
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
File: iH4RB6g_EXT_fj54CIjbVyO3kls.mft (raw, json)
Hash identifier: euaoNcwAqY29Cio5rcOCBZCwFz0F50MPhbjVtfIhs9o=
Subject key identifier: EF:D4:A2:26:8D:99:56:69:2C:DA:0D:5D:DC:52:F1:17:64:01:C2:90
Authority key identifier: 88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B
Certificate issuer: /CN=A9155806/serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
Manifest number: 0120
Signing time: Tue 03 Mar 2026 05:25:43 +0000
Manifest this update: Tue 03 Mar 2026 05:25:42 +0000
Manifest next update: Tue 10 Mar 2026 05:25:42 +0000
Files and hashes: 1: iH4RB6g_EXT_fj54CIjbVyO3kls.crl (hash: xpI71QzWf7/v1uf/D/Oy9VohcyG1ZFqAPSMT1j/sRFQ=)
2: 10435EE8740511EF93658977C4F9AE02.roa (hash: 6+dRrxPmWRCMlxCcSYhpVStcDeLZfIKjMMz2mDaOI+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl
rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155806, serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B
Validity
Not Before: Mar 3 05:25:42 2026 GMT
Not After : Mar 10 05:25:42 2026 GMT
Subject: CN=69a670d7-7734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cc:55:50:e3:d4:2c:94:68:c2:84:f2:16:14:
cc:79:95:7f:8b:0d:04:ae:ac:69:6f:42:b2:46:21:
e3:2c:86:b9:29:0d:3e:1d:f5:8b:ca:45:b6:a4:09:
89:f2:04:2f:35:91:89:5e:c9:c1:b2:e1:0d:ae:84:
e8:f8:e4:79:3a:98:f1:a3:29:45:db:ab:a3:0d:62:
7e:d7:91:15:45:41:42:ac:d2:56:ec:b0:4e:10:61:
e7:e9:80:51:e9:5d:d0:4c:30:e4:25:29:f9:91:6a:
1d:ba:dd:20:3a:72:7c:fd:8e:9a:26:f1:78:6d:50:
d0:c4:dc:35:f5:69:0f:14:85:7d:f1:00:54:2d:b3:
b0:25:c9:10:a2:17:34:b9:c4:67:f4:84:2a:b5:0d:
e8:79:6a:a7:f4:ef:a6:c6:03:da:46:6e:91:fe:46:
b6:60:c7:ed:1a:6c:24:ec:bf:35:ce:5a:53:6e:21:
2a:74:80:bd:55:d9:5f:e5:4f:82:06:24:41:f4:5d:
70:0e:45:50:8b:a8:b2:66:f8:09:8f:29:e1:ef:1a:
10:5f:ee:cf:a4:b5:67:6e:97:d3:16:e5:8d:73:5c:
8f:fb:3c:38:5f:ea:59:b7:4e:ba:b8:4b:24:0c:c5:
fd:bd:33:89:cb:d8:11:df:39:fb:5c:ea:75:69:eb:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D4:A2:26:8D:99:56:69:2C:DA:0D:5D:DC:52:F1:17:64:01:C2:90
X509v3 Authority Key Identifier:
keyid:88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:04:b7:89:2b:53:8c:00:f2:39:c1:16:5e:85:dc:be:7b:b9:
81:9d:4f:35:a6:e1:fe:64:e0:10:a2:d3:da:20:4f:78:91:dd:
62:99:ce:e6:6d:ef:c2:44:9e:56:a6:2d:c2:d2:a3:7b:12:95:
80:a9:76:73:70:16:8c:1e:b0:5d:d9:db:e3:46:e6:5b:a6:98:
13:c6:ca:b2:a9:2e:3c:b3:84:85:7f:ce:d5:ab:da:ea:f3:fa:
2e:33:5a:e1:7b:27:23:c6:ca:38:83:5a:70:dd:31:24:a5:f2:
d9:b7:d4:a4:33:2c:2a:fc:93:19:09:08:f8:a0:20:3b:9e:2b:
d1:c6:65:be:f9:84:00:c7:a7:cc:78:05:d3:2f:be:4d:03:20:
2c:e9:81:af:67:aa:df:11:5f:6b:4c:bb:33:ef:23:95:ef:b8:
08:6d:34:4d:5c:fb:87:0f:b7:ee:ad:c6:c6:5d:73:1d:ed:0e:
2e:bf:4a:21:09:96:5a:54:2b:79:85:ed:c2:fa:28:bb:16:fa:
99:dd:48:e8:0d:ae:ec:3e:e3:5b:4b:7f:16:f0:c5:89:40:da:
83:db:db:99:a5:43:4a:e7:7c:d4:de:4d:68:f5:ee:09:77:8a:
c2:8f:6d:8a:fe:68:a2:cb:e6:fa:db:fe:77:32:a8:88:d2:51:
1f:6a:0e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:19:28 2026 by rpki-client