
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
File: 1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft (raw, json)
Hash identifier: TGs0vmCO/GZU20Sqc+p+vcrwhfsruNP7OoGh/e1J+Wo=
Subject key identifier: 68:EC:F8:6E:7B:B1:52:36:1A:9E:1A:F6:9B:F8:E1:78:74:AC:FA:B5
Authority key identifier: D4:80:9E:AA:A2:51:06:46:DD:85:35:9D:F8:6E:65:25:19:47:0F:C3
Certificate issuer: /CN=A918120B/serialNumber=D4809EAAA2510646DD85359DF86E652519470FC3
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
Manifest number: 9B
Signing time: Sun 11 Oct 2026 08:01:18 +0000
Manifest this update: Sun 11 Oct 2026 08:01:17 +0000
Manifest next update: Sun 18 Oct 2026 08:01:17 +0000
Files and hashes: 1: 1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl (hash: lMyBvSomyh4KeQ0Dh4yJEcnmWWXUwwgOxyGxOMgQufU=)
2: 78DCA304E0B211F0865FCE9C4B6F56BC.roa (hash: fCdO2IYR8h+XOBNLTLZzi7ydktWjtSQEA49QRmJD+zs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl
rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918120B, serialNumber=D4809EAAA2510646DD85359DF86E652519470FC3
Validity
Not Before: Oct 11 08:01:17 2026 GMT
Not After : Oct 18 08:01:17 2026 GMT
Subject: CN=6acb424e-b9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:49:18:45:24:d2:b3:b9:74:3c:14:60:07:
06:51:b9:de:75:3b:93:94:70:1d:cd:06:95:40:6d:
64:7e:6e:8e:26:fb:41:5c:27:8c:1a:04:6d:51:3b:
32:a2:6f:60:ea:dc:42:fc:8b:6c:9c:ce:84:be:ea:
83:ce:33:c2:88:c1:06:27:2a:b9:b3:04:62:2e:67:
2b:fd:74:48:6e:0a:46:fb:41:5d:5d:02:27:cd:8b:
b4:72:ff:71:0a:08:6b:96:ec:ac:00:79:70:74:6e:
5a:48:03:89:69:de:1b:b6:58:83:98:9e:01:82:ac:
2a:03:fd:8a:41:ba:d6:d5:2e:09:9c:0e:09:78:aa:
92:a0:93:05:42:2e:5a:04:76:10:7a:c3:b9:c7:d8:
2f:83:b0:c9:d4:bf:37:2b:43:15:bc:4b:6d:e2:24:
37:52:52:ad:fd:d8:7e:02:63:e6:94:27:da:75:6b:
f6:a3:19:9e:eb:80:60:a7:44:c3:b2:d5:df:02:5a:
16:ee:35:93:5e:f3:e9:ca:2c:38:71:a7:00:6b:66:
14:da:7e:0c:68:3b:27:2f:0f:34:e6:35:7c:1f:3e:
e7:79:85:4e:32:0f:9e:02:55:c5:f3:eb:b6:ef:f8:
18:98:0b:38:ae:a4:35:df:52:57:14:bd:62:49:2b:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EC:F8:6E:7B:B1:52:36:1A:9E:1A:F6:9B:F8:E1:78:74:AC:FA:B5
X509v3 Authority Key Identifier:
keyid:D4:80:9E:AA:A2:51:06:46:DD:85:35:9D:F8:6E:65:25:19:47:0F:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c1:0b:94:22:a6:50:82:50:86:8f:ca:93:59:37:5e:df:72:
4c:d3:a0:e0:96:91:fb:8c:31:4e:c1:e5:26:90:65:84:e0:ba:
d0:5f:56:89:5f:02:16:84:5b:01:d7:79:cd:9c:11:55:6c:c0:
c6:17:12:fa:b7:30:41:f4:26:a2:1e:db:7c:f5:75:32:f2:ec:
dc:1f:a3:21:f8:50:15:27:50:89:7d:84:56:76:e4:0f:9a:20:
b0:1b:62:4a:36:41:a6:50:e6:bd:00:36:a2:45:9a:54:50:48:
ae:b7:64:14:e0:d7:fc:61:54:f8:4e:03:f3:d2:87:48:76:9d:
39:77:96:8e:c5:4d:1f:54:41:51:97:b8:52:d8:9b:a5:a0:6a:
83:7c:d5:b1:9c:fe:d1:a8:18:a0:24:7c:aa:1b:10:95:b7:46:
81:9b:6f:86:53:50:5c:5e:c2:49:9c:14:9e:32:2b:4a:df:21:
65:cf:3b:54:4a:cb:a6:e0:c8:c5:d6:4d:54:2f:26:31:68:3b:
46:28:fe:4f:d6:ce:1b:ae:af:38:4f:04:82:ea:30:82:c3:c5:
60:84:90:3d:40:78:55:f0:c8:d2:38:c1:fe:a2:96:48:f6:b6:
da:9e:c5:8a:70:0f:ad:81:11:47:9b:07:63:0d:48:b3:f8:5c:
de:5c:96:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:38:27 2026 by rpki-client