
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
File: IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json)
Hash identifier: SC+CrdVFiwMuITHELHV818heThidAvFqJc5UfZL0I4Q=
Subject key identifier: A6:50:60:B6:72:E8:38:1C:BB:92:A1:20:B2:3F:A7:99:DC:A7:EC:CD
Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83
Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783
Certificate serial: 083D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
Manifest number: 0834
Signing time: Thu 16 Apr 2026 20:50:48 +0000
Manifest this update: Thu 16 Apr 2026 20:50:48 +0000
Manifest next update: Thu 23 Apr 2026 20:50:48 +0000
Files and hashes: 1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: /tOrVAVxcXSbTs8jcCXZGrwswi6h6r0GSLa9g+OtA3Q=)
2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: v4yXnV7F6sBRR11FKD6BcY09oXI6+ensN6Z6ZxFBdd8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl
rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:50:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160BEB, serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783
Validity
Not Before: Apr 16 20:50:48 2026 GMT
Not After : Apr 23 20:50:48 2026 GMT
Subject: CN=69e14ba8-19ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:8a:8c:1f:45:5b:39:42:8e:ff:d8:b0:ba:
98:93:1c:6c:a0:d1:74:af:fc:ac:ea:26:bd:02:6f:
c6:b0:b0:9f:89:5f:be:9a:ca:28:5d:47:a7:56:55:
6b:1f:dd:57:33:2d:af:e7:fa:0d:49:8c:8e:d4:9c:
ff:f0:cc:93:1f:a6:53:20:10:b4:f9:c7:48:6e:4d:
48:82:4f:3b:cc:00:3e:6f:99:fd:7b:de:98:73:f9:
e8:31:f2:f6:7d:d2:22:9c:c7:0d:f2:9d:a7:4d:77:
9b:a4:fd:00:d4:63:36:51:0e:66:2d:c5:f6:9b:1c:
9a:2b:bd:0f:88:69:4f:60:0f:c3:b0:c3:90:0a:5a:
8c:de:64:22:88:45:e2:71:6b:b2:d2:43:42:fb:d1:
04:09:fd:2e:2e:9f:84:a1:e7:c0:4b:01:30:65:dc:
13:17:32:71:1a:a4:a1:ce:2a:33:4e:4d:0a:69:b2:
b2:9e:e2:c4:9a:1a:82:e7:b7:a6:53:50:da:95:05:
fc:c9:09:cd:db:df:75:5e:43:ca:05:b1:c2:19:45:
38:b0:25:21:82:54:56:8f:7c:09:04:f0:28:85:9f:
a8:a8:7d:b6:15:58:5e:cb:87:c4:c4:b7:97:b1:12:
28:dc:2c:23:97:f2:08:b4:70:1e:35:5c:da:b9:2d:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:50:60:B6:72:E8:38:1C:BB:92:A1:20:B2:3F:A7:99:DC:A7:EC:CD
X509v3 Authority Key Identifier:
keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:a6:6b:1f:31:0f:31:b7:df:09:3c:03:ab:9e:bd:5c:4f:d5:
7d:ca:4c:ae:1b:5e:9b:db:e9:5b:71:d9:db:3a:4d:26:60:a9:
27:d3:23:fa:0c:44:82:fd:d2:2b:8a:05:35:34:cf:8f:d6:e9:
ab:fb:60:a3:fb:db:95:04:9b:89:64:6d:01:0a:ad:4a:ab:2a:
7c:bc:ba:89:57:15:12:f2:fa:ce:eb:b5:06:f4:22:ad:cd:b5:
b4:10:99:1c:04:87:32:32:aa:a1:ee:94:ca:a3:28:a2:b2:d2:
80:f7:da:b5:74:0e:ad:c4:a3:a8:37:35:ad:1f:ca:ea:4d:d3:
99:51:55:fe:f5:f6:53:26:90:2b:e5:0e:01:cb:8a:56:52:e8:
32:9c:96:77:c1:25:8d:b0:9b:4c:e3:0b:c6:3e:80:87:47:d1:
3d:36:76:cd:59:4a:87:3e:19:da:20:b7:05:99:28:d3:f7:43:
9f:56:88:16:49:34:2d:3e:14:b2:a1:59:50:87:29:85:46:a7:
cc:a6:0c:d9:25:2c:33:99:7f:89:c3:8f:b9:0a:76:d6:a6:93:
bb:94:74:cf:d7:ee:35:bf:79:a5:8c:ea:7d:cb:64:7e:32:3f:
6f:c5:57:3a:57:6c:be:b7:a5:c0:64:90:6c:21:8a:41:40:a2:
5e:52:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:19:10 2026 by rpki-client