
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json)
Hash identifier: F6mDmDCTVee7wU8h+MuKHWY0bEg2NLKlE0nItUtDRMA=
Subject key identifier: 5A:19:CF:E6:37:E6:91:0D:80:F8:8A:EE:FE:F4:CD:E8:C4:D9:8F:D6
Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Certificate serial: 1757
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
Manifest number: 173A
Signing time: Tue 28 Jul 2026 16:42:29 +0000
Manifest this update: Tue 28 Jul 2026 16:42:28 +0000
Manifest next update: Tue 04 Aug 2026 16:42:28 +0000
Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: 8JwyXwvPnygSM1DgpDkazVNcxoePZMKKJS0re7xE/Jw=)
2: E259315C57CA11EA8D931284C4F9AE02.roa (hash: bxgVx+Ckcae/iQQ31WregWFbQ2YBNnnGGH36C1uq1eE=)
3: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: sk2XL2BNft3Qb5DlW0IYmAxdXBhZMlrkB9WLp+WKc50=)
4: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: ABbCRm4169Zmlom/mbAM7SPDMmE+tdeoPLo48LZrXpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5975 (0x1757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Validity
Not Before: Jul 28 16:42:28 2026 GMT
Not After : Aug 4 16:42:28 2026 GMT
Subject: CN=6a68dbf5-c47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:15:8c:78:c8:35:ef:1c:cb:ab:0b:aa:d6:e9:
fe:0a:2c:a8:a4:7f:f4:71:a6:64:ab:db:6d:a5:27:
8e:00:b8:18:9a:dd:71:4b:5e:ea:f7:00:cf:9f:ca:
e6:5c:88:2b:70:cd:6f:55:6c:32:6b:cc:11:3c:00:
09:09:01:ff:c9:fd:10:21:7a:9b:d0:63:d3:db:94:
62:11:b4:86:56:3f:74:c7:5f:3b:df:2c:52:15:fd:
b4:81:27:60:c3:2f:85:65:a5:fd:b3:85:55:9c:13:
2f:1e:3d:db:12:07:4c:73:3b:8d:d6:90:9d:a5:de:
6f:6a:5f:87:63:73:fa:ce:c9:4b:4a:99:34:a2:5e:
23:ac:7c:73:e4:78:85:0d:96:dc:35:03:dc:a3:46:
08:1f:72:48:d7:13:d4:99:bb:7a:8b:c2:ef:30:16:
57:31:38:26:48:2a:fb:94:94:f3:e9:c7:bc:91:b8:
6b:d8:b2:68:c4:64:ed:47:a1:44:35:f4:34:bb:88:
96:ec:26:e5:b6:4e:8a:ff:f1:04:79:7b:08:ff:ec:
3f:0a:f5:c2:5f:5c:1d:4d:62:4a:df:0b:f2:a0:c0:
15:03:ad:d0:4f:ed:8c:5b:f3:a8:c8:c4:79:24:04:
0a:0e:25:26:af:55:da:62:d2:9c:6f:cc:8e:a7:bc:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:19:CF:E6:37:E6:91:0D:80:F8:8A:EE:FE:F4:CD:E8:C4:D9:8F:D6
X509v3 Authority Key Identifier:
keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b3:8b:1e:e3:6c:ee:64:59:73:ee:0e:ac:a9:4a:69:d3:4e:
f2:af:ad:ea:79:3c:38:c0:b4:cf:c8:0e:09:35:7c:df:77:cb:
4a:bc:47:ba:b2:16:04:a2:76:39:dc:28:0d:c9:36:fc:8c:25:
eb:4d:dc:c4:13:95:7a:f0:e3:13:ab:dd:43:d1:80:56:be:31:
08:47:e5:11:7b:fa:80:e9:0a:55:b4:f5:ce:d8:c0:9d:d8:c6:
c6:23:ba:af:b5:36:b3:a7:1d:68:c7:6f:95:85:17:1b:1f:df:
a3:a5:9c:f4:7a:ae:e9:d8:fc:a9:b7:ce:88:39:e3:02:92:49:
4f:dd:9a:09:b1:e4:6c:3a:1c:b9:73:eb:6e:d8:0a:09:1e:a8:
61:c7:23:19:c1:59:d3:07:56:32:e7:54:2e:a9:2a:3a:b4:6c:
31:19:d5:41:ef:88:b3:63:ba:5f:cc:e7:93:ff:d3:b5:ab:25:
52:bf:e8:ab:ce:66:5b:c9:e9:1f:ce:6c:f7:d8:78:6e:ac:e3:
b3:55:55:8f:75:54:9d:1a:48:ad:7d:81:fd:f6:0f:f8:16:1a:
0b:04:46:2a:05:ba:d3:ee:5a:29:7a:26:91:e5:e2:2f:a0:0d:
85:5b:82:1e:fe:be:91:8d:51:da:d2:68:6f:9a:85:ba:1e:ca:
9d:9d:13:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:05 2026 by rpki-client