
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
File: IjvhmJLm5stAbl-plW3bzqlcu0Y.mft (raw, json)
Hash identifier: LlNxS4mIL5a2NZLKFdGACsP3En6PToHbUFUoo0+0Bt8=
Subject key identifier: F1:BB:95:75:38:5A:E4:6F:F4:29:F0:2F:7E:C9:70:52:0A:30:DA:D9
Authority key identifier: 22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46
Certificate issuer: /CN=A918E6B7/serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46
Certificate serial: 10FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
Manifest number: 10EC
Signing time: Tue 28 Jul 2026 17:23:54 +0000
Manifest this update: Tue 28 Jul 2026 17:23:54 +0000
Manifest next update: Tue 04 Aug 2026 17:23:54 +0000
Files and hashes: 1: IjvhmJLm5stAbl-plW3bzqlcu0Y.crl (hash: Zmecv1rpnl1Hu1T7rB79Fpqa1IK/F94qAZYbkaJawB4=)
2: 42CBE6BE29F111EEAECAED6FC4F9AE02.roa (hash: a8kvW6Orzqu3ANz5V7LVYSu6qTioAnb21VQHXAb65ds=)
3: 608836D046B111E98B793856C4F9AE02.roa (hash: CkPn2ZJIX2L7WrIqMPI/SIicfwibPMx/ZU7x2GuJAkw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl
rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4348 (0x10fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E6B7, serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46
Validity
Not Before: Jul 28 17:23:54 2026 GMT
Not After : Aug 4 17:23:54 2026 GMT
Subject: CN=6a68e5aa-87f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:a5:7a:b1:60:f3:e0:c7:60:df:b6:8b:b7:
45:36:98:e8:f7:5f:92:96:26:f8:01:5e:d6:c6:af:
0f:4f:18:b9:e6:f5:69:c8:a6:95:12:f5:db:f2:f2:
7a:65:72:91:9c:7c:37:a6:b4:ae:7f:35:5a:97:29:
f5:89:3b:10:d5:5e:95:e4:ff:46:5c:6a:3b:03:d1:
f2:5c:53:c0:40:49:dc:23:ad:bb:30:26:07:07:b9:
0a:43:7a:41:5e:8e:a2:3f:cc:d5:db:9d:2b:1f:76:
00:0f:7e:94:35:bc:7c:f9:46:1c:ed:9c:46:44:6a:
71:af:cd:3a:d0:56:d9:f3:4c:15:50:50:7d:c9:49:
f5:1c:fa:94:6d:0e:c8:54:e7:d1:46:be:b3:03:dc:
e3:cb:f4:46:04:c3:2f:cb:aa:36:19:15:08:d2:31:
87:50:d7:02:f2:97:7b:ab:96:ce:be:42:bd:f3:27:
a3:a1:92:b7:47:53:17:f4:89:6a:fa:a0:d2:8d:7f:
37:4a:5e:7c:e8:19:6a:7a:ca:f7:cd:a7:98:41:cf:
84:2a:40:c7:c2:25:ad:e2:bb:76:d7:3f:39:f1:1a:
9e:95:af:d7:88:db:41:eb:7a:39:63:f0:f3:20:f0:
53:37:7e:86:99:31:73:f0:40:1f:49:33:29:55:d7:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BB:95:75:38:5A:E4:6F:F4:29:F0:2F:7E:C9:70:52:0A:30:DA:D9
X509v3 Authority Key Identifier:
keyid:22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:36:86:b9:9d:30:89:81:ef:6e:1e:8b:0b:f0:b6:5c:e1:cc:
b7:dc:50:35:6f:80:68:be:36:b0:d1:34:06:a2:90:68:b7:ce:
e8:a7:cc:46:c9:17:20:89:1c:81:72:ef:8b:b6:21:d0:0b:a0:
ac:3a:8a:34:df:f3:83:55:33:a8:e3:3b:73:6d:98:75:f0:5c:
c9:0d:71:0f:aa:1a:af:55:4b:3d:bb:9b:fe:74:79:9c:7b:14:
d5:68:de:ef:78:d8:98:b5:67:4f:d8:e8:c6:fe:76:a7:e6:4f:
26:40:f1:74:af:36:1c:3a:9e:bb:c4:f1:8c:e0:95:8a:99:cd:
65:fb:16:4f:0c:c9:77:74:db:ef:ca:6d:0b:f8:97:63:0a:99:
96:5a:e8:ae:6b:eb:85:29:ff:84:88:4c:b0:e6:70:10:70:c1:
95:de:22:f5:fa:e0:3e:e4:44:cd:d9:05:60:e6:e9:64:d4:50:
9c:2f:08:10:73:f6:5b:70:ed:80:74:66:b4:71:e8:a3:57:b5:
bc:07:18:98:7d:6b:32:8f:dc:55:4a:db:4d:3f:7c:99:1f:8c:
b5:37:25:56:b4:8e:5b:1f:82:8d:7d:ed:7d:d4:36:ea:8c:a7:
4c:55:ed:64:ae:bf:30:6d:27:97:06:bd:b4:f7:01:d0:07:05:
6b:b4:f0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:55:47 2026 by rpki-client