
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
File: I9szI90s15w3OFgdQvSrD0mINMI.mft (raw, json)
Hash identifier: EJ5/hYMdETwZ7W3Q7AnzR4tOP1NhT0y1qxKudlw4BMc=
Subject key identifier: 5B:18:79:E9:3A:C1:6F:54:62:34:44:6A:EF:36:10:9A:FE:99:AB:FF
Authority key identifier: 23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2
Certificate issuer: /CN=A911C28A/serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2
Certificate serial: 06A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
Manifest number: 069E
Signing time: Sun 26 Jul 2026 23:17:02 +0000
Manifest this update: Sun 26 Jul 2026 23:17:01 +0000
Manifest next update: Sun 02 Aug 2026 23:17:01 +0000
Files and hashes: 1: I9szI90s15w3OFgdQvSrD0mINMI.crl (hash: ANh//lbixR9VTJUp2Se5VtXEv1dL4x8+Z/vMRtO84Y0=)
2: 2D5E84AAC2A911EBB2025B36C4F9AE02.roa (hash: c0M+m0+FJnT9213Y2elavdnEvd9Z/5c3ESENVkryjmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl
rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1702 (0x6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28A, serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2
Validity
Not Before: Jul 26 23:17:01 2026 GMT
Not After : Aug 2 23:17:01 2026 GMT
Subject: CN=6a66956d-850b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:50:cf:1f:f5:77:6a:df:e9:d1:11:0c:4b:
b6:02:3f:26:b5:49:10:71:07:72:b9:6b:66:63:43:
5e:cb:f4:df:f1:5b:d6:72:6a:96:b7:50:72:20:9e:
5b:07:49:c4:af:77:28:02:5b:64:96:5a:e5:81:cc:
38:b4:d8:ec:88:8e:3c:1e:7d:43:c1:1e:3b:2d:58:
dc:4a:7b:ec:c2:74:59:b8:c4:32:9c:dd:e6:5b:c8:
23:46:f2:3e:b0:cd:fe:dc:97:dc:47:97:25:b6:cd:
b0:b6:cd:64:04:1a:f6:7b:21:2d:99:7c:aa:a1:5d:
63:42:75:0b:6f:cf:b1:71:95:b8:e3:a5:84:d7:bb:
31:81:3c:d8:30:b6:b5:d3:c6:c8:15:fb:7c:e5:ed:
e0:fa:f4:a4:8f:db:ae:95:02:c5:af:2b:49:99:fc:
04:e5:0a:01:b0:33:06:4d:68:6d:9f:74:ff:74:f7:
59:5c:59:8a:bb:a0:93:a9:18:d7:d5:de:55:4d:7a:
25:ce:0c:36:71:27:a8:69:cf:1c:cf:2b:76:5f:11:
8a:2a:cc:47:f1:10:e3:22:68:99:71:2d:fb:5c:2b:
9e:fa:2b:7d:93:c3:76:b4:ef:97:d8:a2:34:d2:cc:
aa:76:0e:10:e4:00:15:41:e2:d9:af:0f:cd:00:00:
0b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:18:79:E9:3A:C1:6F:54:62:34:44:6A:EF:36:10:9A:FE:99:AB:FF
X509v3 Authority Key Identifier:
keyid:23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:18:05:0a:42:f1:b2:90:c3:52:36:9a:18:b6:d3:ee:28:99:
4c:01:d1:ba:e1:b9:07:be:95:13:13:35:3c:71:f8:d8:bd:76:
88:ac:0f:ca:94:fc:53:80:f0:4d:b4:d9:2e:83:33:55:45:e2:
08:c2:73:27:9a:a1:53:30:a5:67:eb:4e:51:b3:b4:dc:34:09:
54:d0:50:a4:00:6f:41:2f:28:c2:71:d3:f8:f6:6e:80:5a:09:
ed:5c:24:d5:96:54:1b:46:87:cc:cf:4e:38:bd:c9:07:39:5a:
03:b9:25:aa:2e:50:57:e6:ff:42:61:6b:17:ea:9e:19:6b:e8:
89:13:e8:fd:61:1b:9b:12:20:a2:c0:58:5c:bf:f4:c5:c1:6f:
5b:59:7e:d0:f9:ef:21:d3:be:2a:d4:66:99:7f:17:72:9a:e5:
8b:0c:77:9b:fa:4c:d2:3f:ac:db:73:a2:86:e2:7a:c9:16:4e:
ba:2b:e4:9c:ea:9e:e5:26:e4:89:cd:cd:4f:eb:d8:45:d8:ec:
78:bb:9c:36:fc:ef:34:81:4c:02:4b:4c:de:2a:e5:bd:e5:9d:
67:81:be:d8:a9:32:be:7b:02:ce:2e:74:52:df:e3:15:b4:4e:
f2:6f:31:c2:b0:b9:7f:a1:7c:fd:48:b0:3b:d3:2f:38:b6:ef:
e4:71:b2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:10 2026 by rpki-client