
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
File: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft (raw, json)
Hash identifier: E4j8PX8B0ALt9K1q/GFWKKWVBJEZpViYhg0poajnEZ4=
Subject key identifier: 71:C7:39:25:AA:76:86:21:BF:4F:CF:C1:1A:E9:FA:5C:89:26:B3:F8
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial: 1449
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
Manifest number: 13A5
Signing time: Thu 16 Jul 2026 17:02:55 +0000
Manifest this update: Thu 16 Jul 2026 17:02:54 +0000
Manifest next update: Thu 23 Jul 2026 17:02:54 +0000
Files and hashes: 1: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl (hash: ijsvdhH440JCC1Ax6EVdshhmgd3iMmu35LXGqkfbtgQ=)
2: 93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (hash: qTkmhI+Qyyl/OS0YSMe4PFP0Uo0ZgDYk7swVKX4DMFE=)
3: C6618F98BD0511EB9BB8C97CC4F9AE02.roa (hash: F0cc31VKiHf4FHRnIogdqDRTUiKEa4Y47dIXKp1tdro=)
4: 349FE3280DA811EBB62F0126C4F9AE02.roa (hash: +cRXbprZ4LZVVW+/qYF3DGNgfX7szW34Uy7ON79Y0sw=)
5: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (hash: 6SdEYqt35GAORPTUCY0ttBX2ur7jio+kU7tW6jFSa6o=)
6: 429A130C13D811EEBE72B647C4F9AE02.roa (hash: iNdf+focvFS30DDvcGSc17gI971FlnrqjqDKYgP/10w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 17:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5193 (0x1449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Validity
Not Before: Jul 16 17:02:54 2026 GMT
Not After : Jul 23 17:02:54 2026 GMT
Subject: CN=6a590ebf-5ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:57:51:e6:5a:02:33:e0:8a:c9:4e:92:51:
b4:f0:c4:cd:61:0e:e6:d0:10:dc:bb:e4:ad:08:a8:
30:8d:5c:62:07:5c:72:36:46:98:ea:8e:ba:2f:bd:
a0:f3:b2:11:08:3d:7b:2d:54:71:ac:d0:38:d4:b4:
73:3f:cc:82:b4:4f:2e:e5:69:a6:c0:b0:f3:13:0a:
45:8f:7d:ca:82:7a:50:cd:2d:17:33:73:6e:fd:df:
da:6c:7a:8a:d6:bd:6f:e2:f6:ed:b8:98:4a:98:e8:
97:62:65:04:81:8c:dc:13:57:fd:1d:c3:25:e8:f8:
c6:83:7e:1e:aa:68:f7:f0:26:4a:83:6e:ff:af:84:
f0:a1:c4:22:a9:7f:b1:b0:1f:7e:38:e2:a0:12:1c:
87:e0:24:26:bc:fb:f0:7c:87:7d:22:34:49:e0:07:
88:9f:40:85:6e:35:35:b5:30:d3:28:af:3c:6e:de:
88:1d:16:52:66:4a:23:02:e5:08:44:33:33:9c:bd:
4a:a9:49:82:20:1c:89:f0:77:a6:cd:2b:ed:6c:05:
4f:cc:60:52:b0:1f:59:fa:30:92:29:e8:09:c4:e7:
2d:e5:84:78:39:37:cf:bc:f9:c2:eb:b0:30:ce:12:
ae:17:6a:77:24:37:be:77:3a:d5:4f:b8:e9:a6:4e:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C7:39:25:AA:76:86:21:BF:4F:CF:C1:1A:E9:FA:5C:89:26:B3:F8
X509v3 Authority Key Identifier:
keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:60:5a:b2:d9:2b:60:89:5c:95:52:0e:77:6c:36:39:ba:b2:
9c:04:c0:ff:77:71:22:d3:52:b5:53:73:89:cd:5f:0a:11:7b:
b3:75:c5:26:43:94:e9:83:1d:10:0b:41:3c:c0:f1:28:fd:c4:
52:3c:85:8e:81:f6:9b:a9:6a:13:30:d1:27:44:6e:9b:e1:e0:
c2:67:a5:cc:7b:a5:2d:34:1e:90:31:f8:92:48:8a:f6:f6:e6:
ee:34:2e:5f:7b:e2:97:50:dc:38:bf:fc:6e:14:35:0f:82:44:
a6:69:29:59:aa:4a:50:2f:59:f4:12:cf:89:07:f4:c7:42:69:
66:ad:ed:71:1d:b9:81:a9:88:2d:45:ef:56:b8:cb:9a:b9:4f:
3b:0d:c3:30:ac:b9:72:3c:b4:a7:a9:75:b2:88:57:e9:7a:cc:
20:0e:d8:cd:9e:7f:1f:ab:fd:e1:17:92:9c:a9:61:b8:d9:a7:
06:57:63:2a:2e:a1:cc:8c:8a:2f:9b:0d:f5:59:c9:74:11:c5:
2e:1f:99:91:08:77:13:52:a6:d6:46:90:6a:87:a8:8b:0e:f4:
71:0b:6b:16:26:ed:d0:2e:12:db:98:63:ba:51:32:9e:54:d7:
1f:af:74:48:7e:81:08:65:be:b6:3c:42:c0:eb:81:93:78:e0:
b1:c5:b0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:22 2026 by rpki-client