
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json)
Hash identifier: SRI1epAxwnVTI9EKbNKqmoRAvJfeOUvpXCDO5jaD4FU=
Subject key identifier: 58:D5:45:CF:B8:B3:66:3D:D6:B1:2E:E1:A5:04:02:05:28:95:82:43
Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31
Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31
Certificate serial: 355F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
Manifest number: 355F
Signing time: Tue 28 Jul 2026 14:53:53 +0000
Manifest this update: Tue 28 Jul 2026 14:53:52 +0000
Manifest next update: Tue 04 Aug 2026 14:53:52 +0000
Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: T9csRM21Xto42fe70R2nHQxTbHBGT4zxDdOROEpn5tE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl
rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13663 (0x355f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31
Validity
Not Before: Jul 28 14:53:52 2026 GMT
Not After : Aug 4 14:53:52 2026 GMT
Subject: CN=6a68c281-a1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:ef:e9:47:38:d1:b7:d7:1d:15:08:4c:fe:
e1:55:c8:7a:f0:dc:16:62:69:54:2e:a2:b5:a2:31:
12:1b:04:11:43:78:cf:12:61:3e:d4:2d:e9:92:4f:
03:cc:b4:18:64:ea:9c:28:4c:9c:3d:4e:3a:c3:6a:
d4:d9:fa:5e:52:65:e7:2d:ba:09:db:75:c6:fc:59:
9b:79:c4:e2:ce:d9:6b:66:7e:c3:c1:2f:6f:ad:6c:
10:0d:b2:c0:ea:ae:48:6a:db:14:33:05:2a:5b:05:
ce:30:0f:5d:01:76:16:c1:24:a1:85:71:4a:4e:9e:
96:25:15:ce:49:01:33:52:42:92:0e:12:c2:bc:85:
bc:af:f8:29:8c:7e:f6:de:9c:0e:58:cf:19:a9:0e:
01:23:86:9a:de:11:88:1c:62:86:0f:d8:2d:a9:fc:
61:75:a2:63:2d:cd:f8:6c:f6:dc:90:85:3f:5b:e5:
10:54:27:06:f1:24:df:83:23:b4:c4:85:0f:93:5b:
16:ab:b2:98:fb:9f:47:ed:62:cb:59:4e:31:3c:a5:
18:08:fc:6a:35:aa:5b:3a:00:b0:05:98:c4:20:e8:
d9:70:55:0a:93:d6:72:1b:fa:df:03:38:9a:03:fe:
5b:2d:da:de:c7:cb:50:a0:bb:fc:72:51:dd:53:18:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D5:45:CF:B8:B3:66:3D:D6:B1:2E:E1:A5:04:02:05:28:95:82:43
X509v3 Authority Key Identifier:
keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:ce:4b:57:42:8a:f0:83:f8:bc:c1:bb:4a:b3:e5:c2:51:a1:
85:0f:d2:30:b6:1d:63:e4:66:64:e3:67:db:a2:cb:d8:cb:36:
57:b1:04:54:f1:cb:b6:04:5a:66:89:34:8c:7e:25:4a:aa:7f:
ef:c3:48:e4:c0:6f:ba:e4:c3:cb:a7:b8:93:17:8f:ef:0e:ab:
c6:88:62:8e:d7:f5:ad:5b:64:09:d4:77:10:a3:2a:22:2e:6a:
4c:1e:29:54:bd:71:6b:3a:22:ab:40:25:a1:96:25:cc:8c:68:
4f:9a:01:97:8e:e8:3f:b3:a5:2b:dc:f7:f6:96:90:0a:3f:06:
ba:c8:51:27:ea:94:61:95:8d:61:64:1a:c9:d7:1e:f9:5c:d4:
48:3e:53:25:17:c4:e2:7e:f5:45:f7:dc:19:93:c6:99:59:74:
bc:71:0a:4b:b2:50:b4:f8:5d:05:1d:d4:38:cd:02:b3:75:86:
bb:b1:fa:d6:29:4f:17:1b:6e:6b:3f:29:1e:a0:75:97:00:05:
29:dd:70:bd:8c:dd:d8:e4:95:5a:a2:46:9a:92:01:93:76:f0:
77:7c:d7:a2:e0:12:71:7c:17:e0:32:cd:f0:b9:de:c3:47:be:
ac:c7:3a:ca:25:14:d1:f6:9f:38:4e:54:97:fd:49:b9:e8:bd:
22:0a:c2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:13 2026 by rpki-client