
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
File: igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft (raw, json)
Hash identifier: R/KE1xX+D8ACUEerZ+lhV/jPhvV946glUvoh+luSjAw=
Subject key identifier: BC:FA:F8:91:E7:B4:65:E3:FD:68:A6:2C:9C:78:05:15:E7:E6:27:C1
Authority key identifier: 8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD
Certificate issuer: /CN=A9120960/serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
Certificate serial: AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
Manifest number: AA
Signing time: Mon 21 Sep 2026 07:12:14 +0000
Manifest this update: Mon 21 Sep 2026 07:12:14 +0000
Manifest next update: Mon 28 Sep 2026 07:12:14 +0000
Files and hashes: 1: igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl (hash: fymU4rLhb8Vwe8204UApWl4dGvTQ8G7inrfONE6UbEw=)
2: 4B6ACA2E21B511F19C8EC293183D8C67.roa (hash: hTm1hC4z4/h09pd99dIB7y+cP+dNmHyx5jWFuawvpdw=)
3: 8F8C10F021B511F192BB9899183D8C67.roa (hash: Qspe0e/jD5ftFW6k2VBzPuJWxT8JG0kniB7v/aJxi4Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl
rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120960, serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
Validity
Not Before: Sep 21 07:12:14 2026 GMT
Not After : Sep 28 07:12:14 2026 GMT
Subject: CN=6ab0d8ce-0f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:81:d9:06:7b:ea:a0:5e:83:06:77:09:39:
19:8b:90:56:62:b6:b5:a8:92:e4:49:9f:84:13:3f:
db:0a:5b:c0:f0:10:17:a9:25:b4:c0:e9:d5:ed:4c:
09:1e:53:d7:a2:65:a7:c2:f0:b5:fd:ae:73:77:b6:
9f:95:a4:cc:b6:ef:a7:bb:d3:ad:38:61:7d:98:d8:
75:b3:f4:9f:e1:b0:9c:34:3f:d9:e3:64:3c:9d:a6:
64:2f:d1:51:50:77:80:dc:bb:36:21:1c:81:93:bd:
c8:8b:92:27:5d:b1:4e:04:47:bf:6d:99:2a:3b:d4:
1f:04:15:d0:61:c6:49:52:4a:11:14:dd:6a:0e:1d:
db:6d:45:f6:a7:de:ac:70:b5:ef:c1:46:fa:c4:f1:
05:a9:7a:1a:01:bb:11:3f:ce:e6:86:ee:96:24:84:
ba:ef:67:11:db:fb:21:be:99:1f:a4:40:41:46:25:
c9:4d:de:5b:00:4a:fc:b9:0d:fa:87:95:57:d3:f1:
0d:b1:c9:de:d8:16:62:d0:44:13:8c:b5:46:f1:19:
78:7f:58:50:72:f4:ce:e8:fd:a7:ce:ca:ba:ec:87:
cf:86:43:86:55:52:69:35:1f:01:0c:1e:71:ab:14:
5b:30:aa:4f:fc:3b:14:40:d5:69:d0:76:e7:b4:29:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FA:F8:91:E7:B4:65:E3:FD:68:A6:2C:9C:78:05:15:E7:E6:27:C1
X509v3 Authority Key Identifier:
keyid:8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:52:24:63:06:87:dd:83:6d:61:d5:84:15:13:c7:1d:ab:af:
e8:74:94:e9:0c:6f:d5:c5:56:39:d7:67:cd:db:02:db:a3:4c:
e9:99:d0:14:e2:5a:12:34:27:b3:2b:3e:8a:51:d1:9e:67:d1:
f5:8c:4d:d5:c2:4c:06:c7:92:b7:3a:ee:5c:a9:71:9e:d4:91:
cd:ff:1f:57:c2:a2:26:86:51:2c:df:38:bb:cb:13:f8:3f:41:
7e:e2:25:8d:32:f1:58:df:ab:2f:45:52:72:e6:f6:0a:6e:8a:
d5:01:05:d3:8d:b6:d6:6f:a8:68:8a:a4:9b:0e:47:e2:92:e5:
c6:74:84:5c:4e:5a:06:9a:31:07:c7:08:e6:90:85:36:d2:dd:
9d:42:10:d2:69:d4:45:49:3b:c7:c1:05:7c:5a:e4:f4:d9:af:
b5:ac:b5:93:9e:cc:40:3b:0c:79:14:53:04:cc:ce:2e:a6:db:
fc:7f:be:e9:18:9b:57:91:8a:59:27:ff:44:3d:8b:d4:4d:e6:
67:68:33:df:8d:23:bc:42:d1:33:0d:1c:01:14:d0:dc:7b:1c:
3d:94:3a:ab:db:cb:cc:7f:b0:d4:6e:1b:ef:26:b0:1d:b5:32:
e9:46:1a:0d:57:14:0e:40:84:79:0b:22:99:3f:52:05:bc:65:
a5:8f:73:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:16:49 2026 by rpki-client