
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
File: iH4RB6g_EXT_fj54CIjbVyO3kls.mft (raw, json)
Hash identifier: vGZ84XCbwgIDoabH3B5C2lsvMVQ7Ob1wshkfGBL/ikY=
Subject key identifier: 2D:2E:63:82:B7:DB:EF:5B:E0:8B:A5:24:BF:AC:04:87:37:36:3A:68
Authority key identifier: 88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B
Certificate issuer: /CN=A9155806/serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B
Certificate serial: 0194
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
Manifest number: 0187
Signing time: Wed 23 Sep 2026 04:28:18 +0000
Manifest this update: Wed 23 Sep 2026 04:28:17 +0000
Manifest next update: Wed 30 Sep 2026 04:28:17 +0000
Files and hashes: 1: iH4RB6g_EXT_fj54CIjbVyO3kls.crl (hash: xk+MelzZk3dbc2gyWU5XXeO20IQwPzslOR5Yh2kBmhg=)
2: 10435EE8740511EF93658977C4F9AE02.roa (hash: 6+dRrxPmWRCMlxCcSYhpVStcDeLZfIKjMMz2mDaOI+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl
rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155806, serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B
Validity
Not Before: Sep 23 04:28:17 2026 GMT
Not After : Sep 30 04:28:17 2026 GMT
Subject: CN=6ab35561-10ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:eb:e4:cb:e5:d3:1f:e6:27:bb:eb:df:c8:
30:b6:8c:d0:6e:29:74:d0:d6:f8:9b:de:c6:1b:df:
84:85:af:66:4b:c9:ed:68:38:77:cf:90:60:4d:23:
34:d3:ad:58:96:f2:4a:c4:72:bb:95:4f:d8:eb:7c:
a6:eb:5a:40:e9:07:80:9d:56:5d:0e:25:51:0f:4c:
17:e5:1b:cb:51:3b:ad:c5:99:a8:38:dd:f5:65:54:
94:30:52:9a:31:74:c3:43:c2:54:27:17:27:0a:ff:
1a:92:a1:5b:48:b7:33:2a:a5:39:ac:10:08:64:b6:
cb:82:81:a0:b2:93:75:6e:11:38:1e:bb:d0:e1:53:
b8:e6:03:50:70:5f:bc:9e:7e:7b:04:c8:71:0a:c0:
db:58:60:b3:06:71:39:84:64:f4:2c:e7:67:23:6f:
67:20:4a:62:7b:de:40:ea:40:eb:f6:8a:d9:2a:d1:
bf:b7:74:21:5d:c8:24:1d:df:c8:17:a6:b7:f7:1b:
46:f2:76:c5:1e:4e:3c:02:68:e9:5a:94:0f:a2:a6:
04:06:40:7c:e1:81:6a:37:b4:45:d1:ba:eb:65:46:
d4:fa:53:1b:69:c2:af:72:e3:71:d3:38:86:1d:47:
d3:ed:2e:fe:dc:a9:3b:c5:fa:d1:83:80:a0:e2:2f:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2E:63:82:B7:DB:EF:5B:E0:8B:A5:24:BF:AC:04:87:37:36:3A:68
X509v3 Authority Key Identifier:
keyid:88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:7a:04:b8:16:bb:6b:3c:ac:b9:58:f5:b5:da:ce:be:fe:4b:
de:d0:b1:09:cc:e3:b4:d4:0b:45:04:66:fd:0a:55:94:e8:39:
92:06:d1:88:1d:25:88:b4:f8:40:d1:10:c0:24:08:13:af:6a:
17:fa:ee:3f:c7:45:b9:66:b3:36:c7:ea:50:74:a3:f6:97:af:
14:0d:b2:30:94:51:3a:da:82:d2:e7:60:aa:08:9a:72:0f:57:
17:67:1c:f5:e5:81:ff:94:64:ef:a7:62:b9:c4:6b:22:26:9f:
44:e3:d5:20:75:f7:69:80:20:6c:d1:ec:ac:3e:b5:11:01:a4:
f5:db:1a:df:ad:40:1a:81:17:e8:8b:71:04:ba:4b:e5:0c:a3:
36:16:fe:e4:37:75:bf:b7:e5:cd:5d:7f:be:84:80:1c:ff:5a:
f9:dd:66:0c:88:c2:06:e4:c7:a0:41:bb:25:6b:8e:df:3a:72:
e8:b1:f4:57:8e:5b:dc:be:d8:81:1c:f4:03:3b:19:cf:7e:88:
39:62:42:c1:9e:67:3e:88:96:18:30:cb:c6:6d:70:b3:2b:df:
70:32:a1:ef:02:c6:fd:82:5b:bc:a5:29:06:1f:af:d5:06:a8:
7e:e3:15:77:94:b7:12:36:88:eb:5a:66:37:76:9b:45:4c:ba:
9f:c7:03:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:36:18 2026 by rpki-client