
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json)
Hash identifier: 4BGIBZxqOCV82iHcLI00BGAphDo6OzqZ9wQiBijSD+I=
Subject key identifier: 6A:BB:A7:03:0C:7F:F7:98:52:44:BF:E0:C8:A7:73:12:A2:54:E1:F9
Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Certificate serial: 1148
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
Manifest number: 1136
Signing time: Thu 16 Jul 2026 17:19:34 +0000
Manifest this update: Thu 16 Jul 2026 17:19:34 +0000
Manifest next update: Thu 23 Jul 2026 17:19:34 +0000
Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: Dd49p/5FreUnP3MHQxf8yqWaVp461Dr4ityY8dEtiew=)
2: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (hash: rroDeUW2w+byoF7eEZG3cyaaxjR2htn3+GDZHhSrHjg=)
3: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: xEpgs9EW6VJ0cW2siZLFxIERKuNtIAPU67VQP3joc6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 17:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4424 (0x1148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Validity
Not Before: Jul 16 17:19:34 2026 GMT
Not After : Jul 23 17:19:34 2026 GMT
Subject: CN=6a5912a6-6bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:5f:97:b7:3b:be:80:e9:eb:96:3a:5d:42:
34:cb:77:e8:e6:e4:9b:92:a5:ef:18:43:6b:8e:24:
a2:02:31:b1:82:5a:cd:bc:d3:27:94:cd:c6:04:5e:
36:a8:8e:5d:5c:d5:ca:06:43:27:0e:76:28:a5:1d:
fb:fd:cd:98:c9:63:f8:9d:48:7a:10:da:7c:a2:93:
c6:26:0a:0a:61:45:ac:95:06:5d:b2:24:48:d2:4c:
b6:c7:16:07:27:3a:9b:c1:6f:43:76:ce:9f:0e:57:
a7:d0:8a:c3:26:de:c3:91:45:86:cb:75:4f:e7:4c:
d0:d0:09:d1:21:fa:83:e9:a0:ee:4e:4e:a7:dc:46:
4c:5e:74:c6:c5:8f:fa:bc:ec:d3:bb:75:df:17:dd:
13:68:3e:58:f7:d8:69:2b:df:0c:b0:ec:84:2a:44:
6e:62:9a:ce:a7:d6:92:01:7b:24:22:3e:42:c6:c8:
6b:8f:3b:43:0f:d1:08:66:ad:44:a1:00:66:5f:4d:
2b:4f:8a:a4:99:e9:8b:2b:6b:cd:4a:1b:78:2a:95:
56:bf:a3:01:f2:f8:e2:7b:07:6c:39:8e:92:27:1c:
84:df:62:57:76:70:20:7e:26:e6:24:a8:76:6c:84:
02:68:28:72:4f:06:58:a2:a4:c9:83:92:b7:3c:8a:
3e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BB:A7:03:0C:7F:F7:98:52:44:BF:E0:C8:A7:73:12:A2:54:E1:F9
X509v3 Authority Key Identifier:
keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:51:70:71:80:40:aa:3c:f8:57:e7:58:61:31:53:03:f4:c3:
49:91:3f:0a:e9:2f:aa:5a:4c:0d:63:af:c3:43:e5:76:25:0b:
c0:d0:62:48:30:28:9b:ff:15:6d:d6:21:8d:ce:d3:8d:cf:68:
30:fb:fc:f5:44:b8:d3:60:d9:26:b4:93:e6:5c:cd:9a:54:99:
48:32:a2:a6:35:5d:97:df:22:d3:d6:31:20:89:ce:54:5c:8f:
49:09:90:ef:24:19:57:9d:3e:24:ea:31:4b:e5:5c:b9:d6:41:
7d:a8:74:39:db:1d:91:95:5e:b7:3e:16:b8:57:ba:25:80:20:
f1:0b:87:fd:e7:a7:b0:51:16:48:fe:55:43:48:ef:85:f2:8f:
1d:13:9a:51:2c:d7:92:ec:98:d1:47:ad:ee:e4:64:b0:a2:25:
29:6f:65:d6:12:99:d5:cf:c9:57:55:08:c9:a0:9a:58:ef:57:
19:db:84:ba:24:42:a2:08:aa:e7:80:11:d3:07:fc:94:7f:6c:
e8:f6:ff:14:6a:27:6f:9f:f1:85:55:60:b7:66:1c:cc:d8:eb:
31:5e:76:54:aa:fc:d3:1a:82:55:23:2e:2f:64:f6:71:75:2f:
a1:2c:61:58:8e:68:d0:4a:d9:e9:54:f4:72:e1:48:62:40:cf:
dd:8f:8e:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4
ODNCQjkxNDUwHhcNMjYwNzE2MTcxOTM0WhcNMjYwNzIzMTcxOTM0WjAYMRYwFAYD
VQQDEw02YTU5MTJhNi02YmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAySJfl7c7voDp65Y6XUI0y3fo5uSbkqXvGENrjiSiAjGxglrNvNMnlM3GBF42
qI5dXNXKBkMnDnYopR37/c2YyWP4nUh6ENp8opPGJgoKYUWslQZdsiRI0ky2xxYH
JzqbwW9Dds6fDlen0IrDJt7DkUWGy3VP50zQ0AnRIfqD6aDuTk6n3EZMXnTGxY/6
vOzTu3XfF90TaD5Y99hpK98MsOyEKkRuYprOp9aSAXskIj5CxshrjztDD9EIZq1E
oQBmX00rT4qkmemLK2vNSht4KpVWv6MB8vjiewdsOY6SJxyE32JXdnAgfibmJKh2
bIQCaChyTwZYoqTJg5K3PIo+wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGq7pwMM
f/eYUkS/4MincxKiVOH5MB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB
NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr
VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl
TmxXNWwwTGZzNTZJTzdrVVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAFFwcYBAqjz4V+dYYTFTA/TDSZE/CukvqlpMDWOvw0PldiULwNBiSDAom/8V
bdYhjc7Tjc9oMPv89US402DZJrST5lzNmlSZSDKipjVdl98i09YxIInOVFyPSQmQ
7yQZV50+JOoxS+VcudZBfah0OdsdkZVetz4WuFe6JYAg8QuH/eensFEWSP5VQ0jv
hfKPHROaUSzXkuyY0Uet7uRksKIlKW9l1hKZ1c/JV1UIyaCaWO9XGduEuiRCogiq
54AR0wf8lH9s6Pb/FGonb5/xhVVgt2YczNjrMV52VKr80xqCVSMuL2T2cXUvoSxh
WI5o0ErZ6VT0cuFIYkDP3Y+OeQ==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:38 2026 by rpki-client