
$ rpki-client -vvf rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft
File: -ibzSoM5sd823JwRkSBXw6WD9nM.mft (raw, json)
Hash identifier: iZC0bUpm0N7ZS9xiIytTVrNmD9B7p9c/oD1WeTVXioA=
Subject key identifier: C3:2C:D5:46:2A:77:95:C9:05:44:A3:14:6A:C5:3B:C4:97:19:85:72
Authority key identifier: FA:26:F3:4A:83:39:B1:DF:36:DC:9C:11:91:20:57:C3:A5:83:F6:73
Certificate issuer: /CN=A914711C/serialNumber=FA26F34A8339B1DF36DC9C11912057C3A583F673
Certificate serial: 0411
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft
Manifest number: 040B
Signing time: Sat 13 Jun 2026 00:26:24 +0000
Manifest this update: Sat 13 Jun 2026 00:26:23 +0000
Manifest next update: Sat 20 Jun 2026 00:26:23 +0000
Files and hashes: 1: -ibzSoM5sd823JwRkSBXw6WD9nM.crl (hash: 70MUyKpN6Y9aVbJuVA/hA176v1H9znrlHq+kv76P1Yc=)
2: 1AF42E76BBAC11EC8A07FE72C4F9AE02.roa (hash: 67LlS2Q1Ll84dJ+nyUpzM3AprVCuS78sQpZWBwZl53s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.crl
rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1041 (0x411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914711C, serialNumber=FA26F34A8339B1DF36DC9C11912057C3A583F673
Validity
Not Before: Jun 13 00:26:23 2026 GMT
Not After : Jun 20 00:26:23 2026 GMT
Subject: CN=6a2ca3b0-c9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:95:2f:38:da:a7:97:85:ac:85:86:9a:3d:
4b:7e:38:70:d9:ea:b6:b2:14:d8:d7:30:e5:55:c1:
88:eb:75:b5:0b:70:6e:ff:8b:1a:bf:c1:b2:88:d9:
f2:b2:91:8c:c0:ab:ff:eb:bd:56:bc:51:7e:34:49:
96:da:b5:aa:ec:3b:57:9d:6b:60:11:af:cf:ec:8a:
a4:a2:ec:7e:dc:d4:fb:39:18:e5:9e:21:8d:34:33:
34:55:39:3b:4b:a9:a7:e1:d3:94:0b:5d:a5:3c:63:
27:b3:9f:16:da:66:3d:ea:eb:0f:f0:66:f7:b7:9e:
43:83:07:c1:69:6e:5c:32:12:23:aa:86:b2:f8:fd:
cc:31:cc:39:6c:53:f2:80:89:71:78:8a:80:92:7d:
bd:ff:8b:47:8b:04:d3:97:e3:ef:d5:e9:32:ae:25:
a2:8c:a6:61:7a:70:e2:4d:c7:e0:31:c3:40:af:13:
70:bf:38:8d:ce:23:ba:4e:e7:53:8d:32:ea:36:c4:
b2:a9:3a:41:e1:6d:4c:36:6d:f9:a9:fc:7d:78:c3:
84:5b:28:70:60:42:66:fc:21:bf:ec:0d:25:4f:2a:
90:bf:49:4a:13:d5:0a:78:c2:c0:1d:c5:0f:7e:b9:
62:58:1b:47:70:ab:8d:3f:ce:db:a2:f6:54:d5:90:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2C:D5:46:2A:77:95:C9:05:44:A3:14:6A:C5:3B:C4:97:19:85:72
X509v3 Authority Key Identifier:
keyid:FA:26:F3:4A:83:39:B1:DF:36:DC:9C:11:91:20:57:C3:A5:83:F6:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:41:e0:3c:36:66:ad:05:ed:c3:4d:14:ed:f9:87:71:c5:7e:
8f:a5:47:35:e1:38:69:6a:c1:7d:6d:30:7a:6b:3c:0e:1d:f7:
49:b8:0c:b3:7d:32:7a:17:79:00:1f:a7:fd:6b:a6:f8:46:38:
fa:fc:04:04:f5:3d:b7:71:25:c3:71:28:ed:47:c9:42:67:a8:
57:10:bc:74:77:fa:10:f2:a7:c4:ea:78:c8:80:88:f0:3c:af:
c3:8b:7e:8d:02:be:61:da:05:83:5a:f6:a6:66:c6:74:95:19:
41:57:a8:b3:2e:ff:18:84:8c:57:d0:01:37:e6:ce:54:6e:13:
f2:d5:53:12:7a:39:20:19:f4:10:b4:c6:45:43:93:40:bd:cc:
42:4b:72:f7:f4:6c:ab:55:58:b9:9a:df:ae:f9:6a:bb:0c:69:
fc:4a:b2:aa:4c:dd:e2:66:33:18:9c:5f:bf:40:3d:47:7a:78:
83:2a:99:44:e0:5e:aa:3e:66:41:8f:b9:d3:91:7d:57:72:f8:
b0:42:b8:86:c4:a4:30:89:de:8c:9e:5d:ec:0b:b8:72:fe:cc:
0e:59:6e:10:be:11:d5:2d:d1:fb:46:62:cf:34:0b:68:2e:2a:
5f:d9:ca:76:64:7d:09:9b:09:a1:d9:4e:d4:e1:89:03:08:4e:
2f:90:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:23 2026 by rpki-client