
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
File: iEjsDto5b-IU7sAxfw9RuRjW_O4.mft (raw, json)
Hash identifier: r67IIZjq/AwOqNevqcnmpDHDBk1OpFRNp9TVKJQUZU4=
Subject key identifier: 58:7B:81:3D:1A:82:8C:1E:67:E2:DC:CB:EA:D5:38:BC:2B:34:E0:8C
Authority key identifier: 88:48:EC:0E:DA:39:6F:E2:14:EE:C0:31:7F:0F:51:B9:18:D6:FC:EE
Certificate issuer: /CN=A9190A18/serialNumber=8848EC0EDA396FE214EEC0317F0F51B918D6FCEE
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
Manifest number: 0C
Signing time: Fri 17 Apr 2026 08:54:02 +0000
Manifest this update: Fri 17 Apr 2026 08:54:02 +0000
Manifest next update: Fri 24 Apr 2026 08:54:02 +0000
Files and hashes: 1: iEjsDto5b-IU7sAxfw9RuRjW_O4.crl (hash: 6TQEkILZD8A9d+Ds7gNyYUXyOrJZ7/doFAeTMCeKAPs=)
2: 30C6735E371C11F1AB220340C9833773.roa (hash: r1zttv5Tg4fvomOU2T9kTIcd0o8O/m74nqkwAFCr7V8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.crl
rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190A18, serialNumber=8848EC0EDA396FE214EEC0317F0F51B918D6FCEE
Validity
Not Before: Apr 17 08:54:02 2026 GMT
Not After : Apr 24 08:54:02 2026 GMT
Subject: CN=69e1f52a-571a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:1f:5b:02:db:b8:49:28:1e:35:d0:f8:71:
e9:d5:f1:fb:7a:ac:26:1e:8a:99:ea:3d:26:79:16:
2e:6a:15:c5:56:ea:11:28:5b:98:8a:b8:3b:33:f1:
85:6f:39:84:01:37:f7:bd:e2:f1:03:c8:c3:fb:e3:
7b:25:90:d9:b3:b1:00:89:a2:3f:e0:82:eb:e2:e4:
ce:a6:ae:b1:b8:82:42:7f:f9:9e:74:9c:95:0b:e2:
52:2c:d6:03:de:99:43:75:f8:f4:37:2f:27:00:89:
2b:63:ed:9d:6a:36:05:22:e8:6f:50:22:f8:1c:8e:
ea:68:a2:1f:22:8c:20:52:1e:c5:f5:8e:49:c3:60:
9c:78:9a:b9:a0:6d:e4:f9:49:ab:60:15:e0:16:b5:
51:aa:11:7d:c3:7d:d2:76:a7:9f:c3:af:0d:28:04:
f1:54:bb:36:eb:5d:ff:47:0a:eb:b2:16:8f:92:47:
50:f3:b0:1f:4b:41:59:f1:67:95:8a:07:68:fd:45:
4a:a2:6f:ce:0f:19:f7:f5:37:6b:b0:3e:bb:e3:0a:
6d:65:ee:09:d3:f2:e1:92:e3:16:0f:be:7d:0c:23:
db:32:95:cb:fd:8b:a0:74:2a:47:f1:0f:88:ce:f8:
46:47:17:e9:d2:a1:69:93:a4:76:ce:d2:c4:81:f4:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7B:81:3D:1A:82:8C:1E:67:E2:DC:CB:EA:D5:38:BC:2B:34:E0:8C
X509v3 Authority Key Identifier:
keyid:88:48:EC:0E:DA:39:6F:E2:14:EE:C0:31:7F:0F:51:B9:18:D6:FC:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8f:9a:4b:65:d3:8a:92:d1:95:58:52:06:22:2b:11:db:eb:
4e:39:d5:d4:ab:cb:39:b4:13:17:91:c6:f6:fa:14:f0:87:85:
e4:98:3c:5d:ac:df:d4:77:8a:e6:a1:d6:a4:5b:25:be:05:60:
3d:0b:4b:bd:55:c7:b2:70:05:eb:4b:45:be:68:0b:ec:ac:bf:
c4:14:c8:4d:b7:22:a8:ce:bd:b9:39:81:c4:67:79:e8:d2:17:
ab:a0:a2:da:b6:b0:6d:19:09:40:b2:a6:93:31:0b:24:11:5c:
25:3a:42:e5:d5:46:5c:79:49:57:76:52:bf:b1:35:c7:46:05:
0a:d5:0a:ed:17:08:14:67:97:bb:6c:91:b3:e8:9f:3b:2b:74:
3d:c5:70:3b:49:6c:92:74:10:aa:e1:ec:3a:82:3d:d1:57:1c:
07:f8:f5:60:d2:6b:a3:d1:8e:b0:1c:3c:a5:51:15:05:3b:47:
9f:a0:31:94:1d:ad:b2:79:06:ae:35:ec:98:9c:71:cc:0e:a3:
18:7e:2a:d7:c2:ed:e3:3e:f0:be:12:17:2e:0d:1c:18:f6:08:
36:e3:e6:69:9d:6f:7f:49:be:f6:02:50:63:1a:24:8d:d8:17:
04:9a:e6:d1:2a:b4:57:ac:26:30:a4:9d:d2:a4:3c:56:2f:32:
6f:18:b0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:46 2026 by rpki-client