
$ rpki-client -vvf rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
File: IpO9TF5PmillNYywGN8-Tu5N8c8.mft (raw, json)
Hash identifier: T4gbdKDGOyQSCNBtPySiGv/ck7JxwRtRzFiyQvXE3aA=
Subject key identifier: 3F:B3:6C:18:18:46:E4:3D:59:41:FF:66:B3:9D:8B:A0:7F:3D:1E:43
Authority key identifier: 22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF
Certificate issuer: /CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
Certificate serial: 30CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
Manifest number: 30A3
Signing time: Tue 28 Jul 2026 15:32:24 +0000
Manifest this update: Tue 28 Jul 2026 15:32:24 +0000
Manifest next update: Tue 04 Aug 2026 15:32:24 +0000
Files and hashes: 1: IpO9TF5PmillNYywGN8-Tu5N8c8.crl (hash: BcdHD9XTRQb33he8sZUFoX/Lxi5va0LQIpBHsYYlU3w=)
2: 149AB4BE7CE911EEB9A02D83C4F9AE02.roa (hash: +Qp6vsqqY646UGgo2jMWEe+cx9g7miXROpVKh+lI0/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl
rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12491 (0x30cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915177C, serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
Validity
Not Before: Jul 28 15:32:24 2026 GMT
Not After : Aug 4 15:32:24 2026 GMT
Subject: CN=6a68cb88-ed7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:59:2e:ff:93:e8:54:f8:a0:c1:e6:44:b4:
9f:1c:43:91:53:32:f1:1c:9e:ef:23:77:a1:c5:1a:
ec:71:d8:bf:0b:d7:6c:75:41:64:1f:25:b2:59:26:
27:37:94:32:6c:95:c8:75:cc:67:65:b4:f2:36:7c:
08:2d:ba:a7:45:e4:dc:3a:7e:2b:5a:1f:a7:f2:7d:
58:8d:c9:f6:8b:ef:ae:de:63:55:1d:02:e2:91:64:
7d:5a:29:48:58:37:dc:bb:bc:90:1e:04:ed:cb:21:
0e:49:60:2a:2f:98:05:d4:37:96:8b:6e:53:40:e6:
4b:d6:49:51:ee:b0:fc:3b:65:13:ad:67:93:6f:fb:
db:08:75:80:66:0f:fd:bc:8d:19:71:b2:7b:03:fa:
74:68:65:7e:3b:b4:5b:ee:55:c0:5a:bc:65:f7:11:
db:48:99:89:f8:f7:cc:8e:d4:a9:28:ba:ef:f6:06:
42:05:98:45:8c:e2:e8:9e:9a:3f:78:f3:f6:d1:6d:
ad:e9:22:5a:6b:60:d2:4b:c3:06:42:d3:ad:16:13:
0c:78:1a:1a:77:e3:7b:71:77:60:d7:b2:50:07:f4:
35:18:6d:29:22:16:db:fe:8f:ee:9b:03:5d:2f:e4:
f6:6f:c8:3d:5d:35:05:d5:e0:f9:85:44:41:b6:99:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B3:6C:18:18:46:E4:3D:59:41:FF:66:B3:9D:8B:A0:7F:3D:1E:43
X509v3 Authority Key Identifier:
keyid:22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:5e:7e:63:8b:ff:bb:95:95:c5:16:08:ea:1e:38:14:a0:15:
81:7d:ad:fd:43:b2:ed:9f:5c:9a:c3:25:db:b0:34:f2:0d:bc:
02:88:8c:2f:2c:fe:e0:d1:4b:e3:8e:32:9e:c7:c2:08:e9:54:
08:58:b0:df:91:f8:1b:e8:01:81:6e:01:78:8b:da:29:67:a9:
53:94:fe:46:b0:51:39:de:15:e4:41:b1:80:a6:58:9b:b8:6f:
18:84:b0:fc:9b:4b:56:10:e5:13:b3:eb:99:f6:16:eb:62:14:
56:8a:56:df:34:9d:c5:63:a7:a4:e3:d7:a6:2b:94:f0:b2:ce:
58:79:ab:91:dc:51:c9:97:10:79:ce:a1:42:a8:cf:c1:db:e5:
d8:39:79:f6:b7:1c:c5:80:74:b6:b4:47:03:0b:e2:df:94:c2:
20:05:81:44:2e:76:7f:37:bc:6b:7f:61:31:8a:b6:b1:d0:1e:
53:e2:9b:23:46:db:6f:13:7f:4e:ab:4f:04:40:39:c6:e0:2b:
79:d8:55:a6:ce:76:db:c4:5d:02:90:80:c2:44:bd:c8:74:cc:
d8:fa:18:09:65:18:b6:dd:a7:09:d5:af:9b:8f:41:65:a2:a2:
f8:8d:60:67:ae:29:bc:d5:84:bb:7d:7b:df:e1:b6:8f:43:e7:
a1:26:86:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:23:11 2026 by rpki-client