
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
File: iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft (raw, json)
Hash identifier: o3aFrgWy1nsE0kxWH2oMCXmKRxtArpZdiNmHd3/g7c4=
Subject key identifier: 6F:68:37:91:A6:2F:2E:0A:47:97:EB:0E:43:B9:6B:9B:95:B9:32:BA
Authority key identifier: 88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F
Certificate issuer: /CN=A9175AA6/serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F
Certificate serial: 087F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
Manifest number: 0876
Signing time: Mon 20 Jul 2026 21:16:01 +0000
Manifest this update: Mon 20 Jul 2026 21:16:00 +0000
Manifest next update: Mon 27 Jul 2026 21:16:00 +0000
Files and hashes: 1: iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl (hash: iv1uwIDc2yUCV1IMRFkdFbk6LfOblaa7FDQjsm21DeY=)
2: 030CCD12069611EB81CF2329C4F9AE02.roa (hash: VJWL5FwR6FzGZwbi+71O98nqwApSQ/wv9sevkMC+DcI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl
rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 21:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175 (0x87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175AA6, serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F
Validity
Not Before: Jul 20 21:16:00 2026 GMT
Not After : Jul 27 21:16:00 2026 GMT
Subject: CN=6a5e9011-1334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:20:e3:b8:12:49:27:6b:0e:ca:fa:24:21:
52:70:e2:ae:14:fb:8b:25:77:d2:2c:98:ed:71:4e:
66:cf:05:c7:ed:4b:96:9e:67:5f:42:c5:07:7e:c8:
6c:ab:2e:6c:01:2b:35:2d:44:aa:8c:f1:36:c7:a2:
da:07:43:42:9f:e2:52:0b:b1:45:40:2b:5c:0d:fb:
9e:79:10:32:b8:33:c2:fa:ea:c9:b5:c9:f3:16:4b:
4c:e5:bc:da:e8:ba:75:55:5e:1a:32:aa:d1:be:79:
fc:69:38:dd:97:90:8d:ba:58:76:6d:9c:ff:fd:29:
fe:d8:b5:12:59:03:5e:c0:15:38:6a:d7:7a:37:c9:
cd:c5:15:dc:42:75:cb:54:38:8b:1e:f8:c9:0a:be:
31:2a:e1:81:55:b8:71:57:4b:ac:e0:80:62:58:59:
0a:d5:b5:20:9d:5f:9b:32:99:56:e4:7f:32:72:ed:
d2:9d:37:65:bd:7b:a0:95:03:8d:4a:76:36:91:2b:
35:57:bf:ae:c7:e8:e6:85:e0:2e:db:f5:e5:38:da:
3e:47:81:11:11:3c:7a:99:da:f9:a6:98:8c:db:d3:
e1:db:23:77:32:17:f1:69:43:0e:31:17:1c:be:01:
11:32:26:85:70:10:0c:ba:ce:04:74:2c:26:7d:8b:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:68:37:91:A6:2F:2E:0A:47:97:EB:0E:43:B9:6B:9B:95:B9:32:BA
X509v3 Authority Key Identifier:
keyid:88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a3:c9:b6:1c:c9:c1:09:41:bc:df:b1:7b:98:69:42:b6:e4:
d4:6b:b8:f0:d2:53:9a:fe:01:0b:89:51:2c:24:2e:33:52:a9:
33:a7:1d:2c:bd:50:ea:a9:d0:d5:79:82:f8:05:19:7d:75:b7:
3d:22:2f:f6:23:fd:e5:4d:0c:e6:85:09:1f:8a:27:6e:4a:33:
76:c3:1c:73:f8:90:12:fe:2d:b2:0b:05:27:0d:22:57:97:00:
6b:a8:a9:83:85:33:2b:94:51:ce:45:d8:28:d9:4a:7c:c2:64:
4d:34:f7:9d:88:b1:84:77:3d:e7:57:d1:81:02:32:29:72:cf:
9c:e6:10:4f:60:11:8e:87:34:12:87:eb:32:df:cc:5e:4b:f4:
2a:16:53:1b:cc:09:d1:2f:91:dd:bc:1c:99:12:f6:88:f7:a0:
43:67:f1:33:e8:8f:4d:87:ff:ec:e3:f6:68:d9:1c:34:ae:10:
f2:04:0e:b2:a0:eb:54:6f:14:e9:c1:1c:a7:93:2d:a9:6e:31:
1d:8c:60:42:12:52:51:31:f2:fb:12:63:a5:d5:75:49:ac:92:
af:d7:96:09:eb:51:73:95:95:e2:21:3f:2e:bf:56:d2:f8:ff:
63:10:a0:39:f8:23:6b:b4:c6:78:0e:c9:05:87:ed:88:4f:df:
cf:45:5c:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzVBQTYxMTAvBgNVBAUTKDg4Q0Q2RDQ3MkRDQTE2QjBGNDFGMkVBRThFRDkyMTU4
MUMyNzhENkYwHhcNMjYwNzIwMjExNjAwWhcNMjYwNzI3MjExNjAwWjAYMRYwFAYD
VQQDEw02YTVlOTAxMS0xMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2gQg47gSSSdrDsr6JCFScOKuFPuLJXfSLJjtcU5mzwXH7UuWnmdfQsUHfshs
qy5sASs1LUSqjPE2x6LaB0NCn+JSC7FFQCtcDfueeRAyuDPC+urJtcnzFktM5bza
6Lp1VV4aMqrRvnn8aTjdl5CNulh2bZz//Sn+2LUSWQNewBU4atd6N8nNxRXcQnXL
VDiLHvjJCr4xKuGBVbhxV0us4IBiWFkK1bUgnV+bMplW5H8ycu3SnTdlvXuglQON
SnY2kSs1V7+ux+jmheAu2/XlONo+R4ERETx6mdr5ppiM29Ph2yN3MhfxaUMOMRcc
vgERMiaFcBAMus4EdCwmfYvPMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG9oN5Gm
Ly4KR5frDkO5a5uVuTK6MB8GA1UdIwQYMBaAFIjNbUctyhaw9B8uro7ZIVgcJ41v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUFBNi9BRDlFREYwNjA2
OTQxMUVCQjlEMUVCMjdDNEY5QUUwMi9pTTF0UnkzS0ZyRDBIeTZ1anRraFdCd25q
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lNMXRSeTNLRnJEMEh5NnVqdGtoV0J3bmpXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NUFBNi9BRDlFREYwNjA2OTQxMUVCQjlEMUVCMjdDNEY5QUUwMi9pTTF0UnkzS0Zy
RDBIeTZ1anRraFdCd25qVzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHKPJthzJwQlBvN+xe5hpQrbk1Gu48NJTmv4BC4lRLCQuM1KpM6cdLL1Q6qnQ
1XmC+AUZfXW3PSIv9iP95U0M5oUJH4onbkozdsMcc/iQEv4tsgsFJw0iV5cAa6ip
g4UzK5RRzkXYKNlKfMJkTTT3nYixhHc951fRgQIyKXLPnOYQT2ARjoc0EofrMt/M
Xkv0KhZTG8wJ0S+R3bwcmRL2iPegQ2fxM+iPTYf/7OP2aNkcNK4Q8gQOsqDrVG8U
6cEcp5MtqW4xHYxgQhJSUTHy+xJjpdV1SaySr9eWCetRc5WV4iE/Lr9W0vj/YxCg
Ofgja7TGeA7JBYftiE/fz0Vcbw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:19:43 2026 by rpki-client