
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
File: -IHZTXommvaISDplHTc5GOeGUB4.mft (raw, json)
Hash identifier: GSw/FadczpDvxLObOUCaYu14oxjDYOTmtVuXiESXyWA=
Subject key identifier: 26:FC:99:71:78:92:B8:70:80:63:EF:65:2E:DF:B6:11:03:82:4D:2A
Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
Certificate issuer: /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E
Certificate serial: 0225
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
Manifest number: 021B
Signing time: Sat 13 Jun 2026 02:50:02 +0000
Manifest this update: Sat 13 Jun 2026 02:50:01 +0000
Manifest next update: Sat 20 Jun 2026 02:50:01 +0000
Files and hashes: 1: -IHZTXommvaISDplHTc5GOeGUB4.crl (hash: MQJ2J0BehvQFSqXZ0eRbEYI6Xt/icizdy09fA+ndeKM=)
2: 89E0172A2F2B11EE8CD3F880C4F9AE02.roa (hash: dd8IIaigjdeFVHSi8ZJQL2JFa2im8RBvLxqCRUWskxU=)
3: 8A50B69C2F2B11EE8CD3F880C4F9AE02.roa (hash: 8yrKk69D5xN242remo4AGa14gprPSgbcyqKZK/Du0rY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182644, serialNumber=F881D94D7A269AF688483A651D373918E786501E
Validity
Not Before: Jun 13 02:50:01 2026 GMT
Not After : Jun 20 02:50:01 2026 GMT
Subject: CN=6a2cc559-49a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:2f:22:05:a1:4b:ed:6d:71:fc:a5:d4:4a:
c1:b5:f7:17:ae:e2:ce:1b:16:d5:69:ee:a0:ce:6f:
da:f9:5b:38:71:30:98:b1:0d:8b:a7:af:71:33:42:
79:a1:14:0e:b5:74:e9:01:ba:4e:48:68:0c:b9:03:
5f:7f:f3:81:e1:39:83:bb:a6:44:11:2e:35:6e:8c:
99:1c:34:59:9e:3d:d0:67:8c:e8:07:70:49:5e:f3:
0d:9e:d4:78:ef:fe:5a:76:d2:56:d0:09:44:60:af:
bf:97:79:81:db:d2:41:38:33:74:45:e8:d9:eb:f2:
3a:42:d1:e7:15:02:99:10:be:f3:a6:8d:85:d7:73:
bf:33:65:bd:a6:f0:49:b3:00:cd:26:d0:b4:04:86:
a7:b6:e9:4b:3e:78:7c:e1:bd:7f:6f:e9:e4:cf:21:
0d:30:0c:79:5e:66:e7:0c:4c:af:b8:b2:a4:f7:6d:
25:a0:f3:df:08:eb:16:c2:26:65:cc:ba:96:c9:f4:
05:a2:3e:c5:a4:9f:32:b9:4a:86:51:e3:73:59:c1:
da:0c:0b:3f:56:9c:9d:d4:2b:b0:21:27:be:00:0d:
4e:af:d8:89:a7:5a:fe:89:93:2b:6b:e0:57:70:07:
b9:ce:0f:4b:a3:0a:17:2f:8a:ed:0e:a1:c3:99:1f:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FC:99:71:78:92:B8:70:80:63:EF:65:2E:DF:B6:11:03:82:4D:2A
X509v3 Authority Key Identifier:
keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9d:ab:d6:46:1e:4c:ae:38:e6:58:a0:95:d3:f7:2e:27:51:
98:7f:75:7d:8a:1e:4b:85:a7:e7:4b:0e:1f:46:a8:19:b6:65:
eb:f6:0c:10:f9:8e:bd:cd:c9:01:c0:6d:93:3e:d1:30:a6:fe:
dc:71:d1:70:bb:6e:e9:2c:98:cb:fd:c0:55:9c:67:4f:48:84:
98:90:cd:c3:da:28:01:5e:44:17:44:52:50:68:ba:d2:0f:af:
ca:5a:92:e3:59:fc:74:5a:8f:7a:a8:80:90:41:6b:1f:30:d4:
f5:28:e3:12:8e:12:ba:91:23:a5:54:e2:77:80:38:94:ad:2d:
e4:68:ff:55:94:ba:42:f2:3e:f5:75:c8:f6:e8:2c:7c:21:62:
8e:8e:d6:93:b7:2f:4a:47:9d:14:e3:db:a3:f1:79:51:c1:1a:
bd:5e:55:06:bd:f6:df:0b:23:2b:a8:9a:21:1b:cf:36:e8:c9:
25:a8:0e:ee:00:5d:b7:70:b2:3c:70:0b:b2:dc:3a:e0:5d:5c:
51:d6:fb:54:a3:ee:e6:15:e7:0f:9c:e1:56:5a:44:12:f6:97:
d6:a4:d4:e0:82:68:cb:ef:31:c6:83:48:7b:64:81:e3:90:56:
0a:d6:85:17:27:36:a8:f7:06:96:67:6a:da:55:59:bd:4b:5f:
c0:c9:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:10 2026 by rpki-client