
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
File: iAd3htZlI61ZmNY_aXr0LwOcKqk.mft (raw, json)
Hash identifier: GHV9ID+lhjz15sCocRHQfbbvVwAgs1QOFKNpcCdP+LE=
Subject key identifier: 1E:C3:01:2F:2B:62:F7:D6:2F:0C:0F:55:7B:86:4E:E5:1D:CB:7D:08
Authority key identifier: 88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
Certificate issuer: /CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Certificate serial: 1149
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
Manifest number: 1136
Signing time: Mon 22 Jun 2026 17:13:06 +0000
Manifest this update: Mon 22 Jun 2026 17:13:05 +0000
Manifest next update: Mon 29 Jun 2026 17:13:05 +0000
Files and hashes: 1: iAd3htZlI61ZmNY_aXr0LwOcKqk.crl (hash: ayEAmN+3C6/fJuN38OtZLfZqULFnyjLW/1HmahJFBCU=)
2: 744CCD5834F911E98AB73628C4F9AE02.roa (hash: 9W05C1LlPKcEFv9pU3PetAYWB/PzpYrnvZBHnrLu8UQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl
rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 17:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4425 (0x1149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A4E2, serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Validity
Not Before: Jun 22 17:13:05 2026 GMT
Not After : Jun 29 17:13:05 2026 GMT
Subject: CN=6a396d22-fb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:89:2f:a3:c3:43:ee:a8:e6:23:14:ff:b4:
cb:22:4f:d9:a7:00:8b:e4:e9:64:f6:ab:c4:e2:c5:
d7:f0:65:d2:5f:f3:21:04:97:98:25:f3:de:bc:c0:
46:43:c3:61:64:34:14:f0:43:e4:36:f7:c0:49:71:
41:23:df:bc:f6:38:b2:11:46:36:a1:9f:82:c4:14:
e1:4e:0e:37:28:0c:72:38:40:da:1e:d7:c2:2e:0d:
5b:d1:a6:74:90:11:36:1d:5b:36:6a:f9:44:aa:8c:
03:4b:98:6e:c8:5c:0c:8d:19:f4:34:c3:ca:b6:27:
c8:98:2d:47:72:5d:f7:7f:70:71:f7:84:15:14:ea:
5e:55:9c:33:3f:bc:ac:ca:31:76:0d:d1:42:98:7f:
df:78:9b:37:5b:2d:e0:09:d7:07:a6:55:11:b4:84:
1e:28:d5:b2:4d:c4:a2:1d:9f:e2:94:68:c1:03:20:
6d:37:42:55:7d:1d:4b:c9:d9:d0:76:3a:fc:48:08:
92:5b:f1:21:ba:e9:ea:ee:9f:f1:6e:3d:b4:62:06:
3b:e0:dd:26:d8:3f:f6:49:61:a8:d9:dc:0a:f8:ce:
f1:cc:ad:6f:3a:0f:c2:4d:79:6c:d6:84:21:48:35:
bc:e5:20:94:24:7a:ba:24:a0:1a:2b:8b:76:c2:e1:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C3:01:2F:2B:62:F7:D6:2F:0C:0F:55:7B:86:4E:E5:1D:CB:7D:08
X509v3 Authority Key Identifier:
keyid:88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:83:1d:54:de:d0:58:b1:f9:4b:80:5f:79:cd:4d:a9:17:d7:
e9:f6:b1:a3:6a:e0:bb:17:30:cd:30:e7:d7:dc:a0:70:68:9f:
54:9b:a5:44:91:10:2f:80:d1:48:b2:dd:06:08:d7:6c:8a:ea:
2e:6f:e8:64:78:f3:59:56:cc:65:6c:8d:f6:96:58:ce:2b:b8:
02:c7:f1:7a:54:e6:eb:3e:5d:ba:f7:e7:0b:e4:7a:8b:5e:3e:
eb:df:21:d4:43:33:a1:bf:9b:38:50:6c:38:22:c9:15:e4:6a:
74:20:0f:a1:9d:5a:40:e3:49:f5:76:22:85:f2:a2:b3:ed:3c:
2f:69:01:3c:cd:13:2e:c7:09:0b:8b:38:da:0f:c5:fc:c9:69:
70:40:a2:36:17:18:40:0e:2f:44:35:b4:34:2a:fd:15:05:76:
2f:e5:db:04:8b:ba:89:2b:7f:76:24:43:bf:ff:8e:26:a2:13:
90:8b:5d:11:e8:49:cc:d8:f3:e2:56:26:f9:82:8d:1d:2a:2d:
d8:41:7d:99:ae:41:b3:28:37:21:d4:23:de:71:66:a6:c7:f1:
24:ba:d5:9b:85:6b:b4:e6:fd:f1:8e:fc:db:21:8e:b4:16:7e:
59:62:4a:78:67:6c:b9:a2:58:3f:3b:98:11:0b:b3:70:84:c1:
44:07:29:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:09 2026 by rpki-client