
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
File: ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft (raw, json)
Hash identifier: AzZKmnE9YVo0G79cY8JI8lb/trN73aVGCwOsxwnNVUw=
Subject key identifier: 31:F9:2C:C8:70:90:B2:06:74:B4:87:24:9B:45:6D:16:9D:37:5E:08
Authority key identifier: 8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54
Certificate issuer: /CN=A9167671/serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
Manifest number: A5
Signing time: Mon 21 Sep 2026 07:04:07 +0000
Manifest this update: Mon 21 Sep 2026 07:04:07 +0000
Manifest next update: Mon 28 Sep 2026 07:04:07 +0000
Files and hashes: 1: ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl (hash: 7WXdTQt8rRwqxv8g/EGE+QdP99tVUCud/9S34GmKRoA=)
2: 42AD4128C0FD11F0883D987DC4F9AE02.roa (hash: vGDLBHhQ2uCZ7yDty8cYd4H0mY/09AkesOUGu4E2fks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl
rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167671, serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
Validity
Not Before: Sep 21 07:04:07 2026 GMT
Not After : Sep 28 07:04:07 2026 GMT
Subject: CN=6ab0d6e7-df3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:8f:aa:d5:e9:b5:3c:e3:6b:6c:55:58:79:
bd:a8:b5:ff:c4:97:2a:17:ed:c4:b5:8a:e8:31:69:
f2:47:09:03:4d:50:4b:f6:f9:36:3b:77:f2:c7:b2:
68:40:a4:2e:74:95:ea:0d:51:06:70:a6:5b:ee:d1:
9a:a6:7b:73:da:43:17:9e:f2:fb:cf:63:74:f2:68:
c7:8d:71:0f:92:12:b3:fa:84:f4:64:c9:85:3e:69:
7e:d9:b2:82:b3:0e:28:13:a9:8a:fa:f4:cd:d3:24:
a8:fa:63:ec:76:eb:61:29:f2:9f:46:2f:a7:6d:1c:
ae:cd:e3:17:57:95:89:5d:0c:9b:3a:df:89:db:58:
77:a3:7a:bd:56:81:71:80:4f:ef:57:06:d2:60:55:
0e:91:c5:1e:71:f5:86:6e:57:f4:d1:c0:4e:2c:b4:
79:e2:49:9d:59:91:08:37:cd:7e:61:b7:1f:70:58:
50:b2:df:b9:13:4b:d5:e5:1b:63:65:76:97:93:55:
28:18:31:0e:32:aa:7b:cf:af:8d:96:97:9a:fe:d1:
0f:0f:0f:3c:04:77:5d:d1:97:d7:b8:c6:ad:59:13:
ae:1e:a7:a4:53:ef:75:57:c2:3d:0b:c7:c6:ae:4c:
79:52:0e:20:46:55:5b:a9:7d:8b:75:0b:6b:0b:91:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F9:2C:C8:70:90:B2:06:74:B4:87:24:9B:45:6D:16:9D:37:5E:08
X509v3 Authority Key Identifier:
keyid:8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:e2:f5:cf:77:d5:66:57:66:45:e8:99:31:76:04:f7:86:42:
fb:65:08:5f:48:d1:ae:e7:6b:b6:8c:e8:88:33:b2:c1:8c:7f:
ab:b7:7a:0a:85:d0:8e:ec:0a:1a:6f:7c:74:b1:cd:31:50:6e:
5e:4f:45:06:6e:c3:07:39:aa:da:07:88:8e:ab:b9:73:48:12:
35:0e:a8:45:94:2e:6f:1b:60:73:8a:d6:e7:f9:09:7d:de:91:
ac:f3:58:0b:f3:3e:d7:a0:31:0b:97:f3:d9:76:1e:4d:a0:22:
55:24:1f:d8:30:df:26:89:db:fd:ee:68:6b:d3:ae:d0:00:30:
39:70:ea:68:8c:ab:f3:83:c5:5a:69:59:03:0b:59:b4:15:36:
0c:89:08:ad:a7:65:f8:cd:bc:50:fa:cd:a8:72:dc:5c:7f:eb:
45:0d:08:19:a3:d4:cf:cd:50:c1:5d:f4:e8:ca:ef:d6:5a:10:
82:c7:1b:bf:e2:b9:d3:56:17:bd:02:35:20:0a:cc:91:12:0b:
59:47:b0:6d:e6:e8:aa:f7:f2:b7:03:8a:83:53:79:3a:97:56:
98:bd:68:6a:dc:ef:ad:a5:a1:4e:4b:40:a5:91:62:a5:50:35:
9b:6a:fd:24:7b:26:f6:23:d5:3b:02:66:6b:5e:f6:05:42:27:
72:06:df:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:45:33 2026 by rpki-client