
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
File: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft (raw, json)
Hash identifier: kxjOHKqVPyyy2NtoXsJCEivqlg2r7tBDAj21WNlltys=
Subject key identifier: 90:F6:11:A7:ED:47:EB:12:F2:FB:4F:80:F3:3C:0A:94:5D:A3:A3:AA
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial: 146A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
Manifest number: 13C1
Signing time: Fri 04 Sep 2026 16:56:37 +0000
Manifest this update: Fri 04 Sep 2026 16:56:36 +0000
Manifest next update: Fri 11 Sep 2026 16:56:36 +0000
Files and hashes: 1: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl (hash: koSSVvxZ0xi+nkbBDxH8oW8fGTF1HXYU3eiGRv8DFOo=)
2: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (hash: ZGdgTIaqt5RzK0CPJDs9IZsbHRo3ViFAUlTkaRU3Awo=)
3: 349FE3280DA811EBB62F0126C4F9AE02.roa (hash: 2jQytLGdJ6ff6bxOOpScMDyAcFTBPixraFcMfIfehBU=)
4: 429A130C13D811EEBE72B647C4F9AE02.roa (hash: D6ocaeZh/2kBRS3IeP/Hf3rcSs3cxzlYnm3zwKMYJQ8=)
5: 93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (hash: HoxvhnC+8ANcphOvZAPIqizlq7PyvHwu7u+jHr89v60=)
6: C6618F98BD0511EB9BB8C97CC4F9AE02.roa (hash: 6rmJg36M4zzzOICsr8+u/st+BufKnwRpCHSLVtbi9pA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5226 (0x146a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Validity
Not Before: Sep 4 16:56:36 2026 GMT
Not After : Sep 11 16:56:36 2026 GMT
Subject: CN=6a9af845-dc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:d4:d3:f2:c9:13:70:38:92:ca:bc:96:74:
ea:f4:0c:7e:a9:76:f0:eb:2a:91:a0:09:cf:e8:6d:
90:02:b0:c7:9e:23:2b:f6:8b:17:00:92:b5:bf:8d:
58:21:d5:29:9c:f4:07:bb:15:0d:f4:52:41:b8:20:
18:59:50:fc:ed:05:75:a4:c9:93:54:4c:36:f7:c5:
9b:a4:67:48:62:3f:53:6b:dc:91:6a:5b:5c:91:55:
cb:87:32:d2:2b:a1:6f:99:64:dc:14:5b:9b:26:bf:
c9:e2:9d:c5:93:bf:16:b5:a5:63:44:f7:b4:b6:17:
a3:9c:e5:90:d7:69:d1:72:02:b8:00:14:33:25:e7:
fb:46:67:3f:25:c5:26:56:8a:d6:4b:be:e4:4c:f2:
43:fa:d5:f1:59:ad:d3:b9:a9:1d:67:92:d6:d2:1f:
39:77:5f:cf:a1:03:ff:ec:fb:4b:2f:58:0f:a5:aa:
67:01:87:92:ce:5d:9b:da:2a:a2:6a:b9:b3:76:29:
c2:a3:ab:86:c0:15:8e:6f:6c:ee:b0:49:52:34:cb:
22:f3:67:63:92:f0:0e:11:fd:ed:5d:00:2d:3a:86:
c1:fd:1d:f3:37:f5:c1:63:c2:6f:1c:60:bb:19:dc:
32:7b:30:24:95:d3:83:c3:4e:5b:31:c9:ea:fa:f7:
99:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F6:11:A7:ED:47:EB:12:F2:FB:4F:80:F3:3C:0A:94:5D:A3:A3:AA
X509v3 Authority Key Identifier:
keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:65:f9:db:8c:a5:b1:72:62:e2:0b:24:ee:3c:58:4b:45:11:
ed:d4:21:76:54:0e:7c:05:2f:d7:24:a0:f2:f3:46:60:5f:3c:
c9:93:01:ae:d9:35:dc:4b:e3:20:d8:6b:6f:12:1c:4a:7c:3f:
2c:fe:1f:9d:25:f6:ce:34:4f:e5:15:da:d6:d0:d2:0e:d0:36:
04:ac:3f:d8:f4:83:e5:3d:57:17:a6:14:20:e8:00:38:e1:81:
11:9d:4e:40:9d:d1:88:14:70:4a:93:60:f9:a5:08:c3:cd:87:
ca:9f:6c:32:f4:11:4a:ff:2b:5b:b4:57:0d:60:ee:f4:3c:0f:
ee:83:72:a9:da:6f:fc:3b:f9:3e:6a:98:6e:53:89:e4:11:6e:
81:d0:39:18:8d:4f:c2:92:eb:54:a2:1c:07:70:71:2f:07:27:
6f:bf:33:3d:20:69:1e:41:56:21:99:03:b9:0e:96:6d:c7:11:
69:aa:45:82:68:a1:e7:d5:0f:7d:74:cb:e6:7d:1d:1a:df:c2:
16:01:06:78:a9:17:c1:ee:e0:a6:81:4b:14:0e:c5:c6:f9:83:
5b:7d:a3:51:2e:91:9b:22:82:7d:89:c2:9f:ea:c3:b5:be:93:
cd:cd:7c:45:18:1c:a4:b9:02:a9:b2:a0:5c:d9:be:28:8f:55:
dd:36:4a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:09:15 2026 by rpki-client