
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft
File: I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft (raw, json)
Hash identifier: rk2IfJqKGisJxUkDgigcjqscylQP5nHuUm+KscEawyo=
Subject key identifier: 86:44:70:1A:A9:9F:70:69:81:77:5A:01:C3:6E:F1:59:EE:44:43:48
Authority key identifier: 23:97:A9:D5:98:36:83:62:6B:AD:2C:14:7F:B7:D3:3C:49:BD:C6:BB
Certificate issuer: /CN=A9122796/serialNumber=2397A9D5983683626BAD2C147FB7D33C49BDC6BB
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft
Manifest number: 22
Signing time: Fri 23 Oct 2026 09:27:39 +0000
Manifest this update: Fri 23 Oct 2026 09:27:39 +0000
Manifest next update: Fri 30 Oct 2026 09:27:39 +0000
Files and hashes: 1: I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl (hash: 3pOFbtWwEKY28Rlc1U1Z9bqtd42b2ztzMhJrqrSuR28=)
2: B6E9F4E89E0411F192F8ACA34A11F970.roa (hash: i+mz8RKuF8p3hv1YLSt70vMBBM5Cu/pBQuz04gTb5ec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl
rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 09:27:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122796, serialNumber=2397A9D5983683626BAD2C147FB7D33C49BDC6BB
Validity
Not Before: Oct 23 09:27:39 2026 GMT
Not After : Oct 30 09:27:39 2026 GMT
Subject: CN=6adb288b-6c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:75:c6:c3:f3:d4:62:b4:58:71:83:9e:87:
af:cb:5b:f5:35:30:a1:89:b0:87:91:04:26:ce:8c:
bc:a7:8b:24:3a:94:a3:51:fc:18:82:a2:63:a4:af:
97:e6:fc:d3:13:04:f8:76:66:99:5b:6c:44:b7:46:
3d:50:f9:1d:20:4e:73:e7:39:30:a5:70:b9:39:06:
95:69:1f:6b:ae:10:f6:fd:c3:5f:ab:76:bc:42:01:
fc:c9:31:41:08:65:4b:47:ea:6f:96:a2:40:2d:b9:
25:34:b8:c9:52:26:54:90:aa:e1:88:45:fe:59:f2:
26:a5:1b:a9:7f:29:4c:1f:ec:5e:5f:c0:96:a8:26:
9e:2a:d1:04:97:b0:d9:9c:9b:44:30:11:be:1d:fb:
5e:78:dc:36:5b:37:df:fa:f1:79:fc:33:21:d7:86:
5c:9f:50:89:de:0c:d4:7f:96:de:92:5f:b1:db:3e:
40:52:be:7c:6e:7b:44:1c:70:01:d2:74:c9:1b:cf:
ca:82:ea:bf:49:e9:18:ca:b2:52:52:e7:a4:ee:82:
01:26:75:29:7a:a5:1b:8f:ef:31:cd:c5:82:5c:f8:
a0:97:fb:7b:0e:06:1d:e7:c3:5c:83:34:f2:01:22:
09:20:d0:8e:67:74:91:a9:1b:e2:47:44:51:20:8b:
3e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:44:70:1A:A9:9F:70:69:81:77:5A:01:C3:6E:F1:59:EE:44:43:48
X509v3 Authority Key Identifier:
keyid:23:97:A9:D5:98:36:83:62:6B:AD:2C:14:7F:B7:D3:3C:49:BD:C6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8e:b3:19:69:99:85:73:10:8c:96:25:32:2b:4b:d1:70:be:
