
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json)
Hash identifier: ilfcVOemQo0wd8FNhfJoig7/SGVNVEQTfs4pOO5LBwE=
Subject key identifier: E8:D0:63:41:79:CD:32:E5:4C:E0:C7:88:F0:D3:88:46:92:8C:5B:EC
Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
Manifest number: 0141
Signing time: Sat 13 Jun 2026 05:24:52 +0000
Manifest this update: Sat 13 Jun 2026 05:24:52 +0000
Manifest next update: Sat 20 Jun 2026 05:24:52 +0000
Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: PCBXrtGPAnyaQtSE+pHsZjrW5lNORDCYQveG9re9crY=)
2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: vQxrD0Wy1epRcIQqGanMT2UEnCUMa40m33Ixwa6rxNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Validity
Not Before: Jun 13 05:24:52 2026 GMT
Not After : Jun 20 05:24:52 2026 GMT
Subject: CN=6a2ce9a4-3388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ed:72:48:3c:7a:90:a9:b7:cb:8a:0c:d7:81:
c5:76:06:97:df:f1:0d:07:0e:48:fa:08:f2:09:3a:
40:f0:db:7f:f5:69:c4:13:73:83:85:59:1a:9f:5c:
02:08:f8:13:a3:42:1e:20:23:70:44:8e:6e:31:61:
ae:24:fd:66:20:58:e7:73:38:3b:61:76:be:10:d4:
25:89:e8:02:2c:5a:7b:34:96:f3:86:24:50:e6:6b:
a2:32:76:92:a2:6e:21:5c:82:48:7d:f2:2e:5b:0e:
63:e8:3f:92:04:2e:b0:5b:54:62:de:ae:80:3c:26:
c2:d4:fd:5a:cf:7c:40:0f:6e:12:8d:e6:e5:2a:25:
e5:cf:1c:cc:10:e7:32:4f:c7:2a:52:c7:ba:43:8f:
f3:33:3f:e1:0a:63:c0:a3:d9:24:b6:e7:86:ed:2e:
86:e2:3f:a5:17:14:48:f4:2f:bf:d7:14:f6:01:24:
e9:e8:40:11:ce:6e:49:ac:fc:48:38:d1:58:9a:a8:
88:8f:96:5f:f3:fc:99:d2:47:8b:19:1c:c1:02:1c:
0b:05:d7:b9:de:49:90:44:58:2e:07:84:ce:95:77:
1d:f9:33:47:48:02:54:58:1f:75:48:a9:05:b8:ee:
f1:eb:23:31:73:36:7b:8d:dd:0c:ef:fc:82:e2:d7:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D0:63:41:79:CD:32:E5:4C:E0:C7:88:F0:D3:88:46:92:8C:5B:EC
X509v3 Authority Key Identifier:
keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:ee:27:18:54:ce:15:74:96:c0:19:28:f9:2f:2d:1b:31:af:
cb:a6:ee:eb:ae:b2:e1:7b:a8:93:a0:4d:a8:64:1a:44:43:ed:
63:59:cf:23:e4:cf:cc:99:6f:64:bf:16:31:37:ca:55:ba:17:
b2:c3:03:33:3c:b9:d5:66:21:7a:3a:84:e7:0d:6b:4b:2c:19:
a4:9f:5e:e0:37:f5:de:08:ab:ef:e4:b6:c6:56:1c:c9:0c:26:
d9:80:fc:5f:ba:2d:18:a6:de:38:8a:c8:cc:56:0f:5f:2c:cc:
32:74:c5:7e:56:00:07:76:65:82:1e:dc:1a:9a:37:40:49:d6:
21:22:42:15:dc:0d:35:a9:35:95:8e:8d:f3:30:78:e1:d6:2a:
c0:ce:13:a3:dd:c3:7f:16:c1:71:da:0a:d2:a2:9f:a2:04:81:
f4:80:8c:07:30:5d:51:35:cf:72:3e:b4:43:00:8b:3b:6d:54:
93:8f:52:46:41:ee:8b:bd:b4:7e:ba:6e:69:b9:6f:fe:18:fb:
69:e5:2d:5d:2b:c1:31:5e:44:86:49:d5:99:34:3d:ff:84:1d:
90:cc:72:1d:73:77:64:95:ef:8c:6b:d2:0d:6d:87:c8:29:57:
13:12:3e:0d:fc:c4:50:0e:93:8d:03:44:41:62:6a:6e:ee:46:
e5:92:85:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:13:10 2026 by rpki-client