
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
File: if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json)
Hash identifier: tIji726CGJhu07vAPBi0MYPJdbq61c1eB16Qzoef/NQ=
Subject key identifier: 57:87:BE:79:C4:2F:02:0A:59:40:96:FC:7A:A8:F3:39:DE:1A:D7:37
Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
Certificate issuer: /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Certificate serial: 357F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
Manifest number: 3558
Signing time: Fri 12 Jun 2026 15:03:53 +0000
Manifest this update: Fri 12 Jun 2026 15:03:52 +0000
Manifest next update: Fri 19 Jun 2026 15:03:52 +0000
Files and hashes: 1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: jBpAeBhfNDt40zxgTQ2jiEx7upclRuKZWiIWkJbrw8M=)
2: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: z7Wg/yYEe/naNZajz7OC8CRPdjQ8pKf0KALnyOn87iA=)
3: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: 7OGe5FP4HdWym7t2hyScbAIwjXWKAD0qUD149+q/PGY=)
4: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: O1SYsuH+O9dWW6LgLbXKRQezQd0QTg2T+y3+yaSnx9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13695 (0x357f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Validity
Not Before: Jun 12 15:03:52 2026 GMT
Not After : Jun 19 15:03:52 2026 GMT
Subject: CN=6a2c1fd8-6fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:3c:88:4e:6c:a0:66:a5:f9:9a:15:a6:f8:
00:e4:f8:21:63:2e:cb:6a:a9:84:ca:5e:a3:2b:93:
f8:71:1e:d7:23:50:8c:a0:2f:0c:9e:1c:e3:17:a1:
b1:fc:65:aa:f1:b1:af:1b:a0:49:95:f5:90:83:2f:
f9:58:29:7d:ad:7c:ef:21:d9:a5:29:f6:45:f4:49:
bc:5e:83:12:d7:12:4d:30:b3:f0:25:f3:cf:d1:89:
02:80:aa:1c:4e:c7:df:c1:25:fa:64:c6:29:c3:e1:
2d:f1:bb:f5:14:91:b2:05:e1:85:b3:94:e5:7e:ff:
d9:16:1b:67:de:36:4a:7d:a6:99:73:3e:a0:dd:97:
44:b2:a3:80:f2:e8:11:af:ac:8d:5f:1e:47:e4:a2:
95:cc:54:76:7b:9b:18:5c:aa:53:e6:69:93:f8:eb:
c9:63:f3:5b:95:b3:65:f9:cb:94:2b:32:63:90:7f:
0e:87:6f:05:56:5f:ad:f0:17:25:c7:d0:93:ed:0b:
89:e0:79:6a:00:67:1f:e0:3b:05:0b:59:9f:41:ae:
fd:cd:d4:95:a5:b3:03:2d:6d:5e:89:b3:35:51:08:
05:52:2b:9a:7f:03:e0:64:20:6b:54:d2:fa:2c:b5:
d9:ea:72:aa:27:85:f6:34:7b:21:cb:79:4d:bc:37:
b7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:87:BE:79:C4:2F:02:0A:59:40:96:FC:7A:A8:F3:39:DE:1A:D7:37
X509v3 Authority Key Identifier:
keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:0f:94:00:d4:38:d7:7a:0b:73:96:8b:ca:79:44:88:7c:19:
be:7e:32:54:dc:d6:00:6a:9e:57:c2:b2:7d:8a:18:33:08:8d:
14:97:80:fd:72:30:a7:e2:73:fe:ba:ce:42:82:cc:ec:ed:6d:
a3:da:3e:ef:34:a4:84:58:d2:8d:ea:fc:ab:34:0c:46:b7:43:
e7:4c:f0:9d:ba:85:99:ed:5e:95:eb:db:6d:88:08:c7:e8:86:
ce:a4:ec:0a:2e:13:eb:13:ee:be:a5:03:02:19:26:70:27:f2:
2f:f1:60:1a:84:1f:58:8b:7b:68:d3:a8:03:e0:48:cc:de:0a:
01:6b:e7:2c:69:c3:63:16:b2:a3:77:c9:3b:e8:54:35:89:c5:
81:cb:75:83:88:93:26:aa:b5:1f:ac:00:45:c7:67:e2:c8:70:
ba:f6:a0:4a:f0:76:b6:a4:b8:51:d2:f2:c6:cf:7d:48:97:02:
04:61:32:ce:22:35:dd:80:1f:de:32:3c:c5:29:e2:a9:7f:1e:
6e:6b:6d:c4:87:07:68:e0:81:91:47:e0:68:ad:92:66:77:53:
24:1b:5e:b5:63:23:6b:0f:60:fc:62:59:74:aa:50:bb:fc:74:
7c:2c:3e:df:34:1a:b1:9e:d3:1e:d9:da:9a:72:cd:ec:9c:be:
c2:47:04:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:19:21 2026 by rpki-client