
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
File: iH4RB6g_EXT_fj54CIjbVyO3kls.mft (raw, json)
Hash identifier: PzvuRM9V6g+wbGUoAXARp/o4wG5/2FW0KtShGx1yCqA=
Subject key identifier: AF:B9:7C:07:1B:E8:E9:63:13:50:73:4E:2E:45:87:66:A0:02:33:CA
Authority key identifier: 88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B
Certificate issuer: /CN=A9155806/serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
Manifest number: 0153
Signing time: Sat 13 Jun 2026 05:12:49 +0000
Manifest this update: Sat 13 Jun 2026 05:12:49 +0000
Manifest next update: Sat 20 Jun 2026 05:12:49 +0000
Files and hashes: 1: iH4RB6g_EXT_fj54CIjbVyO3kls.crl (hash: L1zq6JVoshd5jX07ONHSiDRJDdgXA9G1Y8kJmGv4uQY=)
2: 10435EE8740511EF93658977C4F9AE02.roa (hash: 6+dRrxPmWRCMlxCcSYhpVStcDeLZfIKjMMz2mDaOI+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl
rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155806, serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B
Validity
Not Before: Jun 13 05:12:49 2026 GMT
Not After : Jun 20 05:12:49 2026 GMT
Subject: CN=6a2ce6d1-288f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0c:e9:4d:f6:08:34:cd:c0:07:26:7e:71:8f:
8e:76:4d:93:a0:44:c0:d1:46:c3:a8:c9:7d:0a:78:
3c:7c:c4:5a:3c:49:52:64:07:01:09:3c:13:3d:5e:
35:6f:c1:8a:90:c0:76:0d:6d:46:dd:a3:11:e6:56:
fd:9a:1f:52:e0:98:69:34:84:92:d8:c0:c5:99:db:
78:5f:6c:cf:c5:1a:43:ef:c7:98:65:d9:39:10:53:
bc:a6:46:8e:82:24:7c:75:d7:fb:bb:83:7e:66:4d:
07:e3:ef:c1:60:a3:99:15:45:21:97:e5:b6:61:63:
a2:7c:c2:2c:c2:40:6e:86:33:d1:9a:39:a7:9e:a2:
f3:36:02:e8:e7:ff:89:d9:fc:d1:3c:58:48:30:d6:
6b:70:a6:2e:15:d0:1a:9f:6e:b4:7c:00:5c:9f:f2:
34:86:d8:c0:5a:f9:eb:43:d6:cf:9c:66:01:42:a9:
9e:ea:71:f4:0f:e4:ab:ce:37:dc:06:71:8d:7f:71:
f3:76:f6:eb:98:fc:a4:13:94:30:cf:56:2f:bf:b9:
b8:a1:5b:7b:3a:56:c6:45:16:37:49:2c:8c:85:ca:
44:65:31:4e:b0:23:6d:62:02:fd:c7:b4:49:6f:4f:
f5:57:dd:1d:50:37:8a:da:6e:4d:ec:eb:2c:d5:14:
a3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B9:7C:07:1B:E8:E9:63:13:50:73:4E:2E:45:87:66:A0:02:33:CA
X509v3 Authority Key Identifier:
keyid:88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:2f:8d:25:57:e6:25:17:31:97:91:55:4d:11:cd:52:15:ee:
82:77:98:1d:6f:7f:a7:fa:1f:db:a1:d2:1f:86:a3:5b:ac:61:
91:5f:f5:b3:4c:38:d7:3f:d1:b3:69:9f:e9:7f:de:01:36:28:
a0:be:7e:27:bb:37:5d:e0:a5:6a:99:0b:94:e1:20:46:b5:b9:
c7:ac:08:27:c9:4b:a0:15:a5:4d:df:d0:79:9f:3a:5d:01:98:
cd:68:01:f3:90:6a:63:96:fc:c6:6e:00:46:85:aa:5e:4f:24:
89:81:d9:63:60:03:ab:dd:4f:d1:30:95:76:24:1e:be:61:3b:
6e:13:32:93:fc:dd:06:ab:76:50:6d:c0:18:83:75:6d:fe:64:
01:8a:7e:8e:a2:73:6b:1b:9f:28:98:ee:72:02:ca:21:88:7f:
51:0f:f4:5e:1c:11:1d:9b:bf:44:c8:c6:f3:d4:d7:26:c8:6d:
02:87:f0:ca:4d:04:ba:ff:14:2c:2b:1b:32:09:ae:dc:c8:63:
f7:a9:34:7c:46:be:30:a7:35:aa:95:d4:b0:61:71:d6:13:de:
25:a7:a6:f4:94:c4:82:c4:05:38:35:93:82:9c:65:92:dc:88:
e9:91:e7:94:5b:ab:7b:57:35:66:1f:a5:1a:0f:67:50:d5:2f:
80:ac:7c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:17:46 2026 by rpki-client