
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json)
Hash identifier: rIavT2FRos2U04UQSjsPp7l03VMXOL6vLa04hpUQ7nU=
Subject key identifier: CF:25:68:08:AC:F8:1B:50:33:C7:37:6B:23:C2:56:16:2A:86:AE:51
Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93
Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093
Certificate serial: 0B4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
Manifest number: 0B26
Signing time: Fri 12 Jun 2026 19:20:30 +0000
Manifest this update: Fri 12 Jun 2026 19:20:30 +0000
Manifest next update: Fri 19 Jun 2026 19:20:30 +0000
Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: wbfiOCQ8D94XfBJ4FMvvyLThx14sfi8stpeOm1ksgQs=)
2: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: 7AD0EtO6OgTcq7iPrxEzW9VN1IAYjbMxwXVENNdHRmk=)
3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: eo+fVmREjn0E/C8IX23s1pespE6vPSqglnEAEQntZB8=)
4: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: XwrzlM0letqZh+/RvWS8GdyBop29NFs5TR8e33g5dvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl
rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2892 (0xb4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093
Validity
Not Before: Jun 12 19:20:30 2026 GMT
Not After : Jun 19 19:20:30 2026 GMT
Subject: CN=6a2c5bfe-d260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:e5:ee:71:95:42:0d:85:46:4d:45:c9:df:
d0:3e:1b:e2:b9:38:3e:6d:8c:97:66:7f:bc:fe:6f:
67:d3:c5:59:20:a4:57:44:18:40:9c:1f:76:dc:31:
f8:5d:9d:6a:46:3f:b1:09:78:c6:7e:c9:e0:73:e7:
0d:4e:3e:79:94:1c:78:6a:72:f1:b6:83:a5:cf:c9:
69:ac:4b:e4:09:a1:54:42:3f:f2:ee:f9:fd:4c:c8:
80:d9:eb:9b:eb:2f:6a:2a:3a:d1:8f:77:d7:f8:b8:
1b:09:d6:b5:cf:62:b3:4f:b1:99:5f:66:fb:0c:db:
5e:49:af:bb:4e:96:f9:8a:6a:47:be:cc:60:33:f4:
e6:e2:28:83:50:7e:0e:65:4a:fa:28:13:d8:b3:08:
f7:b9:c9:3b:fb:ab:2e:d0:7a:a0:0b:51:03:36:87:
a1:0f:2c:b5:e2:03:42:57:84:9d:4c:da:95:5f:76:
58:28:e5:25:8b:b4:a4:f8:5e:7d:a3:4e:87:7a:d2:
ae:6e:9f:8a:81:58:ec:3b:17:96:cc:76:2a:d4:10:
fb:bc:dc:34:0c:d8:3f:16:e0:f1:b3:3b:31:9d:22:
3c:83:05:98:3f:53:18:10:d9:67:74:55:79:1f:f1:
e8:57:d2:b6:b3:7b:87:08:4f:d9:c8:60:e2:b7:50:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:25:68:08:AC:F8:1B:50:33:C7:37:6B:23:C2:56:16:2A:86:AE:51
X509v3 Authority Key Identifier:
keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0d:40:68:1e:bb:18:e6:db:e8:1e:4f:48:5f:cb:78:a1:8c:
4a:05:5c:65:c3:94:ee:c6:f3:0e:d3:54:2d:51:55:6a:36:f0:
f0:23:d4:a0:59:ef:07:a1:d8:23:49:cc:2c:6f:68:01:8b:1d:
57:4a:71:ea:ef:51:5d:f2:df:58:f2:57:dd:2a:7f:ec:86:02:
d1:60:88:f2:d4:fb:43:44:b4:08:b4:53:3d:22:67:8a:ed:a0:
bc:68:08:30:ba:ae:60:d1:f2:3a:9e:f7:50:74:c6:77:64:61:
44:31:44:f2:1e:ef:02:61:27:21:df:02:bc:ef:22:91:ee:df:
53:5b:74:2c:d9:bd:20:a2:f4:69:c5:14:a3:03:22:7e:38:fd:
b5:4c:42:92:51:4a:96:ae:ff:fc:88:78:18:1a:e0:29:d6:60:
66:dc:16:5c:5f:78:02:f8:25:10:58:04:98:0d:f9:8b:5c:c9:
26:5d:e1:c1:39:ec:6f:a7:19:04:da:79:2f:94:b3:fb:a8:ff:
db:03:60:27:12:db:e0:d0:fd:71:39:9c:09:4c:77:47:50:bf:
05:47:d3:19:38:1a:24:5d:bf:e8:07:09:7d:ef:28:49:dc:6b:
b6:25:15:33:4c:b9:bc:a9:36:60:5a:20:67:21:91:57:5b:09:
6c:d1:93:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:21:13 2026 by rpki-client