
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
File: iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json)
Hash identifier: rAdCnFPT03cbO2y4NsncxsU4zGhyL4NL39LCYTdrGc8=
Subject key identifier: 1C:5A:DA:08:77:4A:C4:26:0C:B1:8D:9F:83:5A:0F:84:2B:70:1F:60
Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Certificate serial: 08DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
Manifest number: 08AE
Signing time: Thu 04 Jun 2026 15:55:04 +0000
Manifest this update: Thu 04 Jun 2026 15:55:04 +0000
Manifest next update: Thu 11 Jun 2026 15:55:04 +0000
Files and hashes: 1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: hdd7J/uTFkCSHj5sTM0CkJ+mo2UMtmWonYVx1Vnq4Z0=)
2: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: gRWxoMUhWR3o1/E004zC+NaDH3WtqhH3fFB+vz1MWo8=)
3: 6205FF52113D11F1BF40122E203D8C67.roa (hash: YZA4lVzt1mgdsEJ++kdTfFeCS9rYdciYFwgd714ipgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2267 (0x8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Validity
Not Before: Jun 4 15:55:04 2026 GMT
Not After : Jun 11 15:55:04 2026 GMT
Subject: CN=6a219fd8-e198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:94:b4:ef:b8:47:5b:2b:46:10:9b:c0:10:
33:e0:1c:ff:71:2a:d6:62:13:64:e7:12:42:19:5f:
80:d5:ef:93:a7:bf:3e:e5:9f:f4:25:0e:1e:9c:e3:
83:d2:54:7d:82:74:e0:f0:de:e0:44:91:3d:fc:9c:
78:ec:64:b8:3d:fb:14:94:58:c2:70:5f:f6:68:7e:
21:98:ef:b4:bd:7e:32:9b:d9:3b:f6:17:dc:c2:00:
d5:2c:26:39:9d:d5:35:31:70:7d:48:47:98:5e:04:
b2:af:f5:80:06:8b:af:9c:91:ed:a7:c0:9e:4d:56:
77:11:a0:d5:43:35:56:fa:1a:00:46:2b:f9:08:1a:
cf:7c:ca:8d:4d:04:a0:bd:72:97:03:aa:70:ca:db:
8a:9b:c3:41:18:4b:f5:8a:fd:0a:d6:f7:6b:29:c1:
7f:cb:4d:7a:2b:cf:15:6d:a8:18:1a:0c:b0:da:12:
01:11:f8:e8:27:64:79:22:89:33:01:08:ef:64:22:
04:cd:cc:0d:2b:d6:65:1a:f5:ad:61:b5:7a:6a:a8:
fb:06:ff:e0:ac:4f:0e:e6:85:a9:f4:fa:08:1f:5f:
46:27:5f:98:c5:3d:38:29:16:ee:9d:16:3d:20:3b:
57:da:77:25:c0:60:b7:99:1a:f8:c8:44:8c:a8:ed:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5A:DA:08:77:4A:C4:26:0C:B1:8D:9F:83:5A:0F:84:2B:70:1F:60
X509v3 Authority Key Identifier:
keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:99:34:08:55:c3:36:1e:75:4d:ca:a5:4d:d2:78:33:67:43:
96:48:0d:e5:a1:a0:01:f3:48:ee:10:59:0f:83:14:67:94:4b:
71:ff:54:5c:8b:38:ab:eb:0f:40:b0:d4:04:c8:df:7e:3e:2d:
b6:be:af:de:82:c9:e6:b9:1d:94:d6:82:5d:ed:eb:fb:da:92:
88:d3:68:d2:f5:11:d9:8d:72:42:72:5a:11:12:e4:50:bc:ab:
9f:88:dd:dc:32:82:3c:f7:85:13:0f:e6:cb:b8:a9:7d:a6:29:
45:7f:bd:45:8e:31:28:56:50:64:b0:f8:5c:bb:ce:62:67:95:
5e:fc:bd:8a:c4:1a:74:8d:9b:98:f9:3e:65:7e:a9:5c:68:9f:
eb:52:1f:0b:de:a6:b4:0c:07:7f:5b:d7:96:79:3f:2e:f2:0c:
bd:1e:5c:c6:6f:ec:26:06:f8:ae:7e:9c:8f:51:94:1d:19:32:
e8:ab:79:89:e9:1c:f6:09:8f:ad:9f:31:04:55:a6:bd:90:9c:
63:5f:74:fe:70:e4:b4:65:1d:9d:cd:b0:7b:b9:d4:8f:0c:d9:
88:4b:11:6c:4f:94:39:8e:0a:d4:1e:87:a3:64:bd:0e:55:7f:
bd:d1:68:a3:37:b5:b8:13:8b:55:36:5c:29:13:39:40:aa:8d:
f0:f2:70:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:14:02 2026 by rpki-client