
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
File: IjvkLOOp2KZWIHnlEHR8D_xFImM.mft (raw, json)
Hash identifier: D/EaQfie5Gyo5mTTCwJw2Oz1zVscyUDse79GddNLuos=
Subject key identifier: 8A:10:B7:5C:54:50:E8:FF:4F:43:4C:69:62:E0:16:A7:7C:3C:2F:99
Authority key identifier: 22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63
Certificate issuer: /CN=A9156BBA/serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
Manifest number: 70
Signing time: Sat 19 Sep 2026 07:57:58 +0000
Manifest this update: Sat 19 Sep 2026 07:57:58 +0000
Manifest next update: Sat 26 Sep 2026 07:57:58 +0000
Files and hashes: 1: IjvkLOOp2KZWIHnlEHR8D_xFImM.crl (hash: Q16Q3MVqjNt6BtT/vC9PjW93e62mqmyJNAyFy7UqK6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl
rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156BBA, serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263
Validity
Not Before: Sep 19 07:57:58 2026 GMT
Not After : Sep 26 07:57:58 2026 GMT
Subject: CN=6aae4086-7bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:d5:71:25:71:86:16:9c:d3:6d:54:b4:b6:
f8:f9:a1:7e:5a:34:38:5e:59:86:da:7e:44:a2:79:
85:cf:c6:be:87:1e:dd:bb:a5:72:8d:33:28:0d:01:
88:67:c0:76:0a:9a:33:f7:c1:9b:1b:e0:9b:e6:5e:
34:db:25:21:2b:62:7b:cf:7e:c5:90:29:2a:c4:22:
4c:16:48:b4:e9:39:a2:66:87:25:92:3e:d6:05:0a:
a5:69:cd:9a:40:25:7b:f6:b4:01:01:fc:bb:24:6c:
ce:21:5b:b6:9c:18:03:e5:22:95:f0:0d:14:4c:64:
92:f4:9a:cf:7c:70:c9:8d:92:be:58:7e:6b:5e:4e:
b6:05:d0:50:c1:73:f9:75:10:b4:36:83:e0:05:88:
9f:89:00:2e:66:9b:d2:7d:a3:de:d1:d3:83:8f:10:
35:d9:80:a9:99:a9:d1:e8:28:9c:29:42:f7:da:f4:
81:07:9d:2a:ea:cd:06:c5:53:53:f6:cb:23:b8:3a:
b6:29:91:54:e0:f7:7d:91:74:76:d5:b5:e7:a9:05:
9d:44:19:57:14:57:2b:2f:dc:9b:e4:3c:f1:01:bd:
23:2f:47:10:e9:eb:e2:07:6b:37:e8:21:06:4a:74:
9b:aa:b0:80:3e:cc:e8:dc:b8:48:42:40:c2:5f:01:
30:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:10:B7:5C:54:50:E8:FF:4F:43:4C:69:62:E0:16:A7:7C:3C:2F:99
X509v3 Authority Key Identifier:
keyid:22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:46:2b:fb:e2:1d:d4:a1:6a:08:3a:17:65:3f:b2:c7:77:f8:
f6:ed:39:ef:c3:f8:a9:d9:21:75:fe:f4:fc:9e:4a:6b:51:72:
56:cc:bc:db:be:63:cd:ed:b0:50:ca:e1:20:20:a2:ba:29:28:
8f:49:33:22:39:cb:c0:bb:8c:a1:65:b2:af:2d:a6:a1:d4:1e:
fe:3a:2a:64:fd:d7:67:06:94:21:aa:53:62:1d:d2:ef:f4:43:
00:12:ef:76:e8:e7:b8:04:34:20:9a:00:58:7c:91:2e:2e:c7:
db:cf:83:6b:d2:d1:9e:b5:ff:52:40:fd:91:b9:5e:70:9f:ee:
fa:02:8e:d3:ea:20:b2:f2:75:71:8b:5f:22:ef:e9:a2:69:0e:
af:65:da:25:5f:4c:85:ea:99:c5:d9:10:93:dc:21:52:c9:74:
ef:20:b3:1e:b0:2e:54:9d:f7:1f:ef:fb:93:08:0c:4c:53:79:
81:3a:01:85:55:50:40:2f:cf:dd:9f:d3:d3:86:2f:06:34:f4:
fc:1c:64:b9:9b:42:8f:2d:1e:b4:02:ab:37:68:ad:98:0d:9d:
cc:94:11:93:8a:7e:bc:5f:d2:ec:a7:8a:45:2c:0c:cf:14:d9:
6e:db:c9:e3:0c:bd:f4:31:f2:26:db:a1:0f:17:53:d4:e7:04:
7b:90:d6:27
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NkJCQTExMC8GA1UEBRMoMjIzQkU0MkNFM0E5RDhBNjU2MjA3OUU1MTA3NDdDMEZG
QzQ1MjI2MzAeFw0yNjA5MTkwNzU3NThaFw0yNjA5MjYwNzU3NThaMBgxFjAUBgNV
BAMTDTZhYWU0MDg2LTdiZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDW4dVxJXGGFpzTbVS0tvj5oX5aNDheWYbafkSieYXPxr6HHt27pXKNMygNAYhn
wHYKmjP3wZsb4JvmXjTbJSErYnvPfsWQKSrEIkwWSLTpOaJmhyWSPtYFCqVpzZpA
JXv2tAEB/LskbM4hW7acGAPlIpXwDRRMZJL0ms98cMmNkr5YfmteTrYF0FDBc/l1
ELQ2g+AFiJ+JAC5mm9J9o97R04OPEDXZgKmZqdHoKJwpQvfa9IEHnSrqzQbFU1P2
yyO4OrYpkVTg932RdHbVteepBZ1EGVcUVysv3JvkPPEBvSMvRxDp6+IHazfoIQZK
dJuqsIA+zOjcuEhCQMJfATA7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUihC3XFRQ
6P9PQ0xpYuAWp3w8L5kwHwYDVR0jBBgwFoAUIjvkLOOp2KZWIHnlEHR8D/xFImMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QkJBL0EyQ0E0M0RDMEQy
MjExRjFCOUI3MUU1OTA4M0Q4QzY3L0lqdmtMT09wMktaV0lIbmxFSFI4RF94Rklt
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSWp2a0xPT3AyS1pXSUhubEVIUjhEX3hGSW1NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2
QkJBL0EyQ0E0M0RDMEQyMjExRjFCOUI3MUU1OTA4M0Q4QzY3L0lqdmtMT09wMkta
V0lIbmxFSFI4RF94RkltTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCWRiv74h3UoWoIOhdlP7LHd/j27Tnvw/ip2SF1/vT8nkprUXJWzLzbvmPN7bBQ
yuEgIKK6KSiPSTMiOcvAu4yhZbKvLaah1B7+Oipk/ddnBpQhqlNiHdLv9EMAEu92
6Oe4BDQgmgBYfJEuLsfbz4Nr0tGetf9SQP2RuV5wn+76Ao7T6iCy8nVxi18i7+mi
aQ6vZdolX0yF6pnF2RCT3CFSyXTvILMesC5Unfcf7/uTCAxMU3mBOgGFVVBAL8/d
n9PThi8GNPT8HGS5m0KPLR60Aqs3aK2YDZ3MlBGTin68X9Lsp4pFLAzPFNlu28nj
DL30MfIm26EPF1PU5wR7kNYn
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:31:32 2026 by rpki-client