
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
File: ilHqWMRcL0Rg46sT62pnRUZdr4s.mft (raw, json)
Hash identifier: z/QpUWijXjntCesPa8OhQacehpeCm22JwHRLVkBCyPQ=
Subject key identifier: 3E:D6:79:3F:57:B4:58:73:3F:5C:27:47:9E:EC:34:8B:0D:0F:7F:08
Authority key identifier: 8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
Certificate issuer: /CN=A911AF72/serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
Manifest number: 67
Signing time: Sun 05 Apr 2026 07:18:25 +0000
Manifest this update: Sun 05 Apr 2026 07:18:25 +0000
Manifest next update: Sun 12 Apr 2026 07:18:25 +0000
Files and hashes: 1: ilHqWMRcL0Rg46sT62pnRUZdr4s.crl (hash: MzF/0RgO+9leEBBoip58Vhtj1+s3n5HooeoAwUSD1eY=)
2: A537B070BA4B11F0BD639513C4F9AE02.roa (hash: zfUTfDN6MNZwyyQaYTs7HfwVxHWJRQ0R4nx1a49wJN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AF72, serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Validity
Not Before: Apr 5 07:18:25 2026 GMT
Not After : Apr 12 07:18:25 2026 GMT
Subject: CN=69d20cc1-5c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:e3:c4:c3:a3:59:35:ba:69:4b:ef:bd:cd:
82:be:16:a4:4e:6f:93:c5:dc:5b:4c:1f:fe:c7:cc:
e9:6a:e7:03:d9:74:e6:64:dc:73:c5:eb:06:56:42:
8e:8d:92:6c:57:5e:bd:d3:28:99:9c:11:ae:a1:b9:
e4:65:79:55:74:ba:90:6f:25:96:aa:6c:5d:30:8b:
f7:60:0c:c1:7f:67:a4:94:2f:b4:4c:17:0c:d7:8f:
ca:e2:0f:0c:1b:35:9c:61:d5:72:1c:3e:12:78:78:
ec:85:73:7f:8c:37:26:43:4f:e1:29:27:6f:51:63:
2c:b0:60:30:2e:5b:0d:8e:42:7f:83:87:fc:ab:09:
23:50:35:4a:2c:7c:15:3b:35:fe:18:c0:e1:17:24:
75:bd:1d:64:1d:c0:95:94:67:bb:8e:53:7e:e4:0b:
e6:79:aa:d8:c2:5a:91:0f:1e:78:55:1d:3f:3b:9e:
b8:33:c9:82:fc:1c:24:5b:76:79:ce:43:d0:40:9d:
10:98:89:30:a2:4b:17:2e:de:c4:58:b6:7c:1c:e1:
f1:fb:de:a0:41:a5:97:50:1d:f5:7f:0c:ca:bb:5e:
c7:ca:5b:dc:43:ed:f7:5d:09:04:20:9a:87:b9:83:
0a:97:0b:cd:d8:15:2b:c3:4d:d8:02:65:a0:80:74:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D6:79:3F:57:B4:58:73:3F:5C:27:47:9E:EC:34:8B:0D:0F:7F:08
X509v3 Authority Key Identifier:
keyid:8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:66:b9:ff:72:ed:68:2e:e9:5f:65:1f:6b:71:23:d8:96:d2:
30:3f:84:40:ff:f5:dd:fb:36:e5:c0:e3:a4:ad:00:95:42:04:
be:34:69:61:02:0b:54:64:fa:fe:95:6c:e3:69:41:d3:33:ac:
39:a9:be:e5:18:bd:de:0a:95:4d:21:14:be:7f:ba:00:32:d5:
a0:67:78:29:11:31:9b:4c:bd:58:73:1e:2e:80:89:31:cc:a5:
a9:c4:78:98:27:61:bd:6b:4e:91:44:4f:85:e6:73:bb:c1:d8:
96:b5:2d:f2:30:c8:74:d9:1f:da:28:29:7c:83:54:30:12:93:
1b:10:2d:ff:13:97:36:03:0f:ac:6a:34:40:03:f6:d5:2a:4a:
15:ee:f7:9c:02:25:b0:78:47:aa:a4:0e:a1:bd:4b:21:c3:6f:
3c:79:4e:00:f1:85:39:22:4b:7c:f2:f2:6b:d2:98:ef:92:0b:
ab:40:a6:97:ba:91:13:a2:56:e9:1c:f7:a6:49:f7:a2:d7:b6:
dd:77:bf:50:07:c7:72:de:e0:4b:59:23:02:ec:17:d6:8d:d2:
ff:cf:34:b5:65:0f:9f:6f:db:7f:bf:f0:e6:49:fb:9a:09:1a:
0b:cc:f5:ea:09:d5:3e:08:12:53:eb:29:4e:aa:07:77:d2:a3:
19:c3:c7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:46 2026 by rpki-client