
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
File: IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json)
Hash identifier: 5/ldLLVhbPG0SojKApPa6/cq3okWIHhprK6VuBER55A=
Subject key identifier: B3:86:2C:7F:F6:79:87:2A:41:E0:DB:3D:0F:01:22:74:C5:43:84:E2
Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83
Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783
Certificate serial: 0870
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
Manifest number: 0867
Signing time: Sun 26 Jul 2026 21:27:17 +0000
Manifest this update: Sun 26 Jul 2026 21:27:17 +0000
Manifest next update: Sun 02 Aug 2026 21:27:17 +0000
Files and hashes: 1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: LQJFfkass16xpUPss9hWFaGqcljF0GxnupneZbTbPts=)
2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: v4yXnV7F6sBRR11FKD6BcY09oXI6+ensN6Z6ZxFBdd8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl
rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160 (0x870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160BEB, serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783
Validity
Not Before: Jul 26 21:27:17 2026 GMT
Not After : Aug 2 21:27:17 2026 GMT
Subject: CN=6a667bb5-cc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:66:63:6e:72:ef:7f:7e:41:2c:8c:3d:a7:
76:72:3e:3a:99:40:f8:a9:4f:dc:06:d2:3a:b7:11:
fe:8c:18:3a:a6:c5:95:b7:ec:ad:d2:32:fd:d5:64:
5c:33:94:30:30:d6:07:c6:9c:63:bb:f7:41:35:00:
23:9a:d5:ff:8d:4f:f8:47:84:d9:7e:ab:9e:55:27:
ba:60:65:9d:37:7f:73:74:e5:ee:42:5d:99:f4:83:
4b:34:34:9f:90:14:20:3d:84:ea:09:4f:b0:2d:a7:
1c:de:fc:99:e2:2d:c7:71:5d:63:16:34:75:2a:77:
bf:62:b2:af:82:20:fe:a4:33:d3:79:f4:66:ff:53:
f1:83:ba:e1:c9:09:44:3b:25:10:25:4f:bd:f5:c3:
e5:81:59:5e:e1:7b:67:2e:f4:e8:71:62:ad:b9:53:
52:3d:1b:3c:83:44:bd:94:b2:4f:d8:da:33:9b:88:
a1:58:0c:0c:01:87:5b:01:c3:ba:5f:6c:ab:90:98:
c4:83:ae:5c:b8:71:9d:c6:7f:29:c9:f2:41:e5:54:
74:c7:dc:d1:e0:95:61:cb:94:18:70:3d:b7:e3:9e:
c9:15:be:c2:55:1a:a0:f3:69:32:8c:f7:d1:99:0c:
26:c6:79:21:cd:49:f9:8c:d7:96:35:f7:b2:24:df:
ce:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:86:2C:7F:F6:79:87:2A:41:E0:DB:3D:0F:01:22:74:C5:43:84:E2
X509v3 Authority Key Identifier:
keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:92:88:4d:d5:07:9b:2b:e8:df:3b:66:06:33:c8:4d:88:b5:
1d:33:8c:30:3c:e7:7a:f0:db:a5:c8:6b:3b:5d:23:0d:f4:65:
63:30:b9:f7:1d:c7:fe:a5:46:17:47:2f:1b:c7:3c:fa:ac:f4:
58:88:ee:fc:54:7e:c1:fc:3c:83:73:2f:c4:bd:7e:c5:4b:ea:
ec:1b:61:7d:5f:a4:74:9e:49:6a:27:70:2e:7f:c4:98:6c:7d:
c2:e7:10:69:ea:7b:0a:cf:7d:3d:ce:d0:c4:c1:54:97:78:17:
e2:0a:93:9e:e5:71:be:79:d1:38:fc:7a:38:91:97:34:ed:bb:
eb:d8:47:5d:07:4d:5f:64:7a:67:e6:4a:48:b0:e4:57:57:d7:
5d:26:66:c5:ee:a7:f3:ee:6f:33:79:5d:9d:a4:c2:b7:49:65:
58:b6:4a:ab:04:83:47:7e:4d:b3:1b:86:94:d2:97:ed:60:ab:
21:b2:77:a5:fc:18:67:c4:92:4e:9e:be:5e:76:7e:b9:a4:c3:
d7:26:49:e6:b9:79:ff:bd:fd:22:71:b6:a2:fb:c0:02:16:30:
b8:4a:dc:71:29:d1:23:60:4e:85:14:2d:ab:c5:a1:11:c2:71:
27:6b:54:4a:c0:10:17:e6:ff:f5:25:4a:2b:e8:9d:0b:3e:fa:
fd:a2:1e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:49 2026 by rpki-client