8e:be:3a:e6:2b:da:89:e2:64:47:bd:46:a0:24:ff:2b:a9:df:
04:d9:25:a8:85:8b:4b:b6:fd:72:45:10:58:cb:f2:9c:5b:60:
41:c0:8c:e6:6f:08:cf:c8:ec:d5:57:53:e3:a8:a9:34:f4:35:
cf:8a:d5:d0:87:26:95:21:a3:32:18:d3:96:14:2c:d0:1c:6e:
b8:8f:95:b9:d6:fb:50:26:7b:50:90:3d:8c:6b:40:6e:41:16:
32:01:72:98:2d:e4:0e:ba:e1:95:c7:eb:a4:5a:5e:db:74:36:
6b:82:ef:f9:45:dd:7c:21:6c:6b:d9:7a:77:d0:e3:c9:6a:61:
9b:e1:95:83:36:09:f7:fc:8c:9e:e4:9e:db:8b:01:b8:ba:04:
bb:4c:5c:15:70:db:d7:86:d1:29:25:7b:3d:a5:b2:5c:f5:ee:
c9:14:9b:e6:2b:ea:d6:9d:d6:5c:39:df:6d:f5:73:69:38:25:
6b:13:92:57:90:6d:05:a1:8d:3b:33:28:61:04:43:c7:9e:dc:
7a:4b:05:54:ea:06:b1:8d:60:92:96:39:46:0c:6f:36:9a:87:
46:ed:09:f6:c7:ca:30:ee:cb:0c:d0:15:01:50:aa:50:89:21:
6b:03:58:66
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
Mjc5NjExMC8GA1UEBRMoMjM5N0E5RDU5ODM2ODM2MjZCQUQyQzE0N0ZCN0QzM0M0
OUJEQzZCQjAeFw0yNjEwMjMwOTI3MzlaFw0yNjEwMzAwOTI3MzlaMBgxFjAUBgNV
BAMTDTZhZGIyODhiLTZjODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCTHXGw/PUYrRYcYOeh6/LW/U1MKGJsIeRBCbOjLyniyQ6lKNR/BiComOkr5fm
/NMTBPh2ZplbbES3Rj1Q+R0gTnPnOTClcLk5BpVpH2uuEPb9w1+rdrxCAfzJMUEI
ZUtH6m+WokAtuSU0uMlSJlSQquGIRf5Z8ialG6l/KUwf7F5fwJaoJp4q0QSXsNmc
m0QwEb4d+1543DZbN9/68Xn8MyHXhlyfUIneDNR/lt6SX7HbPkBSvnxue0QccAHS
dMkbz8qC6r9J6RjKslJS56TuggEmdSl6pRuP7zHNxYJc+KCX+3sOBh3nw1yDNPIB
Igkg0I5ndJGpG+JHRFEgiz79AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhkRwGqmf
cGmBd1oBw27xWe5EQ0gwHwYDVR0jBBgwFoAUI5ep1Zg2g2JrrSwUf7fTPEm9xrsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyNzk2L0JEQUI1MTEyOUUw
MTExRjFBMUM5Q0M1ODQ4MTFGOTcwL0k1ZXAxWmcyZzJKcnJTd1VmN2ZUUEVtOXhy
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSTVlcDFaZzJnMkpyclN3VWY3ZlRQRW05eHJzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy
Nzk2L0JEQUI1MTEyOUUwMTExRjFBMUM5Q0M1ODQ4MTFGOTcwL0k1ZXAxWmcyZzJK
cnJTd1VmN2ZUUEVtOXhycy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCOjrMZaZmFcxCMliUyK0vRcL6OvjrmK9qJ4mRHvUagJP8rqd8E2SWohYtLtv1y
RRBYy/KcW2BBwIzmbwjPyOzVV1PjqKk09DXPitXQhyaVIaMyGNOWFCzQHG64j5W5
1vtQJntQkD2Ma0BuQRYyAXKYLeQOuuGVx+ukWl7bdDZrgu/5Rd18IWxr2Xp30OPJ
amGb4ZWDNgn3/Iye5J7biwG4ugS7TFwVcNvXhtEpJXs9pbJc9e7JFJvmK+rWndZc
Od9t9XNpOCVrE5JXkG0FoY07MyhhBEPHntx6SwVU6gaxjWCSljlGDG82modG7Qn2
x8ow7ssM0BUBUKpQiSFrA1hm
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:15:08 2026 by rpki-client