
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json)
Hash identifier: ZN+sj02iLjHzPM1kIQOQ50JCodzl2tAUk2Tg5mgbetk=
Subject key identifier: D2:6B:E4:BA:9D:9C:BD:2F:F0:4C:E3:94:CC:F9:B9:2C:3F:00:2B:55
Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31
Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31
Certificate serial: 3584
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
Manifest number: 3584
Signing time: Tue 06 Oct 2026 14:51:32 +0000
Manifest this update: Tue 06 Oct 2026 14:51:32 +0000
Manifest next update: Tue 13 Oct 2026 14:51:32 +0000
Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: jBx1GA5f7W0T36NyoJ/KO8D0mY/v9BYmH3EJFo7/n2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl
rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:51:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13700 (0x3584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31
Validity
Not Before: Oct 6 14:51:32 2026 GMT
Not After : Oct 13 14:51:32 2026 GMT
Subject: CN=6ac50af4-899a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:40:b9:9b:c3:a2:1f:7d:66:e5:ac:5b:59:5f:
a2:3c:ff:5c:21:97:8b:97:37:9d:04:bc:1d:02:4e:
96:1b:66:3c:9d:c1:cd:08:2a:c5:b2:37:62:e5:d5:
bd:01:6c:ec:47:8e:b3:3a:05:17:c2:9e:0b:75:bf:
6d:bb:35:4c:99:1b:d0:92:71:84:3f:af:05:b6:b5:
92:e1:ae:a9:34:31:06:98:b0:5d:33:38:12:03:aa:
d8:f4:f8:ac:67:de:c7:c9:62:e5:25:4d:67:66:04:
14:10:cd:54:44:5b:18:f4:d2:1a:4c:22:64:4b:fa:
d5:47:47:e5:38:c1:c7:b2:7e:97:1f:b4:25:cd:4b:
dc:f0:17:e1:e9:eb:16:a0:41:c2:b3:12:d5:49:ff:
93:a3:92:ce:e4:94:e5:31:24:59:b2:85:38:85:1e:
88:f2:a7:9b:ca:25:ac:f3:2f:86:98:21:31:55:a9:
1f:30:8b:05:da:d9:43:8d:bd:16:61:c5:29:be:e9:
ff:34:75:00:44:e7:5e:27:96:10:97:6b:fe:2a:58:
83:73:c4:87:98:4c:30:fd:06:09:f6:d9:0d:a4:47:
32:64:86:9e:cc:47:2a:6c:2f:ab:0c:02:e3:08:f1:
2b:71:9b:7b:cb:95:28:07:a9:d1:20:e1:e5:bd:f2:
8a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6B:E4:BA:9D:9C:BD:2F:F0:4C:E3:94:CC:F9:B9:2C:3F:00:2B:55
X509v3 Authority Key Identifier:
keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b6:50:f1:5c:13:76:2a:f9:75:bf:dd:28:a4:f1:1d:11:64:
36:e5:8a:e5:98:9d:49:7c:87:09:f2:0d:7e:78:86:8d:a3:61:
77:a5:05:6c:de:59:3c:ee:08:2d:40:77:1e:0e:75:6f:72:b2:
d2:14:12:fd:f8:79:6e:16:36:3b:02:27:4a:2f:f3:3b:77:ac:
aa:e7:59:ac:53:09:8b:27:ee:54:d3:e1:b7:0c:88:92:4e:61:
1a:ee:6e:a5:e6:92:68:78:8e:30:42:a2:4d:a4:5e:e9:bf:6c:
c2:cc:e9:37:46:96:0d:c0:25:a6:63:48:c9:3a:83:16:62:2a:
45:6e:7d:a3:ea:13:f2:07:e4:46:cc:88:6a:83:01:f4:23:64:
af:53:07:78:09:37:c8:b6:de:35:c2:44:66:05:ad:9a:1f:bb:
3e:a0:8e:5e:14:75:c2:66:ce:94:bc:79:48:57:ab:eb:c9:83:
43:89:1f:44:5f:05:00:31:30:14:a5:6e:82:e8:62:df:7e:9e:
b0:96:a2:1c:13:d0:ed:dd:80:e1:fb:fd:f3:b2:41:71:f6:5c:
b5:ac:1b:1f:28:d3:84:9e:03:c3:52:e8:c5:df:c6:0c:22:3b:
e5:e4:91:23:12:8e:65:a9:6b:45:ee:18:dd:1e:96:ce:52:92:
b0:c4:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:51:49 2026 by rpki-client