
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
File: ilHqWMRcL0Rg46sT62pnRUZdr4s.mft (raw, json)
Hash identifier: knO6+MAeoGn6I2EPzUeUzHnyP66LVQZLB1d3tThE0c0=
Subject key identifier: C0:7D:8D:B2:E9:12:63:1E:16:84:CF:D1:A3:1A:83:70:2C:C8:C9:60
Authority key identifier: 8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
Certificate issuer: /CN=A911AF72/serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
Manifest number: 9A
Signing time: Fri 17 Jul 2026 08:33:56 +0000
Manifest this update: Fri 17 Jul 2026 08:33:56 +0000
Manifest next update: Fri 24 Jul 2026 08:33:56 +0000
Files and hashes: 1: ilHqWMRcL0Rg46sT62pnRUZdr4s.crl (hash: tyrQ+sWwi0DGCtv9PYBWMkkcO45Jhke3R1sqGt+16Ic=)
2: A537B070BA4B11F0BD639513C4F9AE02.roa (hash: zfUTfDN6MNZwyyQaYTs7HfwVxHWJRQ0R4nx1a49wJN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AF72, serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Validity
Not Before: Jul 17 08:33:56 2026 GMT
Not After : Jul 24 08:33:56 2026 GMT
Subject: CN=6a59e8f4-e31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:0c:6b:7f:d3:af:ac:b2:f1:d5:f8:c7:0c:
70:f4:9a:b3:61:61:ca:fd:16:51:dd:0b:da:fb:a0:
d7:df:92:5a:51:3b:70:2f:b3:2b:85:4c:42:32:71:
e6:d0:20:64:fa:e0:de:2a:a5:5a:e5:8c:4f:b5:11:
1c:89:64:93:2b:b3:50:45:2d:c6:ee:13:52:01:a9:
0b:af:2a:37:3c:e3:97:d0:4f:91:cf:19:73:93:77:
ed:ae:cd:76:cd:05:d4:10:56:14:c6:0d:c6:a7:7c:
bc:aa:c3:da:97:72:f6:74:35:28:74:80:0d:1a:58:
69:09:ae:bd:e8:77:35:f0:85:9d:01:57:a9:57:51:
07:2d:92:2b:16:1d:b7:e1:9d:52:f1:3d:78:5a:92:
13:57:41:50:fd:1a:5f:29:54:b8:e7:b7:93:c5:8f:
14:68:f0:ef:0d:92:e9:3e:18:66:6d:cb:05:13:2d:
75:58:90:90:b3:1b:c3:86:17:76:bf:12:c2:e6:77:
fb:e6:6b:3a:69:e9:73:75:4f:62:89:c7:e4:43:1d:
c9:df:95:42:4e:a4:b2:7a:b1:67:ac:b3:7d:60:e4:
7d:aa:04:cb:e2:f9:1d:51:fa:52:c1:9b:8d:38:45:
65:ad:0f:26:9b:65:ff:fd:3c:f1:a6:c6:6e:09:d1:
52:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7D:8D:B2:E9:12:63:1E:16:84:CF:D1:A3:1A:83:70:2C:C8:C9:60
X509v3 Authority Key Identifier:
keyid:8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:81:ce:9f:37:93:09:99:90:36:ef:c5:76:b0:97:41:52:af:
b5:2e:41:7f:af:4f:b1:34:88:0c:78:6f:98:80:b6:a8:0b:10:
e9:cb:2e:57:e0:86:86:ca:f7:d7:d5:c3:b5:b3:32:82:6e:c9:
06:cb:82:25:40:62:15:88:83:23:8c:f9:a0:92:98:81:0d:7b:
05:2f:0a:ef:35:2d:5e:3d:c7:cf:67:2a:cd:11:fc:60:4b:89:
01:30:5c:3a:2b:53:00:1c:62:81:c2:90:7a:25:be:17:d9:92:
f3:a0:31:65:bb:e3:e7:cc:d5:0e:7c:96:0b:af:d5:5b:ed:ba:
17:8f:ea:ce:84:89:61:c0:6b:a1:77:30:ad:8f:f3:4c:b6:41:
75:20:71:06:a3:28:0b:55:17:57:8e:17:24:66:e5:97:d4:ea:
99:4e:9e:59:7b:7e:32:51:3c:c2:07:5c:85:8c:96:8b:05:5a:
36:cc:c5:a6:cf:cf:d7:6f:da:91:63:cd:a4:2f:7b:be:59:e2:
0d:90:d2:4d:f4:a8:87:49:dd:53:91:35:ac:e9:10:c9:0c:16:
f7:cf:5e:d7:26:fc:24:24:39:b0:6a:e7:93:bd:b6:c0:2d:06:
ad:aa:27:81:76:f8:b1:45:12:17:fd:ff:00:29:41:71:3a:30:
23:c7:0a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:11:31 2026 by rpki-client