
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File: iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier: Va0kEqJ3Jk32jQHVr9Aw4VzPzIG+SmH9TtSuJBTG0Oc=
Subject key identifier: C8:50:67:35:57:A6:69:63:43:A5:E9:AE:E0:09:BC:8F:51:DE:34:DC
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer: /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial: 1053
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number: 1037
Signing time: Fri 12 Jun 2026 17:23:20 +0000
Manifest this update: Fri 12 Jun 2026 17:23:19 +0000
Manifest next update: Fri 19 Jun 2026 17:23:19 +0000
Files and hashes: 1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: eUrTFtpGaCHHCbaUZkOY2MjkrSli9OsDmq4LcYtBIjo=)
2: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: XvZz5Qg4UuABOAvZL3TrqvqvGORz9Mmy5LeD7IN22s0=)
3: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: Ri/V1vsZYZSf3Iiz5nBojjsApKtj70HrLpdneU/NrfM=)
4: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: JR72/EZy5aRrSFB9vWQMg1q1NBXm5hj69ANbCPmEu98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4179 (0x1053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Validity
Not Before: Jun 12 17:23:19 2026 GMT
Not After : Jun 19 17:23:19 2026 GMT
Subject: CN=6a2c4088-0449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:c6:b4:4d:49:a3:19:31:4a:b4:b6:04:58:
dd:0f:0e:35:2a:72:fc:f4:84:55:79:a6:38:ea:72:
7f:1a:24:01:33:b8:6a:ea:c6:cd:db:03:bb:16:7c:
8d:4e:d1:bd:f5:e1:09:63:19:80:a3:a6:d8:79:41:
3f:a3:3e:7c:8c:63:cd:02:76:97:80:b9:f6:ee:2f:
e0:c1:9a:0f:4f:87:e2:38:3d:b1:0d:35:e5:da:89:
e8:98:98:ff:8f:d5:04:19:b8:e6:b5:e3:32:3d:97:
47:0f:ea:55:71:78:26:2f:1c:fa:88:64:cd:5d:6d:
cd:14:da:93:65:5c:6b:36:eb:3d:f6:13:fa:4d:72:
8f:44:da:13:56:d1:02:56:b8:4e:75:a6:6d:7e:ad:
21:72:bc:02:27:ff:90:74:72:7c:a6:9b:76:b0:52:
1a:97:92:18:77:d6:00:b9:d1:db:dd:fa:63:89:dc:
6f:db:61:42:57:54:5a:87:9b:df:66:4d:6c:7d:d2:
4a:8b:3f:40:d5:be:43:58:5e:08:b1:2b:47:73:43:
7e:1d:df:fa:6c:9c:97:5a:fd:3a:a1:97:6f:1f:43:
ce:85:9b:60:db:1c:16:de:f2:ba:7f:c5:5c:fb:86:
a9:3d:44:0a:d3:1f:fb:5f:84:e3:fa:6d:f8:50:29:
6a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:50:67:35:57:A6:69:63:43:A5:E9:AE:E0:09:BC:8F:51:DE:34:DC
X509v3 Authority Key Identifier:
keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:36:35:ce:8f:b4:55:60:46:49:11:22:67:ac:51:71:dc:d9:
62:69:e9:6c:00:7d:5d:de:20:19:33:be:ba:37:f2:52:ee:5d:
c9:f4:e7:73:47:ac:d0:81:11:14:2f:b7:bd:30:6d:5e:a1:2d:
d0:82:81:3f:51:53:92:31:8f:74:59:42:2a:f8:1d:a2:10:29:
ad:af:6c:c4:05:b3:ce:4f:35:4b:b3:04:b8:38:61:4a:43:ad:
d1:2d:8b:eb:5b:d4:47:aa:57:e5:76:01:0b:2d:57:ee:8e:2b:
09:cd:0f:b5:1e:bf:f0:ef:fd:dc:a0:3a:5f:37:4f:23:67:6a:
46:0f:43:a8:8e:3e:3a:1f:bb:b0:25:f8:1b:cd:34:ce:a1:5a:
a3:ea:d8:51:3e:36:cd:d1:d5:d6:c9:e7:25:dd:4c:09:20:bf:
e3:a0:8a:5b:67:a3:55:3e:32:50:6e:7c:55:96:78:cd:ca:0a:
67:68:75:78:54:a0:cf:c7:be:65:6e:15:38:da:83:14:d1:1b:
80:fd:0b:1a:e1:34:05:c1:34:15:b4:d9:fd:89:f6:89:b2:24:
ec:cd:40:85:af:9c:8f:27:93:ae:33:fa:70:01:18:a2:d1:cd:
8c:5a:9f:30:ed:9f:36:09:c5:6b:ac:7f:06:70:2b:68:8e:49:
09:cd:c5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:54 2026 by rpki-client