
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
File: iEjsDto5b-IU7sAxfw9RuRjW_O4.mft (raw, json)
Hash identifier: 7zj2udnDFUi3IPmX2fDY0UZphllR4QK/g1ndd+RuDrY=
Subject key identifier: 20:D5:EE:ED:80:51:35:CA:40:BF:E0:38:7C:80:71:E5:B9:91:3D:C7
Authority key identifier: 88:48:EC:0E:DA:39:6F:E2:14:EE:C0:31:7F:0F:51:B9:18:D6:FC:EE
Certificate issuer: /CN=A9190A18/serialNumber=8848EC0EDA396FE214EEC0317F0F51B918D6FCEE
Certificate serial: 48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
Manifest number: 3F
Signing time: Mon 27 Jul 2026 10:55:48 +0000
Manifest this update: Mon 27 Jul 2026 10:55:47 +0000
Manifest next update: Mon 03 Aug 2026 10:55:47 +0000
Files and hashes: 1: iEjsDto5b-IU7sAxfw9RuRjW_O4.crl (hash: 5V4Cg6yCsVXVC3ESNBERKz8IKMsj9yjXYmEm0uZkWM0=)
2: 52E7D8963D6711F19B0B1A66AE833773.roa (hash: D4eeMtM0vlvOieXn6mH3kJIRvN6LTz+MNbPoGWUcWyw=)
3: 30C6735E371C11F1AB220340C9833773.roa (hash: r1zttv5Tg4fvomOU2T9kTIcd0o8O/m74nqkwAFCr7V8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.crl
rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:55:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190A18, serialNumber=8848EC0EDA396FE214EEC0317F0F51B918D6FCEE
Validity
Not Before: Jul 27 10:55:47 2026 GMT
Not After : Aug 3 10:55:47 2026 GMT
Subject: CN=6a673934-83a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9f:fb:14:13:f0:87:4a:cc:4e:44:14:b4:b6:
4b:83:1f:49:4a:54:f5:ae:bd:ce:98:a5:8c:28:72:
1d:0e:a2:6f:0a:76:45:52:32:fd:a4:ff:47:a2:b0:
95:c9:4e:cb:50:73:cc:f4:87:23:38:8b:0d:99:39:
cb:1c:12:76:68:8d:7a:a1:a8:71:91:29:03:66:d9:
ed:d3:43:1f:fb:6f:4d:05:f8:2a:d5:70:7d:d7:ff:
40:32:a1:a8:a0:5b:e8:1b:57:7f:9e:6c:36:d2:7c:
f7:3b:35:25:cf:9b:a5:78:de:f6:3e:07:04:ec:85:
32:de:f1:3f:2e:7c:ca:da:ae:31:e4:8d:56:f1:71:
c2:2d:fa:92:43:fa:e2:6c:d8:04:05:0d:5c:a8:cb:
7b:22:13:2c:e2:98:87:58:0b:d6:5e:3b:1c:06:65:
77:c2:0a:bd:d4:54:42:8b:dc:68:7d:36:09:6f:8d:
84:07:6b:dd:46:38:88:85:8d:20:13:8f:3b:fb:00:
f0:97:51:9b:5c:c9:8b:ae:4e:e9:9a:8d:e5:06:0f:
d7:f9:a3:93:b4:5d:18:b9:ca:6f:86:9a:04:2a:ec:
eb:7b:1b:7a:5b:89:b1:f4:23:2e:6d:03:31:0c:26:
26:4f:0e:7c:fc:e5:33:8e:82:c1:3e:7d:b4:71:a8:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D5:EE:ED:80:51:35:CA:40:BF:E0:38:7C:80:71:E5:B9:91:3D:C7
X509v3 Authority Key Identifier:
keyid:88:48:EC:0E:DA:39:6F:E2:14:EE:C0:31:7F:0F:51:B9:18:D6:FC:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:2b:cb:42:2e:3f:4b:b5:cc:c2:53:83:18:4b:39:91:64:e4:
38:75:e8:21:62:57:68:a7:2a:95:1f:58:21:48:fb:d0:4e:35:
c8:82:91:63:67:58:dd:f1:5f:9f:3a:5d:a6:b9:7b:cb:13:a7:
00:0c:34:ee:15:4f:8a:55:f2:5b:d4:1e:5e:65:b5:dd:3f:11:
f2:19:1b:45:e6:fd:53:c7:49:14:50:a6:30:f4:f5:43:fb:c2:
0d:a5:7b:77:4e:89:a7:6c:24:0e:ae:df:12:37:ec:54:26:d6:
f5:dc:95:01:c6:52:44:bb:56:b0:12:26:b7:f6:f0:67:1c:28:
ba:86:f5:e6:b2:42:21:d0:87:b3:92:4c:65:b0:e7:88:6e:54:
77:66:6b:4d:6c:e7:26:5a:fe:3a:be:40:e8:dc:4a:e9:fd:e5:
83:5e:ea:7f:be:bd:1f:ef:9c:e6:2f:75:e9:50:2f:69:1e:b1:
07:c0:a9:39:37:fd:3a:06:26:d8:b5:67:8e:c4:62:df:18:f0:
b1:54:65:24:ca:25:25:f5:97:bf:7e:ed:56:08:a8:37:e0:79:
95:31:91:a8:09:5c:f7:22:84:ea:52:9a:4c:72:02:77:e8:28:
63:ea:56:ba:71:06:61:7e:95:f8:42:7d:5f:c7:e8:25:0e:19:
dc:ab:27:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:20 2026 by rpki-client