
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
File: igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft (raw, json)
Hash identifier: xMuIVHN/tX3MJ37VgpTAqmAWyfX852+nsqdCXO9FRrQ=
Subject key identifier: 21:0C:B7:6F:D4:99:84:14:E9:72:2B:CE:D5:58:00:4A:7C:74:1A:63
Authority key identifier: 8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD
Certificate issuer: /CN=A9120960/serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
Manifest number: B0
Signing time: Sat 03 Oct 2026 07:48:10 +0000
Manifest this update: Sat 03 Oct 2026 07:48:10 +0000
Manifest next update: Sat 10 Oct 2026 07:48:10 +0000
Files and hashes: 1: igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl (hash: 6Emq8z64kJZwTU8GdR/rPA/1fkff+zXM4GWcCXtNExw=)
2: 8F8C10F021B511F192BB9899183D8C67.roa (hash: Qspe0e/jD5ftFW6k2VBzPuJWxT8JG0kniB7v/aJxi4Q=)
3: 4B6ACA2E21B511F19C8EC293183D8C67.roa (hash: hTm1hC4z4/h09pd99dIB7y+cP+dNmHyx5jWFuawvpdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl
rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120960, serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
Validity
Not Before: Oct 3 07:48:10 2026 GMT
Not After : Oct 10 07:48:10 2026 GMT
Subject: CN=6ac0b33a-9cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:42:dd:75:47:db:19:a2:c0:ae:80:ae:e9:
ee:5d:b2:d8:98:de:49:fb:e5:c1:5a:92:5b:f7:48:
27:37:76:47:00:87:64:a8:8e:b4:dc:a3:c6:24:0f:
07:cd:78:92:f0:31:b7:f1:5c:50:1c:b1:ec:f1:98:
dc:43:ab:27:54:13:c8:39:b3:47:81:c3:ec:0c:57:
85:ab:ae:d0:a2:00:16:6c:99:bf:5c:39:c4:63:81:
63:df:e1:a9:88:3f:0f:cf:78:c7:f0:64:56:20:75:
2b:f8:fc:f9:da:c8:a6:c6:11:55:3f:33:ea:60:7c:
46:7f:24:dc:33:c0:3a:86:0a:3f:99:71:42:af:f2:
b5:61:a7:0f:69:37:fd:0a:8a:94:1a:eb:46:1a:8a:
0b:74:07:e1:f2:09:33:b7:09:c7:c2:33:00:ce:a6:
ff:cb:01:6f:9a:52:a5:f1:af:a5:47:af:04:ec:bd:
9b:b7:86:b1:0f:30:18:d1:3f:d2:c3:f5:5f:c7:27:
3e:cd:63:18:45:f7:5d:10:e5:5b:ca:16:74:b4:08:
e8:cb:2d:0b:80:1e:a1:10:41:cd:81:d1:a5:33:1e:
1e:5c:c2:44:e7:97:04:da:04:0f:fb:3e:b1:a7:4b:
98:2a:12:4e:f5:67:f3:e7:bb:46:c9:e6:d6:00:20:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0C:B7:6F:D4:99:84:14:E9:72:2B:CE:D5:58:00:4A:7C:74:1A:63
X509v3 Authority Key Identifier:
keyid:8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f1:9b:01:a5:82:6b:d5:d3:f4:95:18:9a:26:45:7d:7f:dd:
5a:12:a1:e2:99:e0:02:aa:ea:dd:1f:02:d4:76:03:6b:13:e7:
fd:78:79:8a:8e:77:d9:3a:3a:cd:11:9e:fe:bc:e6:cb:79:c4:
9b:38:46:30:b7:b9:d5:b0:ff:1e:87:4a:86:df:c1:a2:0f:af:
ec:d8:bd:e4:ff:e9:87:d5:81:c9:2f:f7:06:c6:a0:24:85:b6:
20:5c:6c:e4:7f:d0:45:b1:a5:eb:7e:47:5e:8c:ec:46:bb:40:
78:7a:8c:7c:09:49:c4:5a:1b:d4:9d:6d:4f:87:34:f0:f1:03:
fa:90:0a:a4:c0:c0:dd:36:c7:b0:62:32:8a:65:27:51:b9:74:
12:50:90:c3:79:ee:d1:77:3b:fd:0e:7c:45:6e:91:1f:f4:04:
ad:50:f4:c2:d1:f6:d4:2c:d3:71:b8:b8:e9:9e:6d:13:c7:da:
7f:c6:3f:ce:8b:e8:55:91:f8:2d:f3:a1:36:e9:a0:b0:a2:bf:
1e:60:18:a3:f6:3d:cb:3e:83:b1:fc:77:19:52:df:43:9b:88:
88:fc:c8:23:b4:83:4e:ae:b9:4d:b9:48:72:f0:02:9a:f5:83:
c9:c5:1e:14:f7:8d:77:ef:42:c7:a1:e6:c7:72:33:61:7d:6a:
d1:5a:13:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:14:40 2026 by rpki-client