
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft
File: iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft (raw, json)
Hash identifier: 7Qrl/jS8OHKCcHvE/ZkkpJneM+s7PHH6H7J3df12xV4=
Subject key identifier: 4E:AE:09:3F:D9:8A:EE:CB:BB:A5:AB:F5:9F:5B:B0:B4:62:5E:A1:C4
Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98
Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft
Manifest number: 9C
Signing time: Sat 13 Jun 2026 07:24:56 +0000
Manifest this update: Sat 13 Jun 2026 07:24:55 +0000
Manifest next update: Sat 20 Jun 2026 07:24:55 +0000
Files and hashes: 1: iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl (hash: i08COzBrU2UlYqLXyoRAvkry7MGmhikYWDWc1j0D+tA=)
2: 8AF73C7E7BF511F0BEBF8326C4F9AE02.roa (hash: 16ronhpfPjZ1J9jMJniqcKd5ZSFxc1jnc1AmD+Jt630=)
3: 8B58F72A7BF511F0BEBF8326C4F9AE02.roa (hash: g58X+cu42Kh2zFwQ2h9g38vEcazE0TvlqkeIHRWL2eA=)
4: 8A65797E7BF511F0BEBF8326C4F9AE02.roa (hash: iP831x/fULSZ/fmDwuHrWqBHoTP+BYRChB7pWllsa7M=)
5: 5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa (hash: DLNHUZHuS4L6pQW1+bd0pYlrjjNIUCRkspT0sawq79s=)
6: 8938B9DA7BF511F0BEBF8326C4F9AE02.roa (hash: Y8LpukABBo/pP9eZZ75cumiepSudrb+yKJGkwACmG7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl
rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98
Validity
Not Before: Jun 13 07:24:55 2026 GMT
Not After : Jun 20 07:24:55 2026 GMT
Subject: CN=6a2d05c8-b435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b2:b3:76:5f:10:21:e8:17:21:37:67:2f:93:
b4:9f:3c:48:4b:85:98:b9:7f:49:8e:54:51:f7:ca:
48:f5:b9:60:3b:a1:83:a3:52:da:28:aa:78:d2:1b:
36:15:84:32:7f:e6:ae:a0:71:e8:85:a9:57:e6:14:
77:05:8c:c0:5e:9a:36:63:25:66:7b:ab:d8:7f:ed:
3a:f3:76:fb:2f:2c:ae:26:3f:9b:10:ba:68:2e:fd:
d1:65:3e:cf:63:d5:9c:ed:2c:cb:b9:49:08:96:cd:
50:c9:2f:63:4a:8f:b9:b0:c2:34:42:7d:e2:f0:e2:
60:9f:85:a6:45:89:ba:b0:d1:69:48:09:16:9f:45:
8b:80:5b:e7:f6:c8:2c:d8:b3:1e:42:50:ac:16:6e:
93:dc:64:d1:86:49:4e:1f:e6:97:7a:bd:74:c9:24:
bb:e9:9d:ff:14:ea:de:f0:41:09:e5:b0:62:44:fc:
6c:93:db:92:47:b0:7d:4f:b9:78:d1:f7:36:b0:bf:
1f:aa:8a:ee:83:8f:5f:b1:81:0f:28:9d:36:3a:ec:
76:1e:86:39:b0:c1:94:e0:68:18:63:30:3c:27:6e:
7e:00:80:e2:e4:b2:aa:19:50:73:8a:e8:6e:1f:8f:
01:0b:a9:8c:64:2a:00:d7:8b:f4:cf:93:85:c6:8e:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AE:09:3F:D9:8A:EE:CB:BB:A5:AB:F5:9F:5B:B0:B4:62:5E:A1:C4
X509v3 Authority Key Identifier:
keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a9:eb:ca:ea:f0:55:22:76:5d:fa:32:f7:0e:d6:93:05:16:
58:ab:fc:52:96:91:f1:ab:a2:62:59:8a:09:8a:e2:fa:ac:32:
85:60:43:c2:48:37:f2:ba:1f:24:0c:aa:66:f2:e2:d1:f5:92:
ee:49:ae:ea:c1:f2:19:f6:b9:8f:3b:28:68:90:33:99:84:16:
7c:6f:af:9c:02:c7:06:b0:9a:78:bc:19:59:b7:25:09:8c:ec:
9d:74:b3:b9:c7:79:ab:f5:c7:c5:3d:7d:1e:1f:f0:6e:77:bd:
c5:63:a0:d9:62:0e:6b:8d:ef:b7:7e:e4:e0:72:84:7c:b3:be:
b6:c2:72:6a:b0:a1:c1:97:8b:d0:a5:d0:bd:12:91:ca:20:a7:
b4:a6:9f:6f:87:8c:70:3b:72:ff:17:ff:56:2d:8c:c0:8c:e3:
bd:58:b5:aa:11:7f:d9:07:6a:fb:bc:a6:bf:f8:80:48:b5:4f:
b1:70:af:6c:94:ae:ec:54:d3:fc:ba:bd:e7:c6:ba:bc:06:50:
69:cf:bc:fb:70:7e:2e:a5:1a:95:4c:98:36:54:29:df:f2:ec:
5b:82:13:7a:53:84:05:13:3d:4c:a7:dc:02:d1:43:25:6f:a7:
75:60:5c:04:a5:ea:ff:09:06:8c:ac:6f:b4:29:b4:36:15:df:
bc:a7:ae:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:02:35 2026 by rpki-client