
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
File: ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft (raw, json)
Hash identifier: jW90XkNgUarkAP0u5EqWhCCsvW8r1tmcqt6vn32fOMw=
Subject key identifier: CD:79:F7:07:53:BA:A8:01:2C:76:0C:C7:2C:A6:BF:DA:0E:6E:38:8C
Authority key identifier: 8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54
Certificate issuer: /CN=A9167671/serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
Manifest number: AE
Signing time: Fri 09 Oct 2026 07:38:14 +0000
Manifest this update: Fri 09 Oct 2026 07:38:14 +0000
Manifest next update: Fri 16 Oct 2026 07:38:14 +0000
Files and hashes: 1: ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl (hash: BJ4x4PYTF5HsxWr9tE5EwFQrtirlm559Mr7fOJwwUHc=)
2: 42AD4128C0FD11F0883D987DC4F9AE02.roa (hash: vGDLBHhQ2uCZ7yDty8cYd4H0mY/09AkesOUGu4E2fks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl
rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167671, serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
Validity
Not Before: Oct 9 07:38:14 2026 GMT
Not After : Oct 16 07:38:14 2026 GMT
Subject: CN=6ac899e6-51b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:a7:18:44:3f:da:27:77:dd:20:3e:90:45:
d4:be:d8:31:99:9d:57:ad:d4:3c:93:e6:35:07:05:
9c:75:98:7c:92:6b:76:90:ef:42:89:31:bf:51:7c:
5e:01:14:1c:55:bc:19:3c:bd:6f:bf:48:0d:1a:34:
1d:5f:9c:f5:90:82:3a:44:6b:1e:b9:38:fc:e9:34:
7b:a8:3c:e1:02:75:ca:ed:74:74:e4:2a:41:fa:0a:
c4:89:f0:b7:6a:7e:66:47:58:13:05:d2:fe:64:70:
40:c3:cf:91:e4:cc:45:3f:42:8f:cc:a9:0b:e1:d3:
71:70:b4:6a:7b:6f:5a:2d:5b:d1:79:9a:92:47:0e:
01:a1:58:0c:eb:24:ed:36:e2:80:8d:be:e4:bc:fb:
19:f9:b9:54:2f:f7:45:c7:0d:b4:31:65:f0:18:54:
0f:8b:ed:d3:ea:0f:88:b4:de:53:bd:59:e0:0f:ee:
ba:80:dd:57:79:49:95:3a:58:e1:c4:5c:72:0f:29:
b6:42:fc:01:45:d7:0a:a5:32:79:51:e6:f6:ab:6e:
a6:f0:23:90:3f:92:f1:53:8e:3d:11:63:c7:12:1b:
b0:bb:34:e6:54:07:dc:ae:d7:89:e6:b5:e2:3c:a2:
5c:62:a4:1a:54:5f:8b:83:69:ad:05:45:1e:1d:9f:
98:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:79:F7:07:53:BA:A8:01:2C:76:0C:C7:2C:A6:BF:DA:0E:6E:38:8C
X509v3 Authority Key Identifier:
keyid:8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:10:ff:34:70:6d:f8:03:31:a6:ab:aa:3d:35:b0:74:9b:0d:
80:bf:dc:70:3b:44:b0:33:e6:0c:ad:63:af:48:7a:e4:fc:73:
40:0c:d9:8e:62:b8:13:ac:e5:b2:81:2b:f4:ca:64:d1:fa:2c:
35:a3:3b:d4:06:87:ed:bd:c8:db:9d:45:4e:bd:0f:73:e9:04:
70:8c:77:27:35:3d:49:c9:58:e6:7f:de:f3:b1:fa:06:9d:86:
23:f3:c0:dd:65:7b:62:c2:6c:df:b2:47:48:e9:c0:d7:49:a6:
2d:5c:c5:67:4d:8e:7f:80:d9:3c:bf:cb:99:43:80:56:53:e2:
a7:f8:51:14:2e:d4:ff:3d:bf:87:00:2d:c4:56:cd:99:7c:ae:
1e:2b:4a:5b:98:de:6e:9a:bf:7c:a3:d7:2e:82:6a:a6:5b:17:
44:38:7d:e3:53:9b:01:fb:53:4a:c9:01:34:9a:d6:46:5c:c3:
c4:ec:d2:5a:f2:42:83:a6:a8:27:d3:c4:68:11:eb:ed:94:a3:
aa:41:10:79:48:69:ca:3f:f7:ca:0c:62:2a:ef:4b:26:9e:18:
5c:6f:46:2a:6d:60:7f:56:a3:e2:b5:37:97:a7:03:b8:92:84:
34:16:60:70:83:18:d0:e4:55:eb:8c:e2:23:67:55:2d:77:d7:
e3:18:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 16:15:07 2026 by rpki-client