
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
File: IL0_f5mO1D1fxPhindDBiOx92uA.mft (raw, json)
Hash identifier: df4HlSb+f/yM+QaGRPGbp7+Rl8nzMW0UaH5Y12b52L4=
Subject key identifier: 49:A8:63:54:4D:B4:15:14:10:5A:8F:55:D7:0B:D4:C5:0C:C2:44:FC
Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
Certificate issuer: /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
Certificate serial: 0225
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
Manifest number: 0220
Signing time: Mon 21 Sep 2026 02:50:46 +0000
Manifest this update: Mon 21 Sep 2026 02:50:46 +0000
Manifest next update: Mon 28 Sep 2026 02:50:46 +0000
Files and hashes: 1: IL0_f5mO1D1fxPhindDBiOx92uA.crl (hash: tDRy7h+ol24FevFaXLbfT6E6tGD4FXAhGzH0kgL+Vzc=)
2: 10EB474C730311EE9ADB6C46C4F9AE02.roa (hash: XdnJ86Ju/TwvVXOQmiqEGcvtwxhflxDC56ut32TAjmE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl
rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E9A4, serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
Validity
Not Before: Sep 21 02:50:46 2026 GMT
Not After : Sep 28 02:50:46 2026 GMT
Subject: CN=6ab09b86-e103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:69:c4:c1:95:19:8b:a0:46:f4:ea:28:86:
54:04:be:2f:01:d1:c7:b4:7b:cc:c7:c3:7e:51:bd:
fb:3b:04:37:4d:1e:43:c0:d8:d7:71:da:62:4c:06:
ad:d7:c4:d0:6b:f4:8a:6e:46:99:15:d1:e2:7a:52:
13:d2:ef:17:cb:d9:64:d8:fb:d3:1b:f4:ae:9e:53:
72:88:0e:14:31:d7:d3:59:99:12:4b:be:52:b9:b8:
cd:43:36:e8:1c:cc:03:ce:07:b6:5a:63:ef:22:8f:
41:c8:fd:6c:f3:34:a2:a7:98:e7:80:4a:0b:0f:d1:
a7:e5:f2:21:a2:d2:d2:4f:11:d0:be:90:37:8e:4e:
b2:8b:4f:83:05:c8:d7:fb:66:b0:2e:3b:14:e9:0e:
51:f9:b3:00:d8:b4:23:c2:fb:46:8d:9a:b2:9b:57:
9f:28:1f:8c:a6:66:f8:b7:96:14:6b:ae:dc:c1:23:
ef:31:36:d5:1f:6b:00:8f:54:2f:aa:4e:9f:36:31:
9b:90:cb:9a:1a:ee:c7:47:fa:db:df:12:87:a2:e0:
ac:82:4c:2d:75:e7:88:51:08:83:cf:91:15:82:80:
66:96:2f:a9:6e:21:be:38:0c:48:63:02:e5:11:bf:
19:1e:b2:f0:41:42:e2:af:37:2c:7b:3e:93:96:71:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A8:63:54:4D:B4:15:14:10:5A:8F:55:D7:0B:D4:C5:0C:C2:44:FC
X509v3 Authority Key Identifier:
keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:1d:c4:d4:01:f9:d6:4f:01:35:fe:86:8e:52:0a:28:cc:76:
ab:f6:2b:70:d6:d5:a6:59:69:7e:3d:21:57:4c:8a:77:03:3e:
4c:cf:01:7b:00:21:4c:57:93:5b:cf:ec:8c:be:1a:37:84:d8:
b1:92:e3:1b:a3:ad:66:53:36:f2:e6:15:ce:d7:56:85:e1:41:
ae:5e:63:66:b6:68:4a:88:2e:7c:d0:e5:62:6a:44:36:a1:3e:
b8:9a:3d:1f:26:8a:85:7a:d2:42:17:25:68:bd:b7:6c:f7:d5:
5e:77:30:b5:e9:15:b5:ba:78:e4:96:9b:82:c8:6f:98:4b:fe:
80:e5:87:a3:41:53:00:b2:ad:83:18:cb:2c:e6:4e:e9:45:85:
b8:97:c0:0b:2a:f6:8e:1d:7a:67:a2:e3:7f:47:72:18:35:1f:
ed:2d:ea:78:ad:0b:56:26:95:11:e8:8f:4e:ee:24:9c:7a:30:
ce:55:ed:b9:17:3f:3a:f5:eb:54:1e:a7:1c:fd:a8:3a:46:9f:
4f:b6:4a:d7:6e:a9:88:de:69:a4:b0:8a:3e:2c:b8:b8:5a:b5:
0e:4a:6c:59:be:74:27:8a:a9:c4:63:e3:bd:42:e2:dd:c3:7a:
46:18:c2:10:2b:b9:b9:9d:4b:80:bb:89:6d:37:7b:34:b4:2a:
ab:5e:6a:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU5QTQxMTAvBgNVBAUTKDIwQkQzRjdGOTk4RUQ0M0Q1RkM0Rjg2MjlERDBDMTg4
RUM3RERBRTAwHhcNMjYwOTIxMDI1MDQ2WhcNMjYwOTI4MDI1MDQ2WjAYMRYwFAYD
VQQDEw02YWIwOWI4Ni1lMTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArRlpxMGVGYugRvTqKIZUBL4vAdHHtHvMx8N+Ub37OwQ3TR5DwNjXcdpiTAat
18TQa/SKbkaZFdHielIT0u8Xy9lk2PvTG/SunlNyiA4UMdfTWZkSS75SubjNQzbo
HMwDzge2WmPvIo9ByP1s8zSip5jngEoLD9Gn5fIhotLSTxHQvpA3jk6yi0+DBcjX
+2awLjsU6Q5R+bMA2LQjwvtGjZqym1efKB+Mpmb4t5YUa67cwSPvMTbVH2sAj1Qv
qk6fNjGbkMuaGu7HR/rb3xKHouCsgkwtdeeIUQiDz5EVgoBmli+pbiG+OAxIYwLl
Eb8ZHrLwQULirzcsez6TlnFWhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEmoY1RN
tBUUEFqPVdcL1MUMwkT8MB8GA1UdIwQYMBaAFCC9P3+ZjtQ9X8T4Yp3QwYjsfdrg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTlBNC8wRDVEQzUyNDcz
MDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVtTzFEMWZ4UGhpbmREQmlPeDky
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lMMF9mNW1PMUQxZnhQaGluZERCaU94OTJ1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTlBNC8wRDVEQzUyNDczMDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVtTzFE
MWZ4UGhpbmREQmlPeDkydUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvR3E1AH51k8BNf6GjlIKKMx2q/YrcNbVpllpfj0hV0yKdwM+TM8BewAhTFeT
W8/sjL4aN4TYsZLjG6OtZlM28uYVztdWheFBrl5jZrZoSogufNDlYmpENqE+uJo9
HyaKhXrSQhclaL23bPfVXncwtekVtbp45JabgshvmEv+gOWHo0FTALKtgxjLLOZO
6UWFuJfACyr2jh16Z6Ljf0dyGDUf7S3qeK0LViaVEeiPTu4knHowzlXtuRc/OvXr
VB6nHP2oOkafT7ZK126piN5ppLCKPiy4uFq1DkpsWb50J4qpxGPjvULi3cN6RhjC
ECu5uZ1LgLuJbTd7NLQqq15qpw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:58:43 2026 by rpki-client