
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
File: IqYsFNK9MuPlltij5iu8MnRGj5k.mft (raw, json)
Hash identifier: 7yzfW/2pscoBlPMMzbzzNFysVtQMynjMMBz5CJrS7IQ=
Subject key identifier: 0C:C4:3F:EF:5A:7D:E9:54:91:8E:4E:79:55:8F:F6:51:4C:54:BA:6A
Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99
Certificate issuer: /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99
Certificate serial: 017F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
Manifest number: 0175
Signing time: Sun 21 Jun 2026 04:44:44 +0000
Manifest this update: Sun 21 Jun 2026 04:44:43 +0000
Manifest next update: Sun 28 Jun 2026 04:44:43 +0000
Files and hashes: 1: IqYsFNK9MuPlltij5iu8MnRGj5k.crl (hash: dnteG8Af0G463xDZ4iW0d4jHdlRdYghsqJagzC9UTkw=)
2: 1DD85DA2386311EFB10A6A1CC4F9AE02.roa (hash: Z9psePfPHTD1JWqFIEMEnQFvkSAfBuwnGTYYVZWeEbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl
rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Jun 2026 04:44:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EA7, serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99
Validity
Not Before: Jun 21 04:44:43 2026 GMT
Not After : Jun 28 04:44:43 2026 GMT
Subject: CN=6a376c3c-595a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:04:4f:7d:f9:53:4a:01:47:20:2e:80:94:4f:
b6:eb:3d:90:b9:35:a9:43:07:aa:4b:6d:18:7e:f2:
2b:ef:3a:f1:6a:82:52:03:d0:3a:4b:cc:ea:c6:94:
20:3c:62:11:5a:e3:33:0f:d0:2c:e7:60:52:5f:c2:
26:8e:15:9c:fa:85:f9:b8:9b:2f:83:67:db:42:10:
6c:0b:ff:4c:82:40:09:28:55:74:e0:5c:9a:7f:15:
82:8e:d7:75:a2:60:cc:0e:4b:28:0f:5e:7e:24:49:
58:02:c9:39:f9:6c:97:82:f3:bc:f8:a0:a5:d8:50:
db:1a:9c:c9:f1:74:1f:cf:26:11:72:84:77:6c:79:
32:37:11:33:0f:30:95:c5:73:f0:de:7a:db:e2:56:
3e:21:88:9b:c5:2f:87:d1:ec:93:de:8d:e9:dd:8b:
a0:e6:65:48:5e:2b:b7:ec:e0:bb:93:66:56:a2:fc:
89:51:31:ee:fd:96:3f:6e:89:38:e8:cf:c0:4a:3c:
6b:9f:71:71:99:6c:84:86:6a:a2:6f:8a:bf:9d:eb:
fb:b2:1d:16:60:bf:db:84:bc:8f:8f:04:df:b4:74:
d4:9b:27:a7:99:57:dc:ff:f5:4e:75:6b:6d:e8:3b:
c1:ba:e2:e5:54:1b:df:d5:16:92:00:7a:dd:7a:49:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C4:3F:EF:5A:7D:E9:54:91:8E:4E:79:55:8F:F6:51:4C:54:BA:6A
X509v3 Authority Key Identifier:
keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:88:17:62:1a:50:c2:81:71:45:a0:15:5f:0f:c4:5d:04:b8:
