
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
File: ioDqhWIqoHAhvfSshBiw2aU5rOE.mft (raw, json)
Hash identifier: r7OIyWkgmoQtX8i6lDe7lM7UovLyZSMORhC6lBy/HtI=
Subject key identifier: 91:9F:BE:16:F2:D0:5D:E7:C2:8B:90:01:0E:78:CF:7F:69:97:08:FF
Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
Certificate issuer: /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Certificate serial: 05DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
Manifest number: 05B2
Signing time: Thu 16 Apr 2026 23:06:13 +0000
Manifest this update: Thu 16 Apr 2026 23:06:13 +0000
Manifest next update: Thu 23 Apr 2026 23:06:13 +0000
Files and hashes: 1: ioDqhWIqoHAhvfSshBiw2aU5rOE.crl (hash: PBoFaBql37WgW/HTB2LwazM38snZ+PIej5yQP1D+dws=)
2: 3A549A1EB00211F0A3A86535C4F9AE02.roa (hash: wN2IZ9Tp9dRoIakSTTLA1uLNoPM2YPK4OBU3DnTtTPk=)
3: DA0AD156799211EFADCD2257C4F9AE02.roa (hash: xIAIlJ7v8ECTIXnt1C8XuSoM0aGHLELefgFDc8efrDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1500 (0x5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Validity
Not Before: Apr 16 23:06:13 2026 GMT
Not After : Apr 23 23:06:13 2026 GMT
Subject: CN=69e16b65-feec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:40:24:31:ce:45:18:4c:87:a4:f7:39:28:
79:7d:7a:12:d7:f8:a1:0d:a8:77:b0:38:2e:2b:e1:
c2:cc:15:e2:5f:2c:91:04:65:bc:fd:4a:8f:29:6f:
14:2d:83:e5:b1:17:01:ea:70:d3:e3:c3:b3:f7:be:
e8:78:c5:cc:72:4f:96:2c:e2:01:fb:6f:db:b2:80:
ef:a8:09:0e:0d:3d:2f:d3:a6:f6:58:13:fb:1b:13:
a3:12:ac:c6:ae:1d:25:42:ae:5a:63:8f:5c:b4:75:
9e:48:c0:1d:0d:4e:ea:b8:7d:e7:bb:6a:6b:92:6c:
56:02:c0:62:81:43:35:0f:6b:f8:a8:b4:a9:0f:df:
69:58:20:cc:14:95:00:dd:ab:0b:7d:33:a3:a6:e8:
d0:62:c8:7f:74:7d:5a:d3:91:01:68:1d:59:48:f5:
59:80:f6:70:47:a8:1f:16:59:ac:8e:83:02:ea:29:
97:ca:44:c1:b3:d4:c6:69:48:89:36:d7:60:07:5a:
f5:b1:6f:2c:04:bd:97:0c:d5:c6:45:09:ea:2f:07:
a8:93:5f:ef:6b:4c:5b:4c:39:14:a5:d8:d6:1c:b5:
63:3f:85:83:4f:21:70:18:f6:73:b9:35:55:cc:d5:
89:32:3c:f2:78:2c:37:24:60:28:c2:e8:a2:a6:58:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9F:BE:16:F2:D0:5D:E7:C2:8B:90:01:0E:78:CF:7F:69:97:08:FF
X509v3 Authority Key Identifier:
keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:60:5a:b8:8d:10:12:04:29:ec:de:11:ba:6e:15:60:62:96:
3f:47:6b:59:d4:7f:75:d4:a7:75:b2:fd:7c:a3:80:d3:83:f6:
a0:d5:d6:07:53:63:c2:92:07:aa:3c:d4:e8:30:f9:a0:9d:4b:
61:fc:b4:23:ad:cb:2b:8a:ab:2e:b0:34:a9:0f:9e:a7:e1:45:
73:d2:df:19:88:e8:a1:a1:88:7f:6b:b5:58:79:77:6b:a2:d5:
01:d5:21:4f:d1:ef:13:74:84:48:4e:dd:64:a8:bc:d9:9d:53:
e9:4d:c5:3d:6d:f4:a0:b7:93:55:4c:2a:75:e5:d1:2f:9d:b2:
f5:aa:31:1d:26:4b:2a:71:ac:f1:e2:a5:79:27:2b:e6:67:83:
6f:b3:28:4c:dd:a1:80:76:65:b8:50:02:1a:60:e2:a0:f4:f8:
76:97:f5:9e:94:73:d5:d0:34:44:73:2c:27:dd:95:9b:33:21:
65:e8:0c:e2:2f:eb:1b:7b:9f:0e:20:fd:57:28:f5:6a:4c:57:
06:6a:70:b9:02:f7:9a:ed:9f:eb:9d:4b:28:bd:56:e2:24:94:
9c:bf:bf:76:41:05:3c:db:55:78:63:a9:c1:e2:f2:b9:66:e3:
13:cc:e3:69:c3:80:48:bd:5c:a9:be:65:1b:3a:a1:10:03:28:
73:89:73:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:52:56 2026 by rpki-client