
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
File: IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft (raw, json)
Hash identifier: TOxiDGX50L//WcmfWwj3/cRcdHo22f7Uh/KoMhA6ut8=
Subject key identifier: 6F:76:36:85:6D:56:5D:49:CC:62:6E:8E:14:69:EF:18:B8:34:AB:1D
Authority key identifier: 20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E
Certificate issuer: /CN=A918C2EB/serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
Manifest number: 5B
Signing time: Sat 13 Jun 2026 08:15:26 +0000
Manifest this update: Sat 13 Jun 2026 08:15:25 +0000
Manifest next update: Sat 20 Jun 2026 08:15:25 +0000
Files and hashes: 1: IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl (hash: W2TC3BDLv1GafQ7wDHS64S2Mz7sFzvpl/SVehtd11sg=)
2: 9B67FC6CE61511F0BA7CC46D6A6F56BC.roa (hash: RXKHt1MxZAi094IIW7YlJh5giMLTwFT/Xi1lVrRSFcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl
rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C2EB, serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E
Validity
Not Before: Jun 13 08:15:25 2026 GMT
Not After : Jun 20 08:15:25 2026 GMT
Subject: CN=6a2d119d-cdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:75:e7:00:5a:4f:62:64:68:db:9c:e4:07:
c7:cd:dd:67:56:03:c5:61:a5:a8:a0:33:80:3d:58:
b0:3c:8c:b3:9a:fd:cc:d9:cd:ae:04:c6:dc:8b:30:
a4:83:40:1e:4b:82:65:67:4c:bb:03:2e:00:c7:9e:
f1:7b:f0:f7:b9:dd:b0:a8:d9:81:49:1e:43:db:7f:
3e:20:b2:42:30:10:92:3e:87:ce:b6:64:a5:c0:60:
16:5a:da:c3:f0:4b:66:ba:c7:85:d6:1d:dd:14:c7:
33:ea:59:86:72:8b:80:f4:fe:d2:4f:c6:27:c0:7e:
db:05:5a:f7:35:81:fc:0a:ab:d2:3a:42:a4:0d:bc:
04:5d:75:60:02:68:71:cc:75:00:6a:1f:30:9d:ab:
2d:a2:09:c8:42:f6:ed:9f:7e:d6:4d:4d:83:09:86:
58:cd:78:93:50:1d:70:47:0c:57:8f:53:8f:b8:b6:
ee:f9:67:06:a5:82:a6:a9:54:46:c7:81:59:3e:c2:
45:86:53:07:2a:d7:0e:ca:cb:fb:dc:46:08:88:aa:
34:4f:55:29:91:10:64:9a:77:8c:95:40:cf:42:2c:
e2:75:66:f6:35:ac:99:90:03:7c:fa:fa:ce:cd:48:
2d:54:a8:8b:35:c5:57:40:28:df:48:8d:6a:6c:f8:
ef:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:76:36:85:6D:56:5D:49:CC:62:6E:8E:14:69:EF:18:B8:34:AB:1D
X509v3 Authority Key Identifier:
keyid:20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d7:56:51:e0:a4:e6:b2:40:83:ff:d2:04:a6:e4:8e:a0:e8:
b1:b3:16:c5:87:69:2b:34:1b:53:9a:c9:13:ba:de:b1:bf:f9:
40:2c:92:ae:6a:e2:6c:d4:4f:3a:31:6b:5d:7f:b9:a1:4e:2d:
7e:7e:f5:9b:31:14:bb:4b:c6:2e:29:4f:a4:68:de:a8:ac:78:
fc:40:b2:d0:0c:59:7d:61:8a:1f:db:a2:be:e7:02:70:0b:9c:
08:f5:c5:a2:4f:c7:ab:a0:a6:86:b0:b6:e9:47:a4:35:20:68:
11:08:b7:cf:25:2b:24:41:4b:88:50:8e:ea:70:e3:26:77:17:
45:79:d4:95:69:12:64:e2:07:b0:ba:ff:2a:68:1c:b0:c2:03:
23:19:8e:0a:b2:cd:ec:4f:07:ff:41:7b:60:c5:06:61:c4:9d:
17:2f:37:3f:0e:67:e0:2d:85:24:6b:61:dc:73:81:ff:e0:2a:
a5:1a:e1:9b:76:c9:11:df:d1:84:56:ef:29:fd:c7:c9:f7:9e:
85:8f:e6:12:ed:4c:2b:b8:47:08:9b:3e:5a:ac:65:b0:a8:87:
c9:45:1c:06:ba:b8:bd:3b:35:5f:c6:1a:af:d6:16:27:78:e0:
a3:7d:59:dd:d2:f9:80:d0:4c:42:13:1c:3b:fc:ab:23:b7:13:
08:3c:f4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:51:51 2026 by rpki-client