
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
File: ilHqWMRcL0Rg46sT62pnRUZdr4s.mft (raw, json)
Hash identifier: fZGSpRFfl3yFON4vlkePwEydEMkudxcsVqLMA8RRLHI=
Subject key identifier: FB:1F:06:57:10:03:08:0A:8B:AC:32:87:B3:04:DE:EE:2E:86:6D:AF
Authority key identifier: 8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
Certificate issuer: /CN=A911AF72/serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
Manifest number: 89
Signing time: Sat 13 Jun 2026 07:36:58 +0000
Manifest this update: Sat 13 Jun 2026 07:36:57 +0000
Manifest next update: Sat 20 Jun 2026 07:36:57 +0000
Files and hashes: 1: ilHqWMRcL0Rg46sT62pnRUZdr4s.crl (hash: aZFdS5yax/gcXcC/8XFmm/YCK/Us4OSseKZFUoZkuYk=)
2: A537B070BA4B11F0BD639513C4F9AE02.roa (hash: zfUTfDN6MNZwyyQaYTs7HfwVxHWJRQ0R4nx1a49wJN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AF72, serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Validity
Not Before: Jun 13 07:36:57 2026 GMT
Not After : Jun 20 07:36:57 2026 GMT
Subject: CN=6a2d089a-a661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:22:69:37:69:6f:ae:21:cf:43:c7:de:4e:
57:db:8b:79:da:82:61:e3:08:77:e0:60:cd:35:02:
a9:24:a8:e7:01:2b:9a:b9:bb:b8:3a:3e:b5:4e:7a:
de:52:2c:ae:59:77:73:e9:69:ab:17:c4:c8:03:ac:
da:e0:17:0c:2d:ac:58:19:31:90:65:16:cc:59:ed:
4c:1b:df:4e:6a:74:88:94:ee:54:07:5a:fe:e7:b6:
ef:ea:30:43:d9:7e:51:84:b1:d4:9a:e2:84:ff:2d:
32:08:78:47:65:71:f9:70:1d:92:5f:0c:28:0b:e6:
4b:5b:d2:2c:ff:75:e8:2f:a7:07:1c:79:7d:f3:fa:
ac:78:84:4b:ed:ad:7c:6f:7f:a8:84:a4:a2:ea:81:
ab:c2:d6:1d:d0:6f:9b:57:bb:dd:8e:76:e3:51:dd:
9b:df:ac:f1:17:71:d0:c0:f2:0f:73:bf:fd:7a:2f:
33:f2:23:69:0e:67:64:f0:2b:81:04:11:c0:a1:99:
d4:be:ee:ca:0f:fd:31:87:37:51:c1:fa:ff:c6:f7:
42:1a:d6:3e:15:d9:37:04:75:55:91:7a:45:59:3e:
0b:9e:e0:96:08:06:91:50:87:7d:14:6f:eb:58:e2:
5f:5d:ae:62:a6:98:fa:fa:19:bb:54:a6:03:93:f7:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1F:06:57:10:03:08:0A:8B:AC:32:87:B3:04:DE:EE:2E:86:6D:AF
X509v3 Authority Key Identifier:
keyid:8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:94:57:ee:7b:31:6e:f2:f9:cd:b2:97:cd:57:fe:af:90:64:
89:c8:65:20:9e:ac:78:64:6e:87:26:fc:01:b8:7d:2d:40:51:
2e:15:37:d3:85:3d:bb:e5:08:f7:f4:92:96:b6:b3:7a:a2:65:
24:95:5b:bf:95:12:82:7d:54:8d:48:18:4c:4f:4d:6b:d9:d3:
7b:4d:6d:d7:71:19:16:84:eb:50:27:66:d4:9c:e9:f2:c5:24:
00:50:b8:88:6c:31:69:a0:e7:fd:50:f5:72:b2:69:53:43:7c:
2c:51:31:ab:2f:3b:62:18:56:91:78:95:22:a7:33:90:a3:91:
bf:6a:58:35:76:09:03:8d:40:b8:1e:e2:08:a5:3a:18:4a:40:
8b:86:51:68:82:c1:f2:ae:09:4d:38:4b:a3:60:9d:62:01:93:
0c:6e:92:ed:74:8a:78:63:f0:25:08:82:90:a1:7d:a4:2b:90:
b6:c6:f7:60:67:a4:2a:4a:d0:3d:8b:44:a4:0c:ef:b9:d7:6d:
f0:1d:2b:af:a7:fb:49:7d:a8:e7:7b:ba:37:7d:f4:a3:00:f4:
70:3c:fc:bc:97:11:00:d7:5a:2b:50:a0:de:fd:23:3a:9d:4a:
98:d3:ef:e3:6d:a3:9a:60:84:fd:e6:5a:ac:02:86:44:50:c1:
9a:9d:94:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFGNzIxMTAvBgNVBAUTKDhBNTFFQTU4QzQ1QzJGNDQ2MEUzQUIxM0VCNkE2NzQ1
NDY1REFGOEIwHhcNMjYwNjEzMDczNjU3WhcNMjYwNjIwMDczNjU3WjAYMRYwFAYD
VQQDEw02YTJkMDg5YS1hNjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnMEiaTdpb64hz0PH3k5X24t52oJh4wh34GDNNQKpJKjnASuaubu4Oj61Tnre
UiyuWXdz6WmrF8TIA6za4BcMLaxYGTGQZRbMWe1MG99OanSIlO5UB1r+57bv6jBD
2X5RhLHUmuKE/y0yCHhHZXH5cB2SXwwoC+ZLW9Is/3XoL6cHHHl98/qseIRL7a18
b3+ohKSi6oGrwtYd0G+bV7vdjnbjUd2b36zxF3HQwPIPc7/9ei8z8iNpDmdk8CuB
BBHAoZnUvu7KD/0xhzdRwfr/xvdCGtY+Fdk3BHVVkXpFWT4LnuCWCAaRUId9FG/r
WOJfXa5ippj6+hm7VKYDk/eGAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPsfBlcQ
AwgKi6wyh7ME3u4uhm2vMB8GA1UdIwQYMBaAFIpR6ljEXC9EYOOrE+tqZ0VGXa+L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUY3Mi84MDlDQzRCQTk3
QUMxMUYwOTE1RTRFMjhDNEY5QUUwMi9pbEhxV01SY0wwUmc0NnNUNjJwblJVWmRy
NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lsSHFXTVJjTDBSZzQ2c1Q2MnBuUlVaZHI0cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUY3Mi84MDlDQzRCQTk3QUMxMUYwOTE1RTRFMjhDNEY5QUUwMi9pbEhxV01SY0ww
Umc0NnNUNjJwblJVWmRyNHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcZRX7nsxbvL5zbKXzVf+r5BkichlIJ6seGRuhyb8Abh9LUBRLhU304U9u+UI
9/SSlrazeqJlJJVbv5USgn1UjUgYTE9Na9nTe01t13EZFoTrUCdm1Jzp8sUkAFC4
iGwxaaDn/VD1crJpU0N8LFExqy87YhhWkXiVIqczkKORv2pYNXYJA41AuB7iCKU6
GEpAi4ZRaILB8q4JTThLo2CdYgGTDG6S7XSKeGPwJQiCkKF9pCuQtsb3YGekKkrQ
PYtEpAzvuddt8B0rr6f7SX2o53u6N330owD0cDz8vJcRANdaK1Cg3v0jOp1KmNPv
422jmmCE/eZarAKGRFDBmp2U6g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:21:17 2026 by rpki-client