
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
File: I9szI90s15w3OFgdQvSrD0mINMI.mft (raw, json)
Hash identifier: svkRG8SmZlPe1JV0ffXKjrIU5NgT4st0/y9TRNtJfLw=
Subject key identifier: 93:D8:4D:D9:04:6B:91:2B:B7:ED:9A:7C:72:0E:CD:ED:7D:1A:2C:96
Authority key identifier: 23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2
Certificate issuer: /CN=A911C28A/serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2
Certificate serial: 06C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
Manifest number: 06BB
Signing time: Sun 20 Sep 2026 22:15:34 +0000
Manifest this update: Sun 20 Sep 2026 22:15:34 +0000
Manifest next update: Sun 27 Sep 2026 22:15:34 +0000
Files and hashes: 1: I9szI90s15w3OFgdQvSrD0mINMI.crl (hash: cjNVQQJAD4P66BNaAc3U8UO6kOr8n1vlSaGTGUwmx4c=)
2: 2D5E84AAC2A911EBB2025B36C4F9AE02.roa (hash: c0M+m0+FJnT9213Y2elavdnEvd9Z/5c3ESENVkryjmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl
rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:15:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1731 (0x6c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28A, serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2
Validity
Not Before: Sep 20 22:15:34 2026 GMT
Not After : Sep 27 22:15:34 2026 GMT
Subject: CN=6ab05b06-255f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:e4:9c:80:0e:59:b2:b4:cd:97:9c:58:87:
85:24:ae:92:2f:0a:4a:00:5b:5d:ab:ad:ca:b7:60:
27:89:44:1c:7d:42:f1:25:08:a5:b5:1c:83:13:14:
53:3c:7c:0d:e0:1a:dd:46:1f:54:b4:71:66:cb:7c:
04:8d:cf:b6:0e:7b:61:2f:4f:41:6c:52:2f:15:59:
73:27:cc:f5:56:f5:d1:10:3c:c1:79:a1:c9:b9:94:
59:2e:ad:7b:fb:1a:93:6e:d7:18:83:be:4c:7c:ef:
7f:4c:23:88:5d:de:34:e7:7f:92:f1:97:1c:f5:51:
aa:8e:6c:ee:a2:bf:3b:13:bf:78:a6:74:c8:09:9e:
e5:22:bc:31:3d:c6:57:1a:e0:67:9d:48:50:13:dc:
42:2a:3d:2a:82:af:f8:69:dd:94:1f:f6:07:e4:5f:
b1:7c:7e:46:25:1f:12:46:90:47:2f:70:28:ed:3f:
4c:7e:00:11:3b:61:c5:03:7d:72:a1:a5:33:e0:15:
ef:4e:c8:bf:9f:b9:dd:3f:96:b4:85:59:9b:67:c6:
ee:fa:94:f3:55:99:cc:3c:5d:b5:81:67:e2:9b:ca:
09:22:07:11:7e:2c:0a:bf:01:a5:f0:bf:30:66:53:
2c:4a:5c:c9:b2:95:37:c6:9b:4b:ea:c4:e5:7f:07:
be:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D8:4D:D9:04:6B:91:2B:B7:ED:9A:7C:72:0E:CD:ED:7D:1A:2C:96
X509v3 Authority Key Identifier:
keyid:23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dd:62:f9:69:18:88:08:a5:7d:ff:d5:f6:75:5f:5c:44:e4:41:
f4:b6:e8:80:71:67:8c:0c:ea:8c:68:3b:aa:14:de:c2:a8:65:
c8:52:83:86:bf:d1:1b:50:8f:bf:df:ff:58:ff:3a:02:c2:d5:
7f:48:8b:02:bb:ce:ab:58:8a:3a:f7:58:85:7d:42:46:d0:92:
ae:52:25:11:7b:2b:7d:b8:5c:cb:d6:b3:b4:d0:a6:c2:d0:5b:
c1:c5:60:53:94:25:c9:04:9d:b9:8a:96:1a:d3:13:69:b3:6f:
dd:e7:a1:b1:0b:00:8b:26:9f:88:c7:03:78:b7:ff:37:8d:82:
07:44:56:c5:b9:84:7a:19:f0:ce:8b:09:46:21:32:6b:d8:dd:
a2:66:49:ef:e3:3c:3d:84:06:42:75:22:ec:ef:24:7e:1a:57:
9a:24:25:d8:6f:2b:c4:8e:0f:a6:34:c6:83:28:a2:40:35:39:
f5:c1:59:11:4e:b8:ab:6d:6f:c1:5b:fe:14:65:f6:18:06:6e:
3d:0f:06:b7:07:18:21:ad:07:bb:74:47:68:c7:27:54:73:b4:
1c:7c:b0:92:2c:37:47:e8:93:b7:b6:ed:98:c8:66:ee:fe:cb:
25:3b:ad:bd:74:54:42:d6:7f:31:67:fb:fa:65:97:c2:76:35:
58:4f:7a:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEExMTAvBgNVBAUTKDIzREIzMzIzREQyQ0Q3OUMzNzM4NTgxRDQyRjRBQjBG
NDk4ODM0QzIwHhcNMjYwOTIwMjIxNTM0WhcNMjYwOTI3MjIxNTM0WjAYMRYwFAYD
VQQDEw02YWIwNWIwNi0yNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2A3knIAOWbK0zZecWIeFJK6SLwpKAFtdq63Kt2AniUQcfULxJQiltRyDExRT
PHwN4BrdRh9UtHFmy3wEjc+2DnthL09BbFIvFVlzJ8z1VvXREDzBeaHJuZRZLq17
+xqTbtcYg75MfO9/TCOIXd4053+S8Zcc9VGqjmzuor87E794pnTICZ7lIrwxPcZX
GuBnnUhQE9xCKj0qgq/4ad2UH/YH5F+xfH5GJR8SRpBHL3Ao7T9MfgARO2HFA31y
oaUz4BXvTsi/n7ndP5a0hVmbZ8bu+pTzVZnMPF21gWfim8oJIgcRfiwKvwGl8L8w
ZlMsSlzJspU3xptL6sTlfwe+SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJPYTdkE
a5Ert+2afHIOze19GiyWMB8GA1UdIwQYMBaAFCPbMyPdLNecNzhYHUL0qw9JiDTC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4QS8yQTM1NjZBOEMy
QTUxMUVCQjREMzRFMzVDNEY5QUUwMi9JOXN6STkwczE1dzNPRmdkUXZTckQwbUlO
TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k5c3pJOTBzMTV3M09GZ2RRdlNyRDBtSU5NSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzI4QS8yQTM1NjZBOEMyQTUxMUVCQjREMzRFMzVDNEY5QUUwMi9JOXN6STkwczE1
dzNPRmdkUXZTckQwbUlOTUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA3WL5aRiICKV9/9X2dV9cRORB9LbogHFnjAzqjGg7qhTewqhlyFKDhr/RG1CP
v9//WP86AsLVf0iLArvOq1iKOvdYhX1CRtCSrlIlEXsrfbhcy9aztNCmwtBbwcVg
U5QlyQSduYqWGtMTabNv3eehsQsAiyafiMcDeLf/N42CB0RWxbmEehnwzosJRiEy
a9jdomZJ7+M8PYQGQnUi7O8kfhpXmiQl2G8rxI4PpjTGgyiiQDU59cFZEU64q21v
wVv+FGX2GAZuPQ8GtwcYIa0Hu3RHaMcnVHO0HHywkiw3R+iTt7btmMhm7v7LJTut
vXRUQtZ/MWf7+mWXwnY1WE96FA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:25:00 2026 by rpki-client