
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
File: IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json)
Hash identifier: YPHVUNWewPGiCdxb6TUadltESO0kjedKitxWf2eUmpQ=
Subject key identifier: 00:A6:74:63:22:63:16:A8:1E:33:24:DD:B4:15:91:D5:75:51:F8:0D
Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
Certificate issuer: /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
Certificate serial: 35AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
Manifest number: 357C
Signing time: Sun 26 Jul 2026 14:20:17 +0000
Manifest this update: Sun 26 Jul 2026 14:20:16 +0000
Manifest next update: Sun 02 Aug 2026 14:20:16 +0000
Files and hashes: 1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: 6uI/9aJD97sK1jWee3Aiz+S8WiTY+CymVYCiA44sGxo=)
2: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: 2V0xaBVMH3qwSFGGeVHjMLvkAdaeXJP/NN3OOPBpG2A=)
3: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: htjWNsJYRCHi02awtSfLaI7Ni5BaFwbvL87PQ+0VPg4=)
4: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: t1FUONQlvo1z1vAcNEflgs9l4NJNKngDzGvyUzZvKfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl
rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 14:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13743 (0x35af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
Validity
Not Before: Jul 26 14:20:16 2026 GMT
Not After : Aug 2 14:20:16 2026 GMT
Subject: CN=6a6617a1-b736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:63:b4:da:f1:16:de:95:c0:84:43:4e:38:
ac:63:f7:64:b0:a4:eb:81:58:a7:c5:a1:7a:4f:36:
68:9a:b6:54:55:1b:d3:ba:cb:f8:90:2a:34:93:d3:
f9:ec:e1:c6:a5:82:6f:bd:cf:c3:ab:bf:9d:44:95:
8a:ef:03:26:fd:75:2a:4d:36:87:ce:1a:84:88:9a:
22:86:df:9d:3b:46:0a:ab:35:14:40:ed:09:e6:0a:
91:69:69:06:c2:1e:a7:2e:49:8b:d7:91:c8:d4:84:
e5:ed:1a:6d:c5:7c:9d:de:29:17:8b:32:e0:7c:74:
47:a1:24:1b:5a:95:67:69:fa:1a:76:b1:62:87:bd:
ab:d1:fe:ed:f5:62:a6:58:5d:7c:68:4e:d6:e9:e1:
d9:88:2d:d6:09:0f:6b:9e:2e:aa:b5:dd:83:18:b1:
0c:24:e9:e8:c4:26:21:a1:4b:36:69:14:7f:f6:be:
c8:9d:76:f9:a7:c4:13:50:40:93:fb:4f:a0:32:b7:
25:0d:bf:d9:a5:0f:7c:92:06:bb:0d:9d:24:db:9d:
2c:e0:af:d2:2c:fa:84:15:49:15:52:b3:a5:ba:98:
47:06:1e:44:c9:d2:20:49:f8:9d:6b:4b:61:4a:ac:
78:b9:1c:88:bc:5d:e0:37:fe:c0:9a:b4:84:0a:e8:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A6:74:63:22:63:16:A8:1E:33:24:DD:B4:15:91:D5:75:51:F8:0D
X509v3 Authority Key Identifier:
keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c0:49:7a:39:38:c2:63:f7:bb:80:11:62:07:e1:e4:68:7b:
5c:bd:9d:57:10:ce:5c:9d:34:95:cd:c1:18:ad:56:4f:72:b9:
5a:0b:e6:6e:cc:35:08:93:1c:32:a8:15:d9:71:92:3a:d3:eb:
38:92:f1:af:2f:2d:0c:f6:f9:9d:11:4e:fc:85:99:31:6e:85:
2a:9a:fd:69:cf:62:a6:f0:88:56:0a:e0:58:23:ec:92:f0:ae:
77:48:e2:94:ad:de:e5:d0:b2:25:5f:f6:11:30:82:60:51:44:
93:86:dc:be:97:42:dd:b7:bc:69:c8:e6:5a:21:e3:91:1a:85:
3a:c5:c8:13:30:85:ce:00:c8:10:e2:84:e5:92:c4:f1:7e:0c:
2d:b9:97:d6:cd:5e:fa:f8:8e:ec:e7:35:e9:d6:6c:10:b9:34:
63:fe:e3:57:83:c2:f9:6b:e6:e5:ee:53:bc:b2:6c:38:88:69:
52:5f:f9:88:86:34:fc:94:9d:7f:62:7d:ba:bc:22:89:9b:16:
d2:c6:df:97:17:19:9e:be:4e:69:6b:5f:d3:5c:f4:90:c3:d4:
9d:d1:08:16:79:d6:07:fc:b5:a1:aa:11:57:ad:51:cd:7e:f4:
1e:2c:97:d2:fe:8e:91:0c:a8:de:86:9e:f3:ae:b7:5d:a7:22:
e6:0e:c6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:15:36 2026 by rpki-client