
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
File: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft (raw, json)
Hash identifier: 8zriJhnvhEetisf0w39x5FJSgsVo1dqNhf4UXykV75E=
Subject key identifier: 7C:54:B0:00:15:CF:12:E8:D9:FC:C8:EA:D5:56:28:5D:A8:ED:2B:7C
Authority key identifier: 22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39
Certificate issuer: /CN=A9197B7B/serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
Manifest number: 2D
Signing time: Fri 17 Apr 2026 08:24:37 +0000
Manifest this update: Fri 17 Apr 2026 08:24:37 +0000
Manifest next update: Fri 24 Apr 2026 08:24:37 +0000
Files and hashes: 1: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl (hash: +7HsbqIiG1fDmRgWAbboR+wST3YQLq46yoQtyjxBf8o=)
2: 153BBC22FBEC11F094C0A6516D6F56BC.roa (hash: Fa+JKx4M6Yd97D4JU6xtHSXgVRciDGQpK7A4XgrvaWo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl
rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:24:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197B7B, serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39
Validity
Not Before: Apr 17 08:24:37 2026 GMT
Not After : Apr 24 08:24:37 2026 GMT
Subject: CN=69e1ee45-3810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:2c:52:e8:fc:22:ea:12:db:52:b1:80:e9:
8e:09:4a:c4:e0:9b:9e:de:47:4c:fc:c8:45:e0:a3:
bf:a6:8f:2a:2e:68:43:71:33:2d:2b:92:16:c7:1c:
3c:2f:35:df:cc:d6:02:97:19:b0:2d:1f:e4:a8:84:
c8:7e:ce:38:d8:b1:2e:e6:4b:06:49:b0:3c:62:65:
2c:7a:64:c5:29:13:15:c9:9c:03:03:16:44:b6:34:
66:93:f0:fa:51:d4:2d:7a:59:76:3b:3e:90:10:b0:
6a:a7:9f:1f:5f:f6:9c:13:41:1c:b7:23:2d:dd:3a:
54:23:96:d2:1b:64:76:38:8a:9a:d4:bc:f6:98:3b:
da:8f:fc:36:b9:97:68:77:2c:48:16:a9:f3:54:44:
fa:87:94:ee:84:b8:5c:0a:be:f7:80:51:39:1f:02:
07:04:98:32:4a:47:c0:32:45:f4:71:6f:1a:8b:5e:
ea:3e:fe:9d:64:3b:19:40:12:57:94:2e:de:0a:db:
60:eb:e7:74:dc:07:d6:eb:46:74:c0:f0:a5:33:01:
2d:0c:f4:b4:4f:ac:f3:ee:9d:de:d8:e1:e7:75:66:
42:df:e7:e4:b5:4e:40:b8:a8:42:e8:49:b8:30:df:
33:db:f4:22:ba:3f:1a:d6:54:f2:05:73:dd:da:89:
40:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:54:B0:00:15:CF:12:E8:D9:FC:C8:EA:D5:56:28:5D:A8:ED:2B:7C
X509v3 Authority Key Identifier:
keyid:22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:36:75:52:a1:ec:25:be:9c:d9:dc:a7:c4:f3:70:db:bc:c2:
3c:6e:1d:a4:4a:1a:52:f0:d8:dc:66:6b:a3:81:69:86:fd:ce:
eb:10:f3:af:34:25:0e:d0:8e:8a:c8:07:f4:51:b4:3c:29:d8:
ae:0c:5b:8f:4e:e7:3f:a9:6f:c6:c0:35:97:bf:35:ed:92:b5:
c8:4c:e7:95:da:5b:13:18:ec:74:49:7e:e5:ba:d5:7f:a2:03:
8b:d8:a3:c5:6e:67:94:9a:8e:79:e4:dd:8b:5c:89:94:70:79:
3e:0a:1c:da:11:ee:0e:4f:09:21:df:67:b8:19:cf:fd:65:93:
22:76:85:c0:d9:c5:2b:fb:97:d1:3f:9b:44:bc:17:2a:82:fe:
f3:3c:fb:82:7e:e1:28:61:8a:85:5d:e3:14:96:59:41:2b:83:
26:e4:f9:ef:00:e3:4a:f1:21:ce:92:ce:14:a4:54:8f:16:4d:
54:a5:a6:e3:b1:9b:a0:b8:e2:24:e5:91:f6:3f:38:e0:0c:8a:
93:db:24:ca:4f:4c:50:59:f5:f0:68:3c:fe:be:0f:96:02:3b:
0e:64:b1:0d:04:c1:99:66:ae:1c:6e:cb:7f:64:88:65:2b:7f:
27:cf:16:29:42:6b:eb:09:47:76:31:c2:ce:28:69:76:10:02:
34:59:d4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:20 2026 by rpki-client