
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File: iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier: nTqN1qhw5Oo9cHHBU9lnYJsD4PaWycgopBqQ3rEWTyY=
Subject key identifier: 6C:6F:EF:BB:3F:86:69:32:5B:51:02:AA:83:2B:DC:4C:6E:1C:6F:C3
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer: /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial: 1047
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number: 102B
Signing time: Wed 20 May 2026 17:26:16 +0000
Manifest this update: Wed 20 May 2026 17:26:16 +0000
Manifest next update: Wed 27 May 2026 17:26:16 +0000
Files and hashes: 1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: FCVTw59jXAWp6Upl5jXbDromMdx+zps4bjaCFLghajw=)
2: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: JR72/EZy5aRrSFB9vWQMg1q1NBXm5hj69ANbCPmEu98=)
3: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: Ri/V1vsZYZSf3Iiz5nBojjsApKtj70HrLpdneU/NrfM=)
4: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: XvZz5Qg4UuABOAvZL3TrqvqvGORz9Mmy5LeD7IN22s0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4167 (0x1047)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Validity
Not Before: May 20 17:26:16 2026 GMT
Not After : May 27 17:26:16 2026 GMT
Subject: CN=6a0deeb8-a9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:e5:a8:58:af:10:c4:ac:fb:e6:1b:02:02:
2e:c6:a6:f6:a9:af:38:35:38:d1:1a:87:22:09:09:
89:04:0b:31:e5:6a:dc:37:31:bc:8c:9c:29:92:e2:
25:bf:2a:72:a1:69:0e:e2:ad:1d:6b:0c:6e:81:23:
8a:47:50:3c:0f:25:a2:11:63:04:93:ac:7f:9d:8b:
ae:15:42:4e:e4:e2:a3:c1:f2:a5:33:8d:96:91:a9:
12:63:09:9b:2e:6e:f5:80:f1:74:a6:3b:dd:f8:cf:
ad:b3:2b:51:62:1f:cf:a2:dd:24:47:ce:5b:ad:30:
32:77:3f:08:73:73:8f:b9:f7:7e:cc:1c:f9:bf:80:
b6:b3:aa:53:b9:ee:97:7c:71:c9:43:d8:c9:0b:20:
3b:83:6b:e9:1a:50:62:66:c7:33:b3:b0:9a:83:1a:
4a:87:91:06:5e:89:61:33:de:05:be:40:cb:a8:8c:
52:ef:17:72:76:1e:3e:f2:1b:5f:6d:d2:db:9a:61:
ef:5a:09:66:7f:6a:58:bc:ec:5e:52:3a:8a:43:e2:
cb:88:c4:2a:08:b6:c0:5f:f9:55:74:38:a9:95:04:
ca:c9:ff:ef:56:98:6b:a7:15:11:3c:67:03:e3:e2:
07:4e:87:04:fb:f7:de:67:6d:22:31:ff:d8:b7:d6:
c5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6F:EF:BB:3F:86:69:32:5B:51:02:AA:83:2B:DC:4C:6E:1C:6F:C3
X509v3 Authority Key Identifier:
keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c6:61:e7:de:59:90:0a:b0:9a:36:e0:29:e1:b0:15:b2:05:
36:58:ac:c1:66:e1:52:25:37:b5:df:02:81:a4:ec:a7:73:2e:
04:85:2f:d9:3e:2f:fa:b3:87:61:37:9e:22:78:9a:93:63:e9:
97:ae:1d:16:04:28:b4:58:67:1c:dd:41:26:c0:45:ae:4d:81:
b0:b8:85:d3:58:5a:d7:83:8e:d9:72:f8:ba:d0:0a:d4:ee:f9:
bf:dc:67:55:8e:d9:5f:cf:15:7d:89:b2:c1:24:c8:d0:f0:18:
a5:17:a3:64:f7:89:a9:dc:01:e0:a1:65:74:4f:6d:31:b4:d2:
3a:d4:e5:42:fe:d7:2a:05:8f:aa:94:03:71:f0:b9:df:29:8f:
50:7b:6d:63:b8:7e:fb:65:ef:16:89:ca:43:91:b7:1c:3b:11:
bf:f7:00:f0:a0:68:fa:f1:53:a6:82:6e:3d:27:db:9a:54:fb:
de:dc:a8:90:c3:c5:55:9a:49:2c:3e:94:62:9c:ae:77:c6:96:
f9:f8:96:ef:11:26:96:b1:70:48:9c:cc:cd:8d:07:7f:35:59:
a7:fc:15:fc:fa:7c:d0:4b:38:af:c3:7e:61:11:52:f0:a4:02:
ce:16:7d:bb:d5:aa:0d:1a:51:5a:0f:b2:48:aa:3d:81:33:7a:
82:9a:e2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 15:25:01 2026 by rpki-client