
$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
File: IiZie3PlFUazvVEODioN6qglIHg.mft (raw, json)
Hash identifier: /UO5fJUK+DGtlfNW9BMNy6hhEcsyAsdbjn7AcfoxT58=
Subject key identifier: 34:B6:AF:0F:1B:FF:E6:2A:C3:9C:94:93:34:8B:B9:97:F8:E3:BB:40
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Certificate issuer: /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial: 78
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
Manifest number: 6C
Signing time: Thu 11 Jun 2026 10:16:16 +0000
Manifest this update: Thu 11 Jun 2026 10:16:15 +0000
Manifest next update: Thu 18 Jun 2026 10:16:15 +0000
Files and hashes: 1: IiZie3PlFUazvVEODioN6qglIHg.crl (hash: TMaxyitKkF0MJz5oyN60iQHbAMmv5bQU8Oty+YlXDyc=)
2: 1CED22CCEEC611F0B6553517716F56BC.roa (hash: yCZ1YjOxjTNparFE9ezut6qYMPYgcu+lh0VxqkB60X0=)
3: 1D6F4D7EEEC611F0B6553517716F56BC.roa (hash: mjkSPSU1CtFx25rdmfQRNQYhUhcPGhgag+X4DPy+syU=)
4: 1DF3803AEEC611F0B6553517716F56BC.roa (hash: ATMgVxPSynGqWdcAfi8xFi3AYSDzSjTxt/zALkRAATU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Validity
Not Before: Jun 11 10:16:15 2026 GMT
Not After : Jun 18 10:16:15 2026 GMT
Subject: CN=6a2a8af0-2e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:f3:f5:d4:7f:7b:93:36:2d:fa:da:10:43:
f5:7d:56:d7:08:fe:6e:50:b7:67:55:ee:7c:e8:84:
2b:72:a0:07:94:0e:84:61:f3:15:6b:5f:97:0f:f8:
6e:c7:8c:a4:21:75:ef:0b:bc:cf:7f:2d:d0:19:01:
6c:80:81:24:48:9b:9a:2e:5c:d6:88:ef:69:a2:0d:
cf:b4:6e:a8:ca:26:6e:06:00:1b:34:ea:c7:05:a5:
df:67:bd:63:54:21:5a:a1:5b:bb:2c:2a:8e:c4:9d:
7b:fc:8f:ee:94:b5:09:80:a4:a2:51:50:9c:7f:f9:
61:7c:4a:ae:31:f9:cb:81:c0:4c:02:df:fd:af:7f:
57:29:13:03:f0:4f:3a:a1:0f:12:6b:91:3b:88:49:
a5:d0:14:72:51:44:1f:61:5f:dc:3a:3e:95:59:cc:
44:ba:4e:42:a3:52:ab:bb:c3:f5:4a:47:13:76:7e:
82:05:58:23:13:63:49:24:a7:8c:ec:f4:68:ac:6e:
cc:0a:6a:83:ca:90:5f:d4:cc:27:0e:cf:0c:b8:1b:
74:03:45:22:68:d4:23:1c:b1:df:85:da:15:80:bb:
bd:ff:a8:ab:d1:b5:84:c6:58:f9:12:37:6e:37:4e:
eb:68:d2:9a:55:48:30:25:7a:7a:58:f5:f0:c8:d3:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B6:AF:0F:1B:FF:E6:2A:C3:9C:94:93:34:8B:B9:97:F8:E3:BB:40
X509v3 Authority Key Identifier:
keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e9:26:87:20:aa:61:ac:89:26:b5:5a:46:f7:ea:03:d6:df:
e4:0d:2b:07:ab:96:6c:15:d9:da:6e:73:9e:ff:ff:66:9b:6c:
5a:ce:36:ca:00:6c:17:93:00:7a:00:d1:b1:92:e0:af:6c:e5:
57:70:a2:4c:b5:49:78:1f:97:05:80:ac:84:94:71:c5:92:5d:
47:53:41:55:16:23:b2:97:f1:cd:6c:c5:29:60:cf:eb:7d:ef:
69:e0:7a:81:d0:74:7c:99:26:be:56:36:13:81:f4:46:cc:35:
d3:a1:15:f1:f8:1e:82:5d:43:37:19:ef:1b:80:f0:40:b2:83:
7d:d8:8e:42:9b:df:4a:b8:8a:cf:a8:c3:ba:ab:8b:18:8f:82:
06:7f:ad:df:76:cd:c3:1d:52:35:06:59:8d:01:fb:bd:47:58:
ae:6a:50:c9:1f:0b:e8:7e:b2:0e:b7:70:aa:3b:02:9b:4c:90:
50:bd:c2:d2:76:37:be:1f:95:01:37:41:4f:16:e8:14:4f:cc:
96:08:00:92:be:04:39:9a:36:1b:7f:fc:58:cd:a2:22:57:0b:
1d:f2:c5:be:1b:68:3c:b0:91:45:9f:60:55:c0:51:f8:20:1d:
2f:2a:9e:5e:00:03:96:e2:c0:5f:f1:10:94:f7:e8:c4:56:0c:
3a:3f:aa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:56:31 2026 by rpki-client