
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
File: Ilh8wstvNRBjeD-xz9pm5E4uysE.mft (raw, json)
Hash identifier: gkknpc3AAQ8/zgZ9z6enMzjElu7TwWjA3EMLtQ29+7g=
Subject key identifier: 04:8F:06:78:AB:45:D8:AF:90:68:8A:19:DD:08:26:9F:02:C1:AC:EF
Authority key identifier: 22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1
Certificate issuer: /CN=A9119B9D/serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
Certificate serial: 0118
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
Manifest number: 0112
Signing time: Wed 07 Oct 2026 06:28:51 +0000
Manifest this update: Wed 07 Oct 2026 06:28:50 +0000
Manifest next update: Wed 14 Oct 2026 06:28:50 +0000
Files and hashes: 1: Ilh8wstvNRBjeD-xz9pm5E4uysE.crl (hash: 8gVMKQWwAkkpH/Apczquz6Yy+tPKSWFNxC0i1ofA11s=)
2: BDA4863C1E6111F09E161078C4F9AE02.roa (hash: dJfE4xS+z3MFjpwHa8aZwJ9U37ndC8Dn6NIbRANY8QE=)
3: 874D690486F911F0AEE9D81BC4F9AE02.roa (hash: DdoM2x5jbfPJk1eiebVGHbTNeWujBUjX+WOpcvXZOBc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl
rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119B9D, serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
Validity
Not Before: Oct 7 06:28:50 2026 GMT
Not After : Oct 14 06:28:50 2026 GMT
Subject: CN=6ac5e6a3-60ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:df:35:e0:bd:25:79:7d:40:69:11:5a:5c:
95:24:27:c3:67:71:ec:06:9c:11:ce:98:4d:75:5e:
40:ea:9b:ee:e9:cf:cb:90:f2:11:03:13:9f:3d:58:
d2:1e:e3:e4:5c:b4:37:24:63:36:cf:98:6d:0e:07:
d8:45:07:3b:c7:a8:81:a6:27:7c:05:05:90:64:6e:
d1:d5:af:f1:1f:fe:f3:0a:cf:d4:cd:68:85:c0:93:
9e:1b:af:94:fc:34:c6:f0:f5:fb:75:e0:f1:a4:0e:
62:b5:6d:ec:ab:93:35:6b:a9:3d:ff:59:fc:21:f0:
9c:d9:30:bd:0a:bc:f8:a2:ac:06:73:cc:e3:84:f0:
4b:4e:b4:08:25:8b:2b:c8:80:f4:90:7d:ec:38:be:
8c:f1:4d:48:13:1f:bc:fc:5f:58:4f:b3:da:a7:4b:
d6:97:6b:a7:52:12:29:9d:f7:e2:7c:eb:f5:5e:e7:
6a:29:07:b2:63:38:00:b8:58:53:d8:30:29:67:0e:
19:96:89:69:26:b5:4a:4e:c7:b1:32:c6:65:e8:6b:
92:e5:b6:c4:3c:4e:77:ec:41:92:9a:74:f2:08:1b:
2d:f3:42:fe:6c:ff:78:8b:36:77:88:44:ba:99:a2:
61:a4:3a:73:2b:f3:cc:c7:aa:b3:80:0e:64:45:bb:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8F:06:78:AB:45:D8:AF:90:68:8A:19:DD:08:26:9F:02:C1:AC:EF
X509v3 Authority Key Identifier:
keyid:22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:c1:db:99:cc:8a:28:07:ad:e3:2b:45:c7:31:33:a7:7b:e5:
d0:4d:03:34:82:15:9d:46:6d:6a:89:2a:83:c9:4c:02:8c:25:
4d:20:ff:3a:54:b7:37:66:63:aa:5d:bd:52:54:43:1a:ea:0f:
1d:48:26:c5:17:64:35:9c:36:fd:6f:9c:2b:64:a4:51:ea:7d:
97:f6:bb:52:6e:05:36:0b:87:47:4a:2f:bf:34:71:df:98:ca:
cc:aa:72:85:b6:5d:2d:35:19:e1:1f:06:eb:15:a5:51:9c:3e:
70:32:be:2a:70:a4:df:e5:b6:49:6c:23:81:e3:31:84:f8:6c:
cb:54:5f:f9:7c:80:e3:47:4d:84:fd:d2:69:20:fe:ea:44:d3:
8e:9b:90:c1:4b:4f:33:96:4b:ca:bf:8f:5b:85:bc:be:27:a7:
3b:dd:15:10:03:b1:f6:5c:68:7c:59:22:b9:a9:62:29:3f:3e:
a7:62:8e:90:84:a6:bb:1d:ed:f6:a3:68:d9:47:0b:05:7c:d8:
4e:de:d0:7f:e9:93:c2:01:66:61:85:b9:ca:e3:80:9d:07:3b:
1f:4f:86:66:90:ac:53:b6:57:c2:d0:c4:93:53:45:ad:26:da:
2b:5b:43:08:4e:9d:f0:60:74:a2:0c:a0:13:cc:79:2b:86:62:
82:d9:9e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:44:46 2026 by rpki-client