37:2c:dd:86:b4:03:01:97:04:29:ac:45:0a:1f:79:4e:29:3d:
96:f6:59:d0:2f:ce:9b:5b:fc:62:e3:c3:81:ad:c2:2f:b6:92:
34:1a:97:30:f6:4f:80:b8:c6:ba:58:7f:8e:47:96:c9:c7:d5:
85:6f:ff:52:29:42:50:e0:35:11:8f:6d:4b:1e:03:0d:30:33:
66:c4:48:b4:65:f1:78:64:f2:c1:e3:a7:e0:23:09:57:a2:e1:
09:6b:2e:6e:3c:82:81:13:b2:65:4a:99:ef:8e:42:10:88:9b:
4b:4b:68:49:ee:61:ae:da:6a:2c:db:59:1d:9b:03:ba:fa:dc:
4e:a3:c0:bc:c3:bb:27:1f:73:10:02:ea:db:09:13:b5:cf:17:
b3:89:49:24:6b:46:08:2a:56:81:ae:0f:bd:43:ca:b2:91:34:
05:37:44:dd:b4:48:70:4b:8f:af:0a:b2:c9:d0:3b:94:96:b9:
20:6b:c5:8c:c1:15:b3:21:39:b4:0c:eb:44:5f:de:3b:bc:c6:
2a:a6:a8:06:51:2f:97:16:aa:fd:17:91:9e:12:0e:ff:1b:9a:
cb:9f:31:b8:53:2a:f8:54:8e:15:d6:0a:60:6a:5d:7a:05:3b:
d9:94:35:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhFQTcxMTAvBgNVBAUTKDIyQTYyQzE0RDJCRDMyRTNFNTk2RDhBM0U2MkJCQzMy
NzQ0NjhGOTkwHhcNMjYwNjIxMDQ0NDQzWhcNMjYwNjI4MDQ0NDQzWjAYMRYwFAYD
VQQDEw02YTM3NmMzYy01OTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+gRPfflTSgFHIC6AlE+26z2QuTWpQweqS20YfvIr7zrxaoJSA9A6S8zqxpQg
PGIRWuMzD9As52BSX8ImjhWc+oX5uJsvg2fbQhBsC/9MgkAJKFV04FyafxWCjtd1
omDMDksoD15+JElYAsk5+WyXgvO8+KCl2FDbGpzJ8XQfzyYRcoR3bHkyNxEzDzCV
xXPw3nrb4lY+IYibxS+H0eyT3o3p3Yug5mVIXiu37OC7k2ZWovyJUTHu/ZY/bok4
6M/ASjxrn3FxmWyEhmqib4q/nev7sh0WYL/bhLyPjwTftHTUmyenmVfc//VOdWtt
6DvBuuLlVBvf1RaSAHrdeklwowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzEP+9a
felUkY5OeVWP9lFMVLpqMB8GA1UdIwQYMBaAFCKmLBTSvTLj5ZbYo+YrvDJ0Ro+Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVBNy9CMUIzRTJENjM4
NjIxMUVGOUUxN0U4NkZDNEY5QUUwMi9JcVlzRk5LOU11UGxsdGlqNWl1OE1uUkdq
NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lxWXNGTks5TXVQbGx0aWo1aXU4TW5SR2o1ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEVBNy9CMUIzRTJENjM4NjIxMUVGOUUxN0U4NkZDNEY5QUUwMi9JcVlzRk5LOU11
UGxsdGlqNWl1OE1uUkdqNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl4gXYhpQwoFxRaAVXw/EXQS4NyzdhrQDAZcEKaxFCh95Tik9lvZZ0C/Om1v8
YuPDga3CL7aSNBqXMPZPgLjGulh/jkeWycfVhW//UilCUOA1EY9tSx4DDTAzZsRI
tGXxeGTyweOn4CMJV6LhCWsubjyCgROyZUqZ745CEIibS0toSe5hrtpqLNtZHZsD
uvrcTqPAvMO7Jx9zEALq2wkTtc8Xs4lJJGtGCCpWga4PvUPKspE0BTdE3bRIcEuP
rwqyydA7lJa5IGvFjMEVsyE5tAzrRF/eO7zGKqaoBlEvlxaq/ReRnhIO/xuay58x
uFMq+FSOFdYKYGpdegU72ZQ1yQ==
-----END CERTIFICATE-----
Generated at Sun Jun 21 17:04:15 2026 by rpki-client