zNWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz+9HGMkqaR7IqLbeP8LtvV20XkSY+IAy917ePVl6B55NtgrxiiitQs/o+6Vv
kUWKYtZIuuEuRvmY7N/czYknngw1jO4tENOtyC2x5qtux+dc+qgibPAPhS+rts9r
y5VxTJqUtjDm38c2Uke5Bl/OBbnYj6LUzubq5dnrLljjDH6fvfNLUfN5ImPu4yEr
/WJTjtYamhTJbBuM34W7iqzCfAqJdSk2qf8X6iDUdQ+wXxmdQS5of6GJoXerxc5w
865rQ9vGIsU+R3aiwVygAbLX2Y5T1vJRMnoNfLz9YXnKInj0csl9RPEmsLov+40k
opVSGhMEW4Z6GSchSk8hfmk78QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6MMvvO
CW6ns56zjPxdphepbN62MB8GA1UdIwQYMBaAFCIfUBQ+HV+TxM0xyf7nok3oAfLX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzOS9DMTI2NURDMEUz
ODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1UEV6VEhKX3VlaVRlZ0I4
dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0loOVFGRDRkWDVQRXpUSEpfdWVpVGVnQjh0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDUzOS9DMTI2NURDMEUzODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1
UEV6VEhKX3VlaVRlZ0I4dGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUV01Uc2nyxJrdmFRllat7COHAqpzPOSrZ0DaeuwhJAxNeszmrepP0PG8+t4c
GOwb3LTAlaMVFsGemAqAyxGYp1+OQnQtOdCNUeIeoG3Th1q7SrWY/Zj0UphusAMV
A+7KlaXilDilFc4FruBlaaTELqvfEi1ZiXpYHJuhKHpa0S/tmcx+bLRjBd78RmP7
UPkm4jIDRqZ2mK9Wo1FWs4r92hKLODpYDyGgUsMzWKM7gLIV6VpbWw2O5e4YKs9/
bcJRugV4inlVQveOvXFb16yDG3Xgn8tdK5mijqztlELYcAyz+IvxdlRUgxGlgxGX
zpRTJ40o1YhJoL/6n7v/YWRDNw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:27 2026 by rpki-client