
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
File: ioDqhWIqoHAhvfSshBiw2aU5rOE.mft (raw, json)
Hash identifier: SfkomlwGoX39JBa+tRnXO8diznsvSHaUp8pLYwCK7Fk=
Subject key identifier: 6B:ED:F5:AF:24:B5:3F:23:6C:40:D3:99:66:61:FB:BF:43:07:B1:BF
Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
Certificate issuer: /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Certificate serial: 0630
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
Manifest number: 0604
Signing time: Sun 20 Sep 2026 22:48:37 +0000
Manifest this update: Sun 20 Sep 2026 22:48:36 +0000
Manifest next update: Sun 27 Sep 2026 22:48:36 +0000
Files and hashes: 1: ioDqhWIqoHAhvfSshBiw2aU5rOE.crl (hash: H5K7HqPdRVGmD8Y3gCLW9yhay3w11fGaSwzocbsS100=)
2: 3A549A1EB00211F0A3A86535C4F9AE02.roa (hash: qarwsQJsRpCWHG6vFh1YjS9Lj8uPb2xBWzU12A9C+KA=)
3: DA0AD156799211EFADCD2257C4F9AE02.roa (hash: FQawum2eNxdcpBq3F26HS+tVhfZE9PWendAn/iVAyx8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1584 (0x630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Validity
Not Before: Sep 20 22:48:36 2026 GMT
Not After : Sep 27 22:48:36 2026 GMT
Subject: CN=6ab062c5-1f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c2:3b:b8:ce:39:66:29:9a:3b:6e:dd:81:0d:
79:f6:c5:07:4d:75:98:d6:22:a7:97:a9:a5:e7:1e:
c4:9f:28:7b:1d:a3:95:5e:d7:fd:76:dc:9b:82:e9:
21:2b:43:5b:03:39:ae:ee:d7:39:4b:ae:7a:cf:d2:
fb:c4:fe:da:3e:fd:74:84:bd:7c:12:a5:23:7c:b5:
60:3e:02:a2:ba:52:c3:4b:4c:3f:7d:e3:2e:40:42:
d0:8b:4f:fd:93:23:ae:63:d3:c9:25:a5:bb:8f:d9:
b4:9c:9b:80:cb:96:8a:6e:6f:d3:f0:57:77:91:67:
68:03:96:93:c1:37:7b:a3:d3:3c:b4:22:df:d8:3c:
75:53:47:61:52:13:79:32:68:88:68:a7:9b:20:96:
e6:11:ad:4f:75:09:b9:1f:1d:a2:33:f1:ab:d8:f5:
ba:9d:28:87:01:62:06:a3:c2:18:94:dd:43:b9:3b:
22:9f:0f:98:fa:98:f9:d2:1d:fe:a2:bd:af:a2:ce:
4a:9e:08:72:de:82:93:47:9a:fc:2a:6a:5d:bb:8f:
be:e6:b1:a1:30:43:df:98:dc:4d:d6:33:a4:4d:c1:
c3:c3:0f:95:ea:38:56:74:66:8e:ae:88:4b:48:3c:
44:a3:1f:6f:57:d6:43:56:45:5e:59:cd:46:16:dd:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:ED:F5:AF:24:B5:3F:23:6C:40:D3:99:66:61:FB:BF:43:07:B1:BF
X509v3 Authority Key Identifier:
keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:e2:cf:a4:66:65:6e:93:28:79:9b:5a:81:be:87:ac:0b:85:
28:76:1a:8c:13:49:83:e8:69:a5:11:c0:77:ec:16:c3:38:8c:
5b:88:07:47:6f:3a:dc:e5:50:ce:d0:1f:6f:12:ab:cf:76:75:
3d:58:40:f6:94:cb:ba:08:df:25:47:89:f9:1d:28:79:12:2f:
a6:43:ea:72:20:9a:23:53:0b:8c:fd:c6:b2:77:c8:be:e1:e9:
7a:15:08:82:67:1c:48:fb:42:03:23:f7:28:24:15:44:dc:75:
5f:a6:fd:c4:d3:5b:cd:bb:1a:ab:4f:7b:08:50:95:5e:47:1c:
a5:75:fc:80:b8:35:bc:83:35:18:c9:df:fb:90:6b:57:61:a4:
93:c6:24:50:df:49:dc:d7:52:8e:f7:e5:a3:f0:75:43:75:20:
bc:7f:1f:f1:61:6a:96:ef:02:f5:5f:1d:5f:82:52:c0:d5:db:
6b:90:15:5b:de:8f:f9:67:bf:ea:9b:3d:01:2f:c1:9b:be:ed:
26:21:ca:b8:b8:4a:9c:fc:18:82:2e:d0:7a:3b:f3:e3:0c:c5:
eb:8e:ec:d6:46:c4:f6:f0:1f:f7:b9:e1:2b:fc:70:1c:0b:8c:
f4:2c:ad:85:48:c7:d5:24:ec:f2:50:fb:2d:3c:11:02:56:80:
05:50:f6:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ5QkUxMTAvBgNVBAUTKDhBODBFQTg1NjIyQUEwNzAyMUJERjRBQzg0MThCMEQ5
QTUzOUFDRTEwHhcNMjYwOTIwMjI0ODM2WhcNMjYwOTI3MjI0ODM2WjAYMRYwFAYD
VQQDEw02YWIwNjJjNS0xZjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4sI7uM45ZimaO27dgQ159sUHTXWY1iKnl6ml5x7Enyh7HaOVXtf9dtybgukh
K0NbAzmu7tc5S656z9L7xP7aPv10hL18EqUjfLVgPgKiulLDS0w/feMuQELQi0/9
kyOuY9PJJaW7j9m0nJuAy5aKbm/T8Fd3kWdoA5aTwTd7o9M8tCLf2Dx1U0dhUhN5
MmiIaKebIJbmEa1PdQm5Hx2iM/Gr2PW6nSiHAWIGo8IYlN1DuTsinw+Y+pj50h3+
or2vos5Knghy3oKTR5r8Kmpdu4++5rGhMEPfmNxN1jOkTcHDww+V6jhWdGaOrohL
SDxEox9vV9ZDVkVeWc1GFt2ITwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvt9a8k
tT8jbEDTmWZh+79DB7G/MB8GA1UdIwQYMBaAFIqA6oViKqBwIb30rIQYsNmlOazh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCRS9CMDlDM0NFMjEx
N0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9IQWh2ZlNzaEJpdzJhVTVy
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lvRHFoV0lxb0hBaHZmU3NoQml3MmFVNXJPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDlCRS9CMDlDM0NFMjExN0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9I
QWh2ZlNzaEJpdzJhVTVyT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaOLPpGZlbpMoeZtagb6HrAuFKHYajBNJg+hppRHAd+wWwziMW4gHR2863OVQ
ztAfbxKrz3Z1PVhA9pTLugjfJUeJ+R0oeRIvpkPqciCaI1MLjP3GsnfIvuHpehUI
gmccSPtCAyP3KCQVRNx1X6b9xNNbzbsaq097CFCVXkccpXX8gLg1vIM1GMnf+5Br
V2Gkk8YkUN9J3NdSjvflo/B1Q3UgvH8f8WFqlu8C9V8dX4JSwNXba5AVW96P+We/
6ps9AS/Bm77tJiHKuLhKnPwYgi7Qejvz4wzF647s1kbE9vAf97nhK/xwHAuM9Cyt
hUjH1STs8lD7LTwRAlaABVD2OA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:00:43 2026 by rpki-client