
$ rpki-client -vvf rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
File: 1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft (raw, json)
Hash identifier: s9SWCFwaQzCiQvAAOF498/eQ+RrzRuuxdMVg8ZsFr4I=
Subject key identifier: 6C:A2:D4:1B:04:A6:B0:50:4A:60:F5:97:BD:DE:CE:4D:8C:9D:FB:25
Authority key identifier: D4:80:9E:AA:A2:51:06:46:DD:85:35:9D:F8:6E:65:25:19:47:0F:C3
Certificate issuer: /CN=A918120B/serialNumber=D4809EAAA2510646DD85359DF86E652519470FC3
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
Manifest number: 42
Signing time: Fri 17 Apr 2026 08:11:42 +0000
Manifest this update: Fri 17 Apr 2026 08:11:42 +0000
Manifest next update: Fri 24 Apr 2026 08:11:42 +0000
Files and hashes: 1: 1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl (hash: u3a+lMPKzPHI1uIvFb9LToMgjd7G0z6uTYTj1FgQIQo=)
2: 78DCA304E0B211F0865FCE9C4B6F56BC.roa (hash: fCdO2IYR8h+XOBNLTLZzi7ydktWjtSQEA49QRmJD+zs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl
rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918120B, serialNumber=D4809EAAA2510646DD85359DF86E652519470FC3
Validity
Not Before: Apr 17 08:11:42 2026 GMT
Not After : Apr 24 08:11:42 2026 GMT
Subject: CN=69e1eb3e-097d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cd:e4:26:03:7f:0a:0f:55:c5:f4:03:fb:98:
a7:aa:e8:0b:56:d9:75:e8:03:ee:d7:ce:4f:de:c8:
94:61:30:44:15:01:03:fe:41:a9:72:43:90:5e:8e:
b3:f7:d8:8e:2f:8d:c4:48:6b:68:0a:ae:de:eb:e4:
07:ab:98:91:3f:96:26:d3:35:a5:19:37:a6:b4:d6:
cd:fa:d0:da:a7:6e:02:a7:f5:84:3f:db:9e:35:f2:
7b:ac:d3:25:b3:ec:b2:4c:c5:d8:82:70:94:13:de:
55:3b:3a:0a:3c:ba:07:bf:af:0c:f2:8e:b2:d7:d3:
e4:7a:06:90:98:e5:39:61:0c:08:c9:80:f5:10:a2:
be:7d:a8:25:a0:dd:22:37:fe:80:ad:97:56:95:13:
16:e6:c3:4d:28:8f:0e:0e:a2:14:d7:11:9c:dd:3d:
c1:42:1c:1c:f3:d6:7d:5f:ed:00:0b:a5:6d:8a:23:
6d:3f:39:e9:92:ed:62:ef:be:c8:bf:4e:35:b4:1e:
78:1c:f1:71:e5:7b:28:5d:56:1f:bd:07:7f:ef:16:
f0:9a:c7:03:2e:e1:83:cf:3d:49:a5:86:88:d2:be:
e5:a5:67:69:67:47:8b:86:0f:4e:16:40:40:62:dc:
06:e3:e3:80:c0:3b:34:98:cd:00:2d:76:67:de:94:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A2:D4:1B:04:A6:B0:50:4A:60:F5:97:BD:DE:CE:4D:8C:9D:FB:25
X509v3 Authority Key Identifier:
keyid:D4:80:9E:AA:A2:51:06:46:DD:85:35:9D:F8:6E:65:25:19:47:0F:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:1b:c2:e5:70:e0:3b:26:66:9d:57:32:79:ea:55:b7:aa:d7:
a6:d8:24:97:92:5b:de:1a:ce:eb:b0:ce:9e:76:db:32:0b:65:
21:62:04:7b:9b:3d:21:15:69:7d:af:ee:7d:1b:73:f1:bc:ed:
23:d6:b4:94:8a:d9:ae:d2:a7:9c:52:65:71:3f:b9:98:8c:6d:
4a:b8:6f:20:34:31:54:d3:08:0f:58:b2:79:63:06:f6:6c:78:
c7:d7:52:b6:6f:94:b1:70:78:51:da:44:5c:76:e6:4c:e2:f5:
17:a2:8c:c4:af:8c:08:a6:25:7c:2a:94:dd:95:c6:80:e6:a1:
7e:5f:e4:c2:b9:5e:a4:6a:dc:52:80:63:22:41:df:37:10:36:
68:a6:db:f0:34:7f:7a:a7:4d:a8:ba:b8:bc:cb:ef:20:e2:4f:
e1:4c:05:43:b9:14:61:51:7a:37:e7:b1:ac:e3:8d:ad:88:58:
22:a0:73:6b:04:6e:6b:3c:11:f8:81:42:da:d1:9f:e8:3d:ab:
80:85:65:27:cf:2a:92:87:1e:cc:a1:59:69:0d:d2:59:a9:00:
67:02:3e:77:2d:10:29:f1:f1:be:87:9e:13:00:ab:b2:2a:cd:
44:d6:4a:9d:a6:38:4d:92:52:2c:7a:b4:0d:6c:23:ef:3b:4e:
5d:4a:ab:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:45 2026 by rpki-client