
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
File: ilHqWMRcL0Rg46sT62pnRUZdr4s.mft (raw, json)
Hash identifier: CYeGQrI10yX9u9d3grRP1eierUh/Q4q3VY4D9VkV//I=
Subject key identifier: 90:E9:66:A3:E6:F5:68:81:BC:6C:0F:76:74:7B:C6:5B:56:CA:55:53
Authority key identifier: 8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
Certificate issuer: /CN=A911AF72/serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
Manifest number: 7E
Signing time: Thu 21 May 2026 07:46:44 +0000
Manifest this update: Thu 21 May 2026 07:46:44 +0000
Manifest next update: Thu 28 May 2026 07:46:44 +0000
Files and hashes: 1: ilHqWMRcL0Rg46sT62pnRUZdr4s.crl (hash: PFxDNMrMl+Pp6+KM1UeAwawe8ksJznTdlDO53Os2jL4=)
2: A537B070BA4B11F0BD639513C4F9AE02.roa (hash: zfUTfDN6MNZwyyQaYTs7HfwVxHWJRQ0R4nx1a49wJN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:46:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AF72, serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Validity
Not Before: May 21 07:46:44 2026 GMT
Not After : May 28 07:46:44 2026 GMT
Subject: CN=6a0eb864-416c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:87:c1:99:f6:06:90:4b:6d:d9:13:d1:9a:f1:
b9:6d:d8:a3:98:c0:e4:39:29:64:32:99:40:27:9c:
10:51:a3:3e:7a:5b:9f:d5:ce:5f:70:6b:40:d4:09:
c4:40:43:2d:01:6d:59:78:58:0b:3d:6f:14:73:6a:
4b:0c:3d:f1:10:4b:e2:dd:4e:25:8a:db:8c:2a:37:
bd:9c:f6:82:e1:10:d3:df:cf:5a:8f:07:41:dc:68:
ea:29:03:76:0e:f8:ca:e5:ec:26:71:a2:94:6b:e5:
3f:8e:3a:0d:8e:78:2f:32:b3:e4:ae:3b:b9:03:0b:
ea:e7:53:da:cb:82:3f:28:5f:94:e3:7c:d8:07:a7:
37:62:32:a0:26:6e:ac:e5:50:58:6a:be:90:75:bc:
b9:b1:d2:ec:de:7c:2b:f3:5b:bf:14:cb:b5:d3:56:
98:97:db:04:72:50:f5:c5:23:18:34:39:b6:1a:43:
3b:13:66:0a:13:16:d1:84:b2:bf:cf:da:4b:2c:47:
ee:17:60:94:82:03:cb:fd:0e:ec:dc:d8:6c:b5:31:
ed:4d:4b:e6:f0:ec:59:bd:90:67:25:95:d1:ff:0e:
3f:b5:ae:5f:09:55:21:2a:55:92:fd:19:79:92:3a:
84:e5:ab:12:3d:c2:bf:5f:bc:92:79:e8:72:71:59:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E9:66:A3:E6:F5:68:81:BC:6C:0F:76:74:7B:C6:5B:56:CA:55:53
X509v3 Authority Key Identifier:
keyid:8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:67:53:3b:d3:a4:e2:d9:c0:33:4c:b7:a9:b4:f5:44:67:ce:
55:40:5f:37:2d:1e:3e:f1:ed:e3:4a:00:88:1a:d4:e3:c4:11:
30:0f:06:27:fd:2f:58:cf:0f:21:2b:9a:93:2f:57:bb:1d:57:
71:50:4c:4d:bb:49:9c:99:fc:77:ef:bd:78:eb:47:c1:3c:fd:
b4:1d:6c:70:2a:3c:19:d1:9a:f5:fd:99:ad:43:91:63:38:59:
21:b1:6d:54:af:bd:1c:77:f1:55:33:56:65:e4:d0:f0:9e:7d:
88:ce:82:b9:14:1e:10:6c:2e:1d:ab:22:84:83:92:f1:6f:93:
62:48:a5:13:02:75:c3:b3:dd:75:82:b1:6a:2d:a3:97:33:68:
5b:d9:11:fb:c3:cf:fe:66:3c:01:af:75:ff:54:47:20:ed:f3:
32:07:c5:49:b7:8f:b6:6a:af:91:c6:2b:0c:71:98:91:cb:c6:
97:02:a9:77:78:b2:86:99:19:40:9e:76:a9:32:17:fd:55:59:
59:1c:46:08:7e:8a:4c:ba:3f:52:d4:e6:1c:12:11:14:b0:d3:
f4:72:d8:81:96:c5:89:7e:1d:48:bd:b4:41:dc:9d:ee:2b:33:
b2:08:81:c5:b2:90:63:41:c7:4c:7f:06:27:51:3c:89:f8:9a:
55:81:13:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFGNzIxMTAvBgNVBAUTKDhBNTFFQTU4QzQ1QzJGNDQ2MEUzQUIxM0VCNkE2NzQ1
NDY1REFGOEIwHhcNMjYwNTIxMDc0NjQ0WhcNMjYwNTI4MDc0NjQ0WjAYMRYwFAYD
VQQDEw02YTBlYjg2NC00MTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm4fBmfYGkEtt2RPRmvG5bdijmMDkOSlkMplAJ5wQUaM+eluf1c5fcGtA1AnE
QEMtAW1ZeFgLPW8Uc2pLDD3xEEvi3U4lituMKje9nPaC4RDT389ajwdB3GjqKQN2
DvjK5ewmcaKUa+U/jjoNjngvMrPkrju5Awvq51Pay4I/KF+U43zYB6c3YjKgJm6s
5VBYar6Qdby5sdLs3nwr81u/FMu101aYl9sEclD1xSMYNDm2GkM7E2YKExbRhLK/
z9pLLEfuF2CUggPL/Q7s3NhstTHtTUvm8OxZvZBnJZXR/w4/ta5fCVUhKlWS/Rl5
kjqE5asSPcK/X7ySeehycVlg0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJDpZqPm
9WiBvGwPdnR7xltWylVTMB8GA1UdIwQYMBaAFIpR6ljEXC9EYOOrE+tqZ0VGXa+L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUY3Mi84MDlDQzRCQTk3
QUMxMUYwOTE1RTRFMjhDNEY5QUUwMi9pbEhxV01SY0wwUmc0NnNUNjJwblJVWmRy
NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lsSHFXTVJjTDBSZzQ2c1Q2MnBuUlVaZHI0cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUY3Mi84MDlDQzRCQTk3QUMxMUYwOTE1RTRFMjhDNEY5QUUwMi9pbEhxV01SY0ww
Umc0NnNUNjJwblJVWmRyNHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnWdTO9Ok4tnAM0y3qbT1RGfOVUBfNy0ePvHt40oAiBrU48QRMA8GJ/0vWM8P
ISuaky9Xux1XcVBMTbtJnJn8d++9eOtHwTz9tB1scCo8GdGa9f2ZrUORYzhZIbFt
VK+9HHfxVTNWZeTQ8J59iM6CuRQeEGwuHasihIOS8W+TYkilEwJ1w7PddYKxai2j
lzNoW9kR+8PP/mY8Aa91/1RHIO3zMgfFSbePtmqvkcYrDHGYkcvGlwKpd3iyhpkZ
QJ52qTIX/VVZWRxGCH6KTLo/UtTmHBIRFLDT9HLYgZbFiX4dSL20Qdyd7iszsgiB
xbKQY0HHTH8GJ1E8ifiaVYET5g==
-----END CERTIFICATE-----
Generated at Thu May 21 12:17:00 2026 by rpki-client