
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
File: igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft (raw, json)
Hash identifier: 2q+VbcaMkih/GtHQVAXguOCMRRUQfBgb5h8WBzXlxaQ=
Subject key identifier: E5:BD:1B:D7:D8:4C:08:9C:DC:EE:9C:01:CA:C3:76:ED:49:09:99:8A
Authority key identifier: 8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD
Certificate issuer: /CN=A9120960/serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
Manifest number: 59
Signing time: Fri 17 Apr 2026 07:50:23 +0000
Manifest this update: Fri 17 Apr 2026 07:50:22 +0000
Manifest next update: Fri 24 Apr 2026 07:50:22 +0000
Files and hashes: 1: igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl (hash: +iY/xg5tMTP3eFdkvteEOVLZNS7j/OeBvEZHR0B5wlc=)
2: 8F8C10F021B511F192BB9899183D8C67.roa (hash: 0xuvjyrkoEqy2zxPFo6OwWWnDEpntu6AcHZQ20nczcs=)
3: 4B6ACA2E21B511F19C8EC293183D8C67.roa (hash: VPa6yyp/eEFlOacVhCtM4XlEL20jroaHa78D9GMgJRY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl
rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120960, serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
Validity
Not Before: Apr 17 07:50:22 2026 GMT
Not After : Apr 24 07:50:22 2026 GMT
Subject: CN=69e1e63f-cd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:41:39:68:7c:70:29:b8:56:9d:90:27:f9:
f8:84:dd:2e:5f:c0:32:d4:5f:3c:76:ba:b2:79:9b:
c0:ae:4b:de:18:5a:c0:b4:1b:32:b9:d9:d6:4f:38:
12:38:95:a6:0c:27:39:67:f0:95:ce:11:b5:cd:b8:
21:5f:1e:8e:da:fe:cb:14:70:8c:68:9c:c5:ca:a1:
71:28:b2:b0:18:7a:a2:1a:3f:dd:a3:ed:82:4f:66:
01:fe:1f:1b:24:99:c4:6d:36:6c:f3:61:fa:6c:c9:
0c:94:2b:0e:4b:cd:a7:40:52:df:d0:94:6d:9c:22:
a1:3f:cf:ba:65:ef:5c:a7:b0:61:20:7c:d8:6e:c3:
68:79:61:35:99:2c:74:c3:17:5f:e1:39:90:c3:0a:
5c:fe:19:25:90:02:7c:d0:7a:5e:f1:11:27:3a:cc:
bd:60:1d:bd:7a:59:d9:a7:58:a9:7b:c3:45:d6:d1:
ed:8a:38:e5:1d:d4:04:f1:ff:2e:50:07:76:c3:23:
9c:60:1a:66:75:18:5f:58:22:e4:9a:16:3f:b4:50:
68:e1:85:d7:f5:a3:65:5d:61:9b:e7:06:a1:c7:14:
32:dd:e6:e9:9e:20:ac:de:e6:42:03:29:db:a7:cf:
7c:4f:3d:52:1d:49:e4:17:77:2b:24:4d:81:36:54:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:1B:D7:D8:4C:08:9C:DC:EE:9C:01:CA:C3:76:ED:49:09:99:8A
X509v3 Authority Key Identifier:
keyid:8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:df:06:a8:38:b0:63:95:16:d8:42:0b:dd:4b:9b:3c:0b:15:
0a:4a:70:69:46:31:d0:44:af:37:66:12:19:d2:e5:a5:39:47:
ce:00:8c:26:4a:5b:42:04:1a:da:4c:c8:60:00:3c:8e:68:76:
c8:a2:54:a9:37:35:55:3e:ef:df:70:4e:ad:38:9c:a7:f7:8f:
09:b2:e5:14:97:09:e4:66:b9:c3:c1:02:70:71:04:0b:93:47:
74:ec:83:ab:6b:8d:4a:36:43:04:f8:5e:d8:aa:2e:d8:c1:e3:
fd:de:18:d3:0e:bb:e8:00:28:32:48:d1:57:a0:51:1a:eb:6d:
e3:9e:7f:a4:d1:83:f5:32:c6:8b:ed:36:6f:50:e5:ba:5e:9d:
d4:71:dc:7d:e7:7e:dc:75:42:78:da:97:ca:7f:97:2d:03:b9:
8d:2e:29:e5:62:82:1a:b3:0c:b8:f8:76:b7:2c:b0:87:e6:e7:
48:2e:57:05:18:a6:95:2c:b9:ae:8f:7a:28:4d:64:84:dd:1f:
35:34:eb:f8:ad:15:b5:bf:4d:c8:ee:df:ca:d7:66:4c:7a:ca:
86:61:00:e0:37:a2:35:f0:7b:93:64:69:70:d5:c8:dc:25:5c:
5f:5a:48:1d:71:9d:c6:d3:f1:c1:d4:8e:c9:c1:20:e2:4e:6a:
16:7d:9d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:34:44 2026 by rpki-client