
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
File: if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json)
Hash identifier: xwMVF2l95rc65Em+iBqQ4U1vZ7G/we76U+3kq5nX1Zs=
Subject key identifier: 88:77:00:12:A8:ED:54:46:DF:EA:21:87:4F:BB:10:CF:BD:AC:28:4A
Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
Certificate issuer: /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Certificate serial: 3590
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
Manifest number: 3569
Signing time: Thu 16 Jul 2026 15:06:57 +0000
Manifest this update: Thu 16 Jul 2026 15:06:57 +0000
Manifest next update: Thu 23 Jul 2026 15:06:57 +0000
Files and hashes: 1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: qx6O4LqwV/SOSyW4/NCJQENTFICj7ao4DZfPf5GxYHE=)
2: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: O1SYsuH+O9dWW6LgLbXKRQezQd0QTg2T+y3+yaSnx9w=)
3: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: 7OGe5FP4HdWym7t2hyScbAIwjXWKAD0qUD149+q/PGY=)
4: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: z7Wg/yYEe/naNZajz7OC8CRPdjQ8pKf0KALnyOn87iA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 15:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13712 (0x3590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Validity
Not Before: Jul 16 15:06:57 2026 GMT
Not After : Jul 23 15:06:57 2026 GMT
Subject: CN=6a58f391-dd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:34:ba:b4:1d:1f:7d:06:44:35:ab:67:af:
ba:d3:3f:6b:63:9c:c5:bc:7e:56:7a:16:15:4b:f4:
08:16:f0:25:b9:bd:5b:b8:01:39:23:66:15:45:be:
d4:4d:0c:a7:1e:80:97:74:46:4f:5d:d1:b8:16:4c:
ff:d8:17:d5:4d:e0:08:53:88:79:27:ca:bd:ec:23:
0d:4c:54:ef:ae:f9:b1:c1:6a:4a:0c:ee:5f:05:b8:
79:7c:82:dd:5c:69:d9:fc:b8:56:f5:c7:76:8e:64:
08:d7:3e:3f:9c:bb:a8:c6:c2:e4:b0:80:7a:07:be:
ef:6c:f6:94:8b:18:5d:d2:28:7a:0a:9c:b0:8d:27:
ef:e9:b2:94:0c:6c:93:13:18:6c:18:f6:ef:0a:ef:
24:09:9e:e1:b7:29:4f:16:f1:e2:7e:fa:19:83:0f:
0b:58:60:22:c0:bb:f9:2c:f2:b8:4d:5b:a4:bb:37:
b0:e9:15:9a:a4:8f:11:ed:14:bf:a1:e4:90:05:17:
dc:c2:da:3f:15:81:5e:4c:af:12:0c:10:b8:c5:5f:
00:41:db:26:2b:4f:a5:5f:81:00:5d:42:53:dd:a3:
d8:34:9c:21:a0:00:e8:5d:41:bc:27:0e:3d:af:34:
09:e2:fb:7a:65:42:59:a2:a0:a4:d8:10:b9:96:3b:
33:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:77:00:12:A8:ED:54:46:DF:EA:21:87:4F:BB:10:CF:BD:AC:28:4A
X509v3 Authority Key Identifier:
keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:d1:04:6f:1f:17:d6:dd:ba:c3:a8:5f:2e:2c:f4:4f:8c:ef:
64:2f:28:8c:9c:a7:fc:88:d0:62:50:8a:5c:8f:0e:a4:f4:0d:
10:0e:21:2b:b5:40:05:8a:4a:eb:4e:fb:71:85:70:55:43:59:
e8:da:49:8d:fe:ba:62:7c:f5:12:9b:f3:3a:3b:3c:bb:0c:c8:
30:f9:fa:2f:09:c0:2e:3a:aa:56:14:1c:ae:31:85:a1:09:b8:
fe:03:7f:b7:c5:5a:b3:2f:e8:26:d2:f7:73:f1:fa:8f:40:e3:
83:87:0d:ad:51:a4:58:ca:e7:1e:d2:0a:b4:dc:5a:93:e7:8a:
0a:61:68:91:b4:0c:47:fc:b4:a2:38:24:d8:b0:ab:05:40:f7:
57:9d:c8:a7:07:49:84:1f:22:1b:5f:43:b9:88:db:63:e6:b6:
c4:44:06:a8:38:0f:b9:56:75:11:58:62:74:ba:5f:db:d2:c1:
5d:45:0d:5b:22:51:44:c7:a7:42:d2:6e:44:97:fa:3f:04:da:
9b:c8:1c:a6:0a:56:c2:68:e9:27:dd:ff:61:16:c2:85:29:c4:
50:09:9b:92:da:fe:c9:9b:1b:e7:52:ec:7d:32:a1:6a:fc:45:
4b:30:62:b6:90:ab:d4:e2:49:f8:6e:43:af:0b:f4:82:bb:1f:
9d:1a:c9:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUzNDQxMTAvBgNVBAUTKDg5RkQyN0M1MDY3QjRDRjQxMjI5NkZFQkE2Q0U2RDgz
MTE4NTgwMEIwHhcNMjYwNzE2MTUwNjU3WhcNMjYwNzIzMTUwNjU3WjAYMRYwFAYD
VQQDEw02YTU4ZjM5MS1kZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoV40urQdH30GRDWrZ6+60z9rY5zFvH5WehYVS/QIFvAlub1buAE5I2YVRb7U
TQynHoCXdEZPXdG4Fkz/2BfVTeAIU4h5J8q97CMNTFTvrvmxwWpKDO5fBbh5fILd
XGnZ/LhW9cd2jmQI1z4/nLuoxsLksIB6B77vbPaUixhd0ih6CpywjSfv6bKUDGyT
ExhsGPbvCu8kCZ7htylPFvHifvoZgw8LWGAiwLv5LPK4TVukuzew6RWapI8R7RS/
oeSQBRfcwto/FYFeTK8SDBC4xV8AQdsmK0+lX4EAXUJT3aPYNJwhoADoXUG8Jw49
rzQJ4vt6ZUJZoqCk2BC5ljszSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIh3ABKo
7VRG3+ohh0+7EM+9rChKMB8GA1UdIwQYMBaAFIn9J8UGe0z0Eilv66bObYMRhYAL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTM0NC81MTVDQUJFMDFE
QTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQUVNLV19ycHM1dGd4R0Zn
QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lmMG54UVo3VFBRU0tXX3JwczV0Z3hHRmdBcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTM0NC81MTVDQUJFMDFEQTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQ
UVNLV19ycHM1dGd4R0ZnQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlNEEbx8X1t26w6hfLiz0T4zvZC8ojJyn/IjQYlCKXI8OpPQNEA4hK7VABYpK
6077cYVwVUNZ6NpJjf66Ynz1EpvzOjs8uwzIMPn6LwnALjqqVhQcrjGFoQm4/gN/
t8Vasy/oJtL3c/H6j0Djg4cNrVGkWMrnHtIKtNxak+eKCmFokbQMR/y0ojgk2LCr
BUD3V53IpwdJhB8iG19DuYjbY+a2xEQGqDgPuVZ1EVhidLpf29LBXUUNWyJRRMen
QtJuRJf6PwTam8gcpgpWwmjpJ93/YRbChSnEUAmbktr+yZsb51LsfTKhavxFSzBi
tpCr1OJJ+G5Drwv0grsfnRrJWA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 11:29:09 2026 by rpki-client