
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft
File: IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft (raw, json)
Hash identifier: 7kneInqfjj1ZmjiEzmf+bBVtyCPZvXamwx/XTwq7tQI=
Subject key identifier: F5:F1:7C:E0:8C:97:96:9F:19:1C:F8:EA:AA:A0:74:BF:32:CD:9F:DB
Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95
Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95
Certificate serial: 0582
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft
Manifest number: 0572
Signing time: Fri 12 Jun 2026 23:22:44 +0000
Manifest this update: Fri 12 Jun 2026 23:22:44 +0000
Manifest next update: Fri 19 Jun 2026 23:22:44 +0000
Files and hashes: 1: IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl (hash: mNgE76+0h3Ml8zQfs9aQYQYDKtl+aFlJ6vC8xNgFmGw=)
2: 0628D74630C211ECBB5A4116C4F9AE02.roa (hash: IekuGWz95qJq1RkERKwpFfkq5YP338H+OPjlC3vFHYE=)
3: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (hash: mMzlkdBS5l7zH1NqOtcSGsyrLWVpyJgkzBlaJ0LOo5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl
rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:22:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1410 (0x582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95
Validity
Not Before: Jun 12 23:22:44 2026 GMT
Not After : Jun 19 23:22:44 2026 GMT
Subject: CN=6a2c94c4-e28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:7f:53:81:e9:5e:3d:84:37:26:84:e3:51:
e6:42:a8:21:72:12:c5:e7:01:5b:eb:94:42:61:cb:
72:cf:a7:00:2d:ef:e1:85:49:2f:f3:91:aa:65:d6:
3f:5b:5b:65:46:b1:92:e1:3f:d2:84:c1:27:b0:60:
ca:3a:af:d0:c2:c4:58:2f:fd:62:23:82:8d:1b:68:
8b:28:42:ee:26:4b:17:93:e7:50:a2:b3:e5:14:4a:
dd:a2:63:1b:68:f0:9e:0b:1d:c6:71:fb:fb:54:6b:
f5:91:5c:08:71:1c:5f:ad:8d:9b:76:1a:f6:c6:3c:
58:2f:b0:01:2e:fd:5c:32:e4:a3:ed:aa:35:76:6a:
17:67:60:61:bb:53:4f:e5:39:6e:ff:1b:50:e3:9b:
5e:13:7a:a8:60:06:d8:11:36:f2:a9:4b:70:50:3e:
3b:2d:19:4d:b2:f1:aa:d8:87:9b:33:fa:39:fd:a1:
d5:14:fc:1c:24:63:84:6c:02:55:ee:f4:b8:1a:ec:
e3:1e:59:24:d8:0d:80:98:38:3d:d1:85:81:47:f2:
02:3e:5c:96:20:35:bc:94:2b:ee:ba:7e:4d:53:23:
4e:88:14:c3:e8:b0:d0:41:88:9e:03:2d:a7:bc:c4:
e4:2d:32:d3:c1:30:fd:47:ad:09:8d:89:19:56:b7:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F1:7C:E0:8C:97:96:9F:19:1C:F8:EA:AA:A0:74:BF:32:CD:9F:DB
X509v3 Authority Key Identifier:
keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:de:aa:c9:e4:7f:36:c2:51:04:b3:a6:ec:25:3d:14:06:ec:
b8:90:41:90:e4:86:1f:98:18:a5:08:45:06:6f:af:0a:ee:12:
f8:3d:f4:16:26:df:1d:80:d1:04:38:a4:86:fc:e9:cc:54:53:
60:ae:5f:10:f4:34:7b:39:fc:f1:f7:2c:d3:24:b0:c9:e0:65:
8b:84:18:13:a4:22:ff:f2:ac:3b:0a:e2:a7:a1:25:1c:0a:f6:
3f:bd:40:58:d3:69:29:6e:73:15:44:4c:b8:6f:29:eb:64:52:
2b:78:3f:62:89:db:c6:62:b6:57:61:dc:d4:9a:dd:96:0e:eb:
45:ba:95:a1:c4:91:9b:f9:5e:b9:e6:4f:3a:2f:33:18:99:57:
30:a5:55:c0:16:42:60:09:5e:3a:ca:9d:5a:c4:cc:94:cf:79:
0e:72:ff:6a:de:24:82:a7:55:50:6c:6e:3c:46:7d:ad:00:be:
8b:81:9c:7a:12:25:2f:bd:ca:6c:69:69:8e:79:aa:24:5b:b2:
99:62:48:95:dc:10:06:cd:8b:28:bc:c7:2f:7b:95:49:c4:f1:
46:6e:00:9c:ce:78:b0:d6:ea:4f:1e:08:66:2a:7f:02:67:66:
32:aa:68:09:8e:b1:7a:30:ed:99:3c:b2:c5:19:89:26:66:5d:
b6:12:a7:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG
RURFRDlGOTUwHhcNMjYwNjEyMjMyMjQ0WhcNMjYwNjE5MjMyMjQ0WjAYMRYwFAYD
VQQDEw02YTJjOTRjNC1lMjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt8F/U4HpXj2ENyaE41HmQqghchLF5wFb65RCYctyz6cALe/hhUkv85GqZdY/
W1tlRrGS4T/ShMEnsGDKOq/QwsRYL/1iI4KNG2iLKELuJksXk+dQorPlFErdomMb
aPCeCx3Gcfv7VGv1kVwIcRxfrY2bdhr2xjxYL7ABLv1cMuSj7ao1dmoXZ2Bhu1NP
5Tlu/xtQ45teE3qoYAbYETbyqUtwUD47LRlNsvGq2IebM/o5/aHVFPwcJGOEbAJV
7vS4GuzjHlkk2A2AmDg90YWBR/ICPlyWIDW8lCvuun5NUyNOiBTD6LDQQYieAy2n
vMTkLTLTwTD9R60JjYkZVrcusQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXxfOCM
l5afGRz46qqgdL8yzZ/bMB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw
QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru
NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEJCRi9FNDkxMTIzQTMwQkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxq
dmdfS2tHa3prWF8tM3RuNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAud6qyeR/NsJRBLOm7CU9FAbsuJBBkOSGH5gYpQhFBm+vCu4S+D30FibfHYDR
BDikhvzpzFRTYK5fEPQ0ezn88fcs0ySwyeBli4QYE6Qi//KsOwrip6ElHAr2P71A
WNNpKW5zFURMuG8p62RSK3g/YonbxmK2V2Hc1Jrdlg7rRbqVocSRm/leueZPOi8z
GJlXMKVVwBZCYAleOsqdWsTMlM95DnL/at4kgqdVUGxuPEZ9rQC+i4GcehIlL73K
bGlpjnmqJFuymWJIldwQBs2LKLzHL3uVScTxRm4AnM54sNbqTx4IZip/AmdmMqpo
CY6xejDtmTyyxRmJJmZdthKnWQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:36:59 2026 by rpki-client