
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
File: iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json)
Hash identifier: zG04+O2Y3DtOmRz8IyQ+/UhEsmPMQTnTuhA8GMi7+nM=
Subject key identifier: D2:DA:7B:39:02:78:B3:7B:D7:F1:3D:26:7C:35:B3:72:60:96:67:DF
Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Certificate serial: 0415
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
Manifest number: 0408
Signing time: Mon 27 Jul 2026 01:27:00 +0000
Manifest this update: Mon 27 Jul 2026 01:27:00 +0000
Manifest next update: Mon 03 Aug 2026 01:27:00 +0000
Files and hashes: 1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: POAfb4aFA5hGFUEjmOodA/BSw5Q6a8ma5JovUdEohbI=)
2: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: PKziXo5JwfLo2oKzhtquW/s14RITw4Gju81cfabKo1g=)
3: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: g/y6tyH2Gsq/YIingTE3FmjJMzDHLagvffaKtJeyX2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1045 (0x415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Validity
Not Before: Jul 27 01:27:00 2026 GMT
Not After : Aug 3 01:27:00 2026 GMT
Subject: CN=6a66b3e4-37c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:4d:a5:5c:c4:b4:2d:1a:e7:a4:bc:84:c7:
ae:d9:00:15:d9:bb:16:a7:8a:55:bf:a8:ea:99:59:
2a:29:42:89:b6:be:8b:1f:c6:bb:3b:f1:45:0d:6d:
c7:9e:3b:3f:29:ae:c0:13:b1:0a:ff:1d:a1:a0:d1:
3b:2f:24:ec:ef:46:c4:aa:c8:c4:0e:78:17:e8:1b:
bc:d8:be:97:c6:5e:91:58:ac:63:8a:1e:27:ec:4d:
a6:5c:78:81:e5:ed:c5:3d:e9:a7:ed:d2:aa:50:0e:
71:5b:1e:c4:ce:86:77:bf:47:86:00:c2:47:75:09:
0b:b1:41:7c:68:f1:94:4c:5d:f1:21:47:ed:18:fe:
55:19:f8:9c:69:1f:43:ea:3c:75:e6:2f:6b:94:33:
97:bc:f2:ba:d7:24:19:12:12:81:1d:be:43:ed:48:
84:4b:7b:da:e6:b7:62:56:23:c8:a3:42:5a:bc:56:
a2:29:54:61:e7:c5:31:fc:ac:da:cf:31:9d:53:c3:
98:c4:5f:68:70:e6:fb:a9:3f:17:4b:0c:d8:bc:77:
f2:8a:b9:06:da:11:ff:a1:78:de:36:dc:0b:2d:bd:
fb:01:cc:e8:d3:66:b9:86:c7:c7:81:be:1d:92:cb:
fd:85:00:f8:7e:d1:4c:25:0d:1a:46:80:81:f0:a1:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DA:7B:39:02:78:B3:7B:D7:F1:3D:26:7C:35:B3:72:60:96:67:DF
X509v3 Authority Key Identifier:
keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:90:85:78:cb:49:96:a8:de:5a:01:dd:09:75:49:dd:0b:ee:
5f:20:87:ad:ae:57:7b:a3:0a:18:74:75:10:6f:1e:b6:2d:77:
6c:7a:0a:c2:a5:8b:fc:58:42:4b:00:66:1a:89:90:a2:68:f3:
0a:63:19:5a:e9:6d:db:99:d8:9c:b7:12:62:cf:58:6d:16:e5:
e0:c0:aa:b3:fc:e9:e7:3d:db:20:8a:91:6f:3d:ee:04:b8:65:
d3:8e:d7:41:69:02:9c:d9:17:91:a8:e9:18:6a:c8:be:9c:8e:
04:13:75:c8:6d:76:83:5b:3e:10:cf:47:aa:8e:a5:4c:93:fd:
fa:25:66:cc:37:a0:d3:78:ba:7b:ae:fd:a2:79:a0:85:77:88:
99:70:40:f0:a9:ec:5a:3e:67:37:9e:c5:cf:c3:ff:6b:2a:b8:
05:ba:11:e2:d7:a8:8f:09:69:c9:2a:17:d8:30:26:e6:39:a6:
ec:f7:a5:37:32:86:bf:07:bd:a2:e5:a3:ad:c3:1c:9b:f7:fd:
f6:0e:52:b7:b9:d0:15:55:4e:a8:a9:51:01:fb:36:de:ba:db:
53:ab:f4:6a:c6:12:06:35:c7:95:1b:59:bb:f8:89:12:94:4d:
2f:76:f3:39:31:27:30:ea:fc:e4:82:81:bc:2d:b6:39:64:9e:
6b:7c:d4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:35:39 2026 by rpki-client