
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
File: iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json)
Hash identifier: FLiHw1x1JkAHF7rb8K8YgF206tiYSEdBQq5VSb9CAB0=
Subject key identifier: 0B:36:B8:97:68:50:33:9F:2B:7F:20:AA:6F:CB:08:32:9F:F4:E2:B9
Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Certificate serial: 01ED
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
Manifest number: 01E4
Signing time: Fri 17 Apr 2026 03:09:46 +0000
Manifest this update: Fri 17 Apr 2026 03:09:46 +0000
Manifest next update: Fri 24 Apr 2026 03:09:46 +0000
Files and hashes: 1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: gIF0YJnB2RfX3cz1ZkJFqNaVXg7DxQZivSqjAQFHKHk=)
2: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: 8VCSX3Py1IyN0f9zmOSlchE4nrVyfSkUdTOEL2+Xh+k=)
3: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: m4OYQMEnrmC7k1a1yVmKxzd2QvlWXdsaMA1wS2lcsRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Validity
Not Before: Apr 17 03:09:46 2026 GMT
Not After : Apr 24 03:09:46 2026 GMT
Subject: CN=69e1a47a-54b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:f0:d1:2c:c9:b2:51:35:e9:1f:fb:ed:d2:
ea:90:f3:e3:5c:5d:de:34:d4:5d:60:66:6b:2b:29:
80:d8:da:e0:8b:9d:15:7e:a0:c4:a7:bd:54:6b:89:
a5:b3:1d:35:6c:e5:d5:63:e8:e0:78:00:40:08:ab:
38:ec:a2:db:b9:2e:56:76:db:98:16:08:6a:bb:7c:
4e:c3:65:11:97:7c:c2:ff:cb:b6:08:a6:23:e2:dd:
bd:dc:38:12:78:68:89:f1:aa:ca:89:c8:54:69:4f:
81:5e:29:eb:49:7a:07:a3:b2:21:f4:51:cc:4c:4a:
46:06:39:84:ab:34:b7:9e:09:54:4d:15:51:95:f4:
ab:3c:ac:64:fd:eb:ed:ae:bb:ba:23:7a:43:76:a6:
4e:47:a6:07:c7:86:e1:4c:0b:ea:9d:dd:e3:28:89:
42:4d:72:7b:d2:c6:37:6f:a1:b3:75:14:50:0e:9d:
af:50:4c:ca:be:1f:db:37:f7:46:fc:de:38:e8:44:
6d:4c:76:94:48:15:9f:8c:f0:43:50:f9:2c:28:8c:
29:35:14:e6:34:e4:0e:2f:ab:8d:ab:86:c1:12:82:
c7:40:6a:95:b7:2e:69:02:c0:94:8d:ca:02:13:15:
db:2e:c4:79:a9:10:78:9d:04:6f:c0:1f:fe:fa:6e:
ff:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:36:B8:97:68:50:33:9F:2B:7F:20:AA:6F:CB:08:32:9F:F4:E2:B9
X509v3 Authority Key Identifier:
keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ec:92:2d:0c:84:52:07:12:d5:a4:e1:e9:2c:53:86:ef:82:ec:
d4:e0:1d:5d:5b:85:ef:eb:9f:a4:70:3b:2e:fb:20:13:ee:d9:
f8:ec:5f:86:ce:76:05:2f:2a:65:51:6d:05:5e:00:8b:83:79:
f7:21:6d:ec:05:4a:63:15:84:5f:0c:ec:cb:dc:89:11:a9:28:
90:69:3f:70:8e:3b:a2:0a:88:f7:eb:84:b0:a0:36:ba:24:4e:
e6:b8:7f:b2:1f:36:53:d7:1e:ae:03:4f:04:27:4b:eb:27:7d:
10:18:50:d8:de:08:79:e9:8e:77:cb:4e:85:75:eb:b9:73:08:
5b:3d:ae:0a:3b:1d:d3:4d:25:82:fe:82:76:4c:3b:d2:e6:07:
fd:25:a8:99:08:f8:67:96:4e:20:93:ad:1d:8a:27:e1:78:81:
4f:18:ec:e4:48:6d:8f:92:e6:1b:98:18:ea:8e:d7:2e:ae:e4:
d4:ec:70:a5:91:f7:cc:a4:85:47:8e:6a:5f:21:46:a5:ab:2c:
6d:72:7b:a9:56:60:f3:5b:4b:94:e2:c0:42:29:d1:99:1e:08:
11:c8:c4:0f:95:4a:af:21:63:de:f8:ff:aa:68:6b:df:c0:9d:
ff:60:a0:8e:c2:2d:e7:23:ec:68:d0:6e:b7:d3:d0:e4:cb:90:
d1:37:de:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:23:05 2026 by rpki-client