
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
File: ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft (raw, json)
Hash identifier: aXQgMLhgDjnADlVUidFJ5PSvInRLPXCaE1b/N9jCHJo=
Subject key identifier: 7E:E9:1E:2C:0E:09:1B:06:F1:29:0A:C8:8D:C8:B8:33:52:33:24:F1
Authority key identifier: 8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54
Certificate issuer: /CN=A9167671/serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
Manifest number: 88
Signing time: Mon 27 Jul 2026 09:37:07 +0000
Manifest this update: Mon 27 Jul 2026 09:37:06 +0000
Manifest next update: Mon 03 Aug 2026 09:37:06 +0000
Files and hashes: 1: ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl (hash: oLYQDZ2k0vA1hErmZ8vrT6gFJEEq2aWE5EGKIj3ym64=)
2: 42AD4128C0FD11F0883D987DC4F9AE02.roa (hash: vGDLBHhQ2uCZ7yDty8cYd4H0mY/09AkesOUGu4E2fks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl
rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167671, serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
Validity
Not Before: Jul 27 09:37:06 2026 GMT
Not After : Aug 3 09:37:06 2026 GMT
Subject: CN=6a6726c2-d6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:5c:af:7f:bf:b7:0e:0d:5a:ed:c0:91:ab:
bc:68:0f:8c:e2:27:43:cb:c6:3f:96:32:cf:18:f6:
6b:6a:9a:be:dd:68:74:2b:16:98:42:00:01:bb:b8:
c1:a1:4d:2a:a7:13:6a:3a:6e:f9:96:74:d3:eb:42:
75:ea:c0:8a:70:77:e5:0d:37:52:bd:06:a1:9d:01:
9d:e3:aa:9d:0f:f7:8b:b7:f6:f5:41:83:ae:b3:f1:
1b:82:c6:eb:26:2a:1c:75:2d:62:82:a1:54:6e:88:
07:0c:c0:99:0b:25:58:d8:77:9b:f2:0b:7b:ee:eb:
af:f9:00:5a:27:26:10:8d:1a:1e:b6:fc:63:64:c1:
b4:1b:2e:b2:69:5f:75:2d:64:70:f0:ec:af:72:39:
13:1f:d0:f8:3b:bc:eb:0b:75:38:e3:6d:6b:bf:42:
47:58:d0:a4:a3:a7:b8:c8:81:3b:7c:c1:ea:9f:56:
51:ed:b9:e2:0b:2a:7a:7c:54:65:ba:6e:cf:a1:fc:
a7:1f:e5:d0:7f:df:6c:af:cf:86:a3:75:34:9e:91:
3a:a5:69:b4:45:1a:90:af:ad:8f:74:04:b2:75:09:
8a:50:b0:1d:2b:73:b0:85:b2:dc:2d:49:bf:3a:0b:
5f:e3:86:d2:5d:db:25:65:dd:6d:bc:33:32:36:e4:
3e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E9:1E:2C:0E:09:1B:06:F1:29:0A:C8:8D:C8:B8:33:52:33:24:F1
X509v3 Authority Key Identifier:
keyid:8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:95:b6:bd:56:c1:fc:8d:71:3b:de:86:77:89:57:31:38:ee:
5a:62:4e:25:e0:77:2c:51:66:26:b0:db:63:c3:9a:7b:c2:b0:
35:06:dc:01:3c:8d:45:22:1e:4a:7d:19:a2:d4:d2:55:3a:7b:
75:e0:46:18:49:63:3e:87:f5:7f:e8:db:ac:81:3d:f4:01:90:
67:fd:8c:84:06:d4:3f:5b:fa:fa:4a:53:3b:4a:47:f1:92:c3:
41:8f:cc:8b:89:2d:36:75:c6:d1:ea:c4:8f:5e:d6:4d:be:98:
bc:62:5d:80:cb:de:8c:d5:bf:30:7e:3a:fb:a6:e8:8a:a9:a7:
dc:63:54:e9:4c:91:08:a6:d8:3c:98:b7:da:a6:a7:cd:de:71:
f7:68:f0:13:57:0c:68:64:e9:a4:e4:78:16:7e:6d:ea:08:22:
83:fb:a7:f1:ea:d0:0b:28:91:43:f9:43:1b:58:95:a1:f9:4b:
ff:30:b8:c8:de:d5:59:30:1e:70:44:e7:f5:86:5a:d2:ca:ed:
ad:33:c2:67:5f:ba:55:c4:55:e2:99:7a:47:0d:ad:40:48:d4:
d9:22:50:14:3f:a4:21:98:52:4a:46:92:ae:fe:ad:d2:4d:49:
da:fc:e3:00:74:6e:78:7f:76:55:e0:55:d2:93:7b:c8:a8:72:
86:fd:62:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njc2NzExMTAvBgNVBAUTKDhBNTc3MTdFNjJFMTE1QkFEMEFGMTY3OTQyMjM1QjAx
QjlCMUYzNTQwHhcNMjYwNzI3MDkzNzA2WhcNMjYwODAzMDkzNzA2WjAYMRYwFAYD
VQQDEw02YTY3MjZjMi1kNmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArOxcr3+/tw4NWu3Akau8aA+M4idDy8Y/ljLPGPZrapq+3Wh0KxaYQgABu7jB
oU0qpxNqOm75lnTT60J16sCKcHflDTdSvQahnQGd46qdD/eLt/b1QYOus/Ebgsbr
JiocdS1igqFUbogHDMCZCyVY2Heb8gt77uuv+QBaJyYQjRoetvxjZMG0Gy6yaV91
LWRw8OyvcjkTH9D4O7zrC3U4421rv0JHWNCko6e4yIE7fMHqn1ZR7bniCyp6fFRl
um7PofynH+XQf99sr8+Go3U0npE6pWm0RRqQr62PdASydQmKULAdK3OwhbLcLUm/
Ogtf44bSXdslZd1tvDMyNuQ+HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7pHiwO
CRsG8SkKyI3IuDNSMyTxMB8GA1UdIwQYMBaAFIpXcX5i4RW60K8WeUIjWwG5sfNU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzY3MS80NjBCMDgwNEJF
MUYxMUYwOTU0MzVENkVDNEY5QUUwMi9pbGR4Zm1MaEZiclFyeFo1UWlOYkFibXg4
MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lsZHhmbUxoRmJyUXJ4WjVRaU5iQWJteDgxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzY3MS80NjBCMDgwNEJFMUYxMUYwOTU0MzVENkVDNEY5QUUwMi9pbGR4Zm1MaEZi
clFyeFo1UWlOYkFibXg4MVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJpW2vVbB/I1xO96Gd4lXMTjuWmJOJeB3LFFmJrDbY8Oae8KwNQbcATyNRSIe
Sn0ZotTSVTp7deBGGEljPof1f+jbrIE99AGQZ/2MhAbUP1v6+kpTO0pH8ZLDQY/M
i4ktNnXG0erEj17WTb6YvGJdgMvejNW/MH46+6boiqmn3GNU6UyRCKbYPJi32qan
zd5x92jwE1cMaGTppOR4Fn5t6ggig/un8erQCyiRQ/lDG1iVoflL/zC4yN7VWTAe
cETn9YZa0srtrTPCZ1+6VcRV4pl6Rw2tQEjU2SJQFD+kIZhSSkaSrv6t0k1J2vzj
AHRueH92VeBV0pN7yKhyhv1isQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:19:54 2026 by rpki-client