
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
File: ilHqWMRcL0Rg46sT62pnRUZdr4s.mft (raw, json)
Hash identifier: er/hd/C4353+ETHp+DeIstJf+pmgi0Kni783aFoR/B4=
Subject key identifier: 1A:B9:3A:07:64:3C:8D:BA:48:CA:94:FB:35:0D:5E:CF:78:DF:DE:EB
Authority key identifier: 8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
Certificate issuer: /CN=A911AF72/serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
Manifest number: 9F
Signing time: Mon 27 Jul 2026 09:27:00 +0000
Manifest this update: Mon 27 Jul 2026 09:27:00 +0000
Manifest next update: Mon 03 Aug 2026 09:27:00 +0000
Files and hashes: 1: ilHqWMRcL0Rg46sT62pnRUZdr4s.crl (hash: 2+nyCAJ+magz0I70vez3uWUZ8GnXRwT01SRhYp5tRxw=)
2: A537B070BA4B11F0BD639513C4F9AE02.roa (hash: zfUTfDN6MNZwyyQaYTs7HfwVxHWJRQ0R4nx1a49wJN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AF72, serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Validity
Not Before: Jul 27 09:27:00 2026 GMT
Not After : Aug 3 09:27:00 2026 GMT
Subject: CN=6a672464-653d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:81:dd:b0:3b:f0:d1:70:6a:57:19:41:2d:
d2:1d:f7:49:16:28:c3:22:f7:be:15:38:bb:85:14:
a0:8f:0c:43:20:a3:d0:b8:f9:4a:e6:ec:14:69:2c:
fe:0a:9e:f3:8a:85:c3:65:c4:02:da:64:11:f5:10:
c1:ca:ba:ed:b1:fa:eb:6e:55:57:58:d4:42:d2:83:
67:fa:f1:66:56:2b:82:e8:47:5a:51:6e:0c:80:14:
28:93:72:70:5f:2d:d2:ba:1c:63:d9:38:1e:0a:6d:
23:ad:21:26:78:70:02:0d:dd:90:96:7f:b0:98:b4:
a6:29:6d:c8:65:d5:36:46:f3:ba:46:d3:15:37:4a:
bd:0b:bc:8f:59:d9:56:e0:f7:57:13:aa:2d:0b:fd:
4c:c4:c9:60:f9:2a:26:71:d4:71:48:44:e9:d9:68:
de:22:57:5f:62:db:33:50:1d:b7:98:89:97:fa:2f:
45:51:17:f8:3a:26:b5:b6:9e:a7:37:0d:b3:af:40:
36:4a:6b:70:f7:64:ef:5e:2d:80:41:b1:79:cc:0d:
1e:97:da:ae:c9:0f:c6:0d:24:3f:30:b3:86:53:ca:
43:64:17:cf:6d:2d:aa:8a:70:a8:6f:f8:6b:41:8e:
1a:f7:0d:b3:4e:69:8f:58:73:e7:39:78:7c:42:6d:
d9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B9:3A:07:64:3C:8D:BA:48:CA:94:FB:35:0D:5E:CF:78:DF:DE:EB
X509v3 Authority Key Identifier:
keyid:8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:23:46:43:ee:a0:bb:1e:a8:7d:4e:9c:88:3b:03:a6:e2:8c:
98:f2:2f:b7:7a:8f:53:bc:d3:91:01:2b:d3:de:c0:e3:93:69:
43:8c:9c:f8:9b:dd:0a:56:44:cd:17:e9:e3:af:45:ed:28:5a:
b3:a5:d3:84:83:d2:c7:20:9a:9b:63:de:e2:6e:fd:3f:b0:8b:
12:b3:8b:79:65:fa:cb:0c:79:d2:b9:62:16:d8:72:05:9f:50:
66:89:f8:c0:89:07:09:3e:3d:e5:52:8f:2c:a4:b5:ab:62:23:
25:6e:89:ba:fe:79:02:e0:46:d8:b5:d1:17:f2:fe:20:b0:0d:
9d:54:23:47:68:be:f5:e0:f5:72:43:06:16:ac:a8:b2:49:6a:
f8:22:f4:27:3d:bb:29:0b:86:b1:34:84:5b:2b:ec:fe:b6:05:
50:d3:00:a4:21:57:f7:62:62:48:e6:d9:a6:e4:cf:a5:c3:d4:
92:60:ed:74:0d:97:d7:d7:76:1a:06:97:09:11:79:e5:ee:5f:
e7:1a:68:42:81:4f:36:c0:bf:12:a6:ca:27:bb:e4:b5:58:c5:
6b:66:a2:82:a5:f5:5c:56:d7:87:3c:8d:06:9c:ca:cd:95:60:
b8:6a:99:34:01:b6:10:2e:35:17:6c:45:fc:39:0e:9b:a0:0d:
77:29:5d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:55:55 2026 by rpki-client