
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
File: izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json)
Hash identifier: rmQaXf8AbJp69Mc+E3vOm11H/Vj0fbGvvubTG3eoMVA=
Subject key identifier: E8:5E:8A:B7:C2:A3:F8:72:08:E3:69:B1:1B:22:57:82:C3:9D:D6:AE
Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79
Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
Manifest number: 010C
Signing time: Mon 01 Jun 2026 06:48:02 +0000
Manifest this update: Mon 01 Jun 2026 06:48:02 +0000
Manifest next update: Mon 08 Jun 2026 06:48:02 +0000
Files and hashes: 1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: FNaxmCTgeAbA844r/aYCIkrqu9sWPVnScA/ryBY56YM=)
2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: 9RAPwgPmDHz4AiSmQ6kh7IGZ3ghd3v7puVNtDWxpvZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl
rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179
Validity
Not Before: Jun 1 06:48:02 2026 GMT
Not After : Jun 8 06:48:02 2026 GMT
Subject: CN=6a1d2b22-6d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:26:54:1b:63:a7:1e:49:3f:8c:d3:38:a5:
53:6b:95:e3:7b:cb:86:32:3a:73:ef:48:74:c6:47:
53:29:4a:7b:72:06:1c:c5:a5:b8:ec:e9:4e:e4:27:
06:ab:c6:1a:88:87:f6:85:a1:f5:22:91:c8:3c:0b:
1e:6b:e7:59:e8:35:08:2f:f5:9c:9e:66:84:1e:a1:
a4:55:ab:bc:f8:e4:85:df:99:22:cb:68:de:25:28:
a6:73:68:b2:b9:f4:f5:75:46:99:b1:f9:50:3d:f0:
e7:54:83:05:da:9d:62:75:0c:48:7c:0a:a1:e1:c4:
c9:15:d3:de:9e:5e:24:d5:e5:f0:fe:1b:83:ed:f0:
db:89:da:91:f7:71:48:e1:4d:fe:d3:0e:d2:77:29:
1a:17:06:5b:ab:c2:df:43:47:34:ad:bd:09:39:62:
1a:1b:d5:c0:99:31:bf:cc:79:ba:a1:f8:71:ac:85:
0a:e3:cb:13:ce:00:0d:cf:04:e6:80:ef:25:42:c0:
26:c0:6b:cc:22:a5:db:e4:ea:da:7c:05:7f:17:71:
fc:1e:4d:f1:39:7e:25:68:c3:36:18:7b:5f:f5:ce:
07:95:86:97:fc:d6:2a:0b:25:af:83:b3:8e:8b:f0:
68:34:c8:66:b7:aa:b0:43:92:9f:65:dc:95:db:8a:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5E:8A:B7:C2:A3:F8:72:08:E3:69:B1:1B:22:57:82:C3:9D:D6:AE
X509v3 Authority Key Identifier:
keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:ba:15:59:09:74:bc:65:23:e8:34:2d:56:dd:95:68:67:37:
57:76:9c:ba:53:2f:14:19:37:22:ce:79:42:03:6c:fe:88:37:
bc:c9:e8:ae:60:7c:dd:64:41:17:19:6c:cc:dd:21:52:c2:6e:
75:f4:6e:20:c0:03:bb:c7:82:bc:9f:16:04:67:c3:7c:cf:32:
b6:d5:a7:dd:d7:f9:70:9a:0e:9b:5a:3b:6c:36:0f:90:2b:ec:
c5:f4:db:3b:6d:7a:58:b4:9c:45:df:f5:ae:d9:fd:a2:9b:27:
df:0b:7a:9c:7a:3e:74:72:56:bc:fd:16:e1:1e:8e:1c:1d:04:
cf:c3:9c:63:60:7c:97:81:fd:3f:9e:de:49:cb:4a:e1:e5:4f:
a2:42:0a:1e:61:15:ba:8c:8d:e5:e9:cd:a0:89:1a:a7:c3:9d:
98:d4:80:5e:fa:6d:d3:42:9f:a6:0a:4e:7d:af:d4:e2:23:ae:
0d:de:bf:03:0d:d1:c4:3e:4f:32:59:85:51:d3:84:da:6e:ff:
30:70:65:ec:c8:75:8b:7c:19:41:f5:02:97:76:10:bc:4b:4c:
3f:70:fa:b6:41:f2:35:c2:04:29:32:76:ec:3a:81:06:99:40:
a8:5a:ee:65:9e:d3:7d:7b:28:96:1d:a3:01:7b:c7:85:24:6b:
da:b9:ba:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:09 2026 by rpki-client