
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft
File: I4od3rdgPRIBUCNc2vtg1XhWa68.mft (raw, json)
Hash identifier: ABHdXGSX9dSrb7djazBhBkavn48uFyIBaJh4NZ01iG4=
Subject key identifier: C3:A4:68:25:E6:26:FB:7E:8A:44:EF:CE:B8:69:DD:DF:A0:6E:F2:B4
Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF
Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF
Certificate serial: 08A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft
Manifest number: 0892
Signing time: Tue 06 Oct 2026 20:53:14 +0000
Manifest this update: Tue 06 Oct 2026 20:53:14 +0000
Manifest next update: Tue 13 Oct 2026 20:53:14 +0000
Files and hashes: 1: I4od3rdgPRIBUCNc2vtg1XhWa68.crl (hash: jWyKMd+XF65zBTPpA9JA8U36BE/KBSCBSQjtHcdo5mo=)
2: 1D3589E875AF11EC866EEF53C4F9AE02.roa (hash: FELlTiK0zkTPaIvuZPqjSFuesBh1m/szylRmww5rrlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl
rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:53:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2209 (0x8a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119ED6, serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF
Validity
Not Before: Oct 6 20:53:14 2026 GMT
Not After : Oct 13 20:53:14 2026 GMT
Subject: CN=6ac55fba-eec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:b1:96:21:89:c8:1c:5e:46:ec:5e:34:4c:
e9:07:b4:61:0d:20:d7:ab:4e:a6:83:42:d9:82:7d:
c5:8b:6a:a7:33:d1:73:96:8d:5e:b9:a9:49:fe:5d:
41:7b:0e:7f:2f:ab:3d:2d:25:bc:a6:d3:55:4a:f7:
95:d0:96:6c:78:e9:88:77:5f:21:cb:94:c4:dc:56:
b8:5f:76:cb:d7:51:f7:e4:df:7d:6c:e4:6b:7d:f5:
b6:f4:40:6e:8b:fd:5c:1d:5e:6b:20:0b:ec:1f:d7:
7b:6a:09:83:7a:62:d0:93:cf:13:d6:20:44:bc:5d:
11:00:29:b0:16:54:05:07:d8:e9:7d:63:b6:b2:6f:
eb:f7:86:de:d0:58:90:49:b8:87:b7:60:0d:70:65:
77:ed:93:0e:ff:77:d0:17:73:37:a8:52:e5:74:b0:
b2:39:48:f4:ed:5e:83:00:24:79:39:73:5b:f1:3b:
c0:26:f1:65:40:31:de:90:95:b0:f3:5d:4c:d4:0f:
2c:47:11:a5:e9:34:92:77:00:9c:f9:8f:7c:c9:fc:
8f:25:6f:66:6e:57:f7:79:c4:d9:18:05:67:cd:95:
ca:bb:f0:86:d8:97:00:aa:08:33:76:7d:e8:be:36:
b9:e2:a2:5b:0d:c5:9f:f6:18:54:77:f9:4a:68:ed:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A4:68:25:E6:26:FB:7E:8A:44:EF:CE:B8:69:DD:DF:A0:6E:F2:B4
X509v3 Authority Key Identifier:
keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:e1:bf:ce:e7:c8:b2:ce:be:1a:a3:55:55:cb:a3:56:6b:03:
59:49:7b:c0:ef:73:06:e1:4c:c2:9c:26:a3:1a:15:72:b9:29:
db:b2:0f:af:c8:89:7f:68:cd:e2:25:a0:43:41:3b:e3:3d:3c:
e8:8e:ed:e6:7d:cd:a7:ea:3e:2f:c5:9e:97:cc:85:3b:60:01:
96:1b:c0:84:4e:e4:9a:0e:9d:93:ec:35:57:9e:f8:3a:c8:e1:
01:98:b0:c4:2a:6f:86:ff:a8:a1:7f:b4:f4:f6:8d:6f:9d:38:
c1:5d:57:18:a1:fc:bd:88:4d:5b:41:d4:48:5c:12:2d:2c:ae:
46:20:81:8d:e8:68:24:c8:11:c5:fb:55:57:28:3e:4f:d3:1e:
87:e3:d3:94:ab:5c:12:b8:44:db:ff:1b:be:a1:c6:c4:f7:f3:
79:48:8a:4d:10:4e:f0:2d:ba:0b:ea:0b:84:f4:c9:18:62:9b:
7a:ee:fa:b0:8b:d5:d1:64:5e:a2:75:0c:e7:b7:d1:a7:e6:9e:
8c:71:90:50:eb:e8:79:d7:21:d7:e6:79:59:e1:71:1a:a2:5e:
c8:fd:cb:ee:b2:7c:42:30:a1:61:16:3c:71:cf:27:31:6d:86:
15:89:7f:89:61:85:37:1d:b8:d2:68:1f:67:0b:f4:0b:15:fe:
20:c1:9a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:57:34 2026 by rpki-client