
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
File: ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json)
Hash identifier: TYvCJIvnorNIKdcKRqRRG3BHgqMwCcy75cLOBu2Nr2w=
Subject key identifier: 58:4D:11:F2:06:36:BB:10:19:4C:76:8C:2E:71:82:5A:1D:BA:C6:66
Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C
Certificate issuer: /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
Manifest number: B7
Signing time: Sat 18 Apr 2026 19:42:03 +0000
Manifest this update: Sat 18 Apr 2026 19:42:02 +0000
Manifest next update: Sat 25 Apr 2026 19:42:02 +0000
Files and hashes: 1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: z3oyzSqEb8F4xM2XLpJPrx9LcaAaF9olWXK8vl401q0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl
rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C
Validity
Not Before: Apr 18 19:42:02 2026 GMT
Not After : Apr 25 19:42:02 2026 GMT
Subject: CN=69e3de8b-9e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5a:6d:66:ce:2c:f1:d1:37:63:c7:08:b7:89:
01:4f:9f:ff:0e:74:87:4a:1d:d7:0a:3b:0a:92:c1:
87:c0:9e:2f:7f:eb:e3:b7:fc:67:b8:4b:9c:2b:34:
d8:68:41:5f:60:31:41:bb:83:1f:f6:7d:47:19:e5:
53:f4:9a:32:54:f0:c3:df:68:74:51:97:f3:33:ae:
c8:33:47:ca:40:1c:34:cc:79:8c:0b:a2:fd:eb:3f:
b1:ee:a0:85:58:bb:d3:28:a9:1d:3e:9e:5d:e0:59:
5a:b9:56:18:c1:c5:1e:f6:3f:93:87:f0:56:8e:27:
39:be:c8:cc:d2:1f:c7:ff:83:cd:86:76:4e:b7:9e:
50:8c:dd:5c:87:6e:0b:c1:d1:c5:01:e8:7b:78:1e:
fb:f0:89:48:44:0b:57:75:ab:f5:54:06:61:23:41:
79:86:f4:cb:20:96:78:f8:ad:ac:14:02:5f:65:0e:
08:65:0e:77:e2:2b:31:37:98:d7:0b:28:f4:71:c6:
4c:b3:a5:dc:00:91:34:1b:0f:38:6b:0b:af:52:b8:
24:a7:93:e5:4a:aa:52:b6:d8:b6:ca:e1:9c:59:d0:
81:c1:53:72:5e:a3:94:d2:53:1f:e2:af:6f:10:0c:
2b:48:31:da:11:18:33:41:98:11:ac:1c:23:2c:26:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4D:11:F2:06:36:BB:10:19:4C:76:8C:2E:71:82:5A:1D:BA:C6:66
X509v3 Authority Key Identifier:
keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:58:5e:b1:0a:ec:9c:f7:ea:7d:0f:b3:c8:cd:e2:ec:c3:07:
4e:90:16:55:0c:81:d3:70:83:0f:f4:2e:cc:be:d0:99:d8:ec:
db:c4:25:88:43:71:f7:09:d6:b3:9d:65:bd:16:80:46:70:a8:
61:73:b8:f3:8e:2b:b7:c3:17:a3:5e:44:dd:92:f2:f1:0b:3d:
00:d4:d6:40:69:55:f5:44:7c:c5:21:eb:8f:25:bf:3f:9d:2e:
28:86:23:d5:fd:7a:5f:c1:90:04:e1:9e:24:70:cb:0c:5d:c7:
2a:36:fa:8e:e0:a5:d2:8b:ab:97:94:ba:1b:46:bf:ba:b8:3e:
66:8d:1e:dd:3e:97:da:6d:d2:af:72:be:1f:a0:a4:d8:35:0c:
cf:8c:ed:c5:80:81:37:fb:f3:d8:d5:89:3c:cd:dc:9f:51:9c:
4d:a4:47:bc:36:bc:bb:56:10:67:ee:04:4e:4e:ee:6d:be:de:
37:be:53:0f:25:dd:b7:43:2c:99:e1:82:d9:ee:8b:49:8d:fd:
2f:49:53:57:24:d6:87:9a:40:58:2b:bc:22:48:49:48:b9:0e:
1d:ad:79:6d:04:d6:88:3f:c2:d6:7d:a1:a9:95:1c:d9:31:fc:
44:87:e1:c3:54:52:55:26:db:1a:76:e2:39:4d:de:27:77:67:
f2:c5:2f:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENDMEYxMTAvBgNVBAUTKDhBMTFFQjc2NEIxNTc4NTM5RDZFRDNCMjkwM0JGNjFG
NEMwODAwN0MwHhcNMjYwNDE4MTk0MjAyWhcNMjYwNDI1MTk0MjAyWjAYMRYwFAYD
VQQDEw02OWUzZGU4Yi05ZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9VptZs4s8dE3Y8cIt4kBT5//DnSHSh3XCjsKksGHwJ4vf+vjt/xnuEucKzTY
aEFfYDFBu4Mf9n1HGeVT9JoyVPDD32h0UZfzM67IM0fKQBw0zHmMC6L96z+x7qCF
WLvTKKkdPp5d4FlauVYYwcUe9j+Th/BWjic5vsjM0h/H/4PNhnZOt55QjN1ch24L
wdHFAeh7eB778IlIRAtXdav1VAZhI0F5hvTLIJZ4+K2sFAJfZQ4IZQ534isxN5jX
Cyj0ccZMs6XcAJE0Gw84awuvUrgkp5PlSqpStti2yuGcWdCBwVNyXqOU0lMf4q9v
EAwrSDHaERgzQZgRrBwjLCYFPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFhNEfIG
NrsQGUx2jC5xglodusZmMB8GA1UdIwQYMBaAFIoR63ZLFXhTnW7TspA79h9MCAB8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MwRi80OUU5OTZDNDJD
NjIxMUYwQTlCMUM2NUFDNEY5QUUwMi9paEhyZGtzVmVGT2RidE95a0R2Mkgwd0lB
SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2loSHJka3NWZUZPZGJ0T3lrRHYySDB3SUFIdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0MwRi80OUU5OTZDNDJDNjIxMUYwQTlCMUM2NUFDNEY5QUUwMi9paEhyZGtzVmVG
T2RidE95a0R2Mkgwd0lBSHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeVhesQrsnPfqfQ+zyM3i7MMHTpAWVQyB03CDD/QuzL7Qmdjs28QliENx9wnW
s51lvRaARnCoYXO4844rt8MXo15E3ZLy8Qs9ANTWQGlV9UR8xSHrjyW/P50uKIYj
1f16X8GQBOGeJHDLDF3HKjb6juCl0ourl5S6G0a/urg+Zo0e3T6X2m3Sr3K+H6Ck
2DUMz4ztxYCBN/vz2NWJPM3cn1GcTaRHvDa8u1YQZ+4ETk7ubb7eN75TDyXdt0Ms
meGC2e6LSY39L0lTVyTWh5pAWCu8IkhJSLkOHa15bQTWiD/C1n2hqZUc2TH8RIfh
w1RSVSbbGnbiOU3eJ3dn8sUvDg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:10 2026 by rpki-client