
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft
File: iyhQBa2gBz4MCUttpqOLtR__oaQ.mft (raw, json)
Hash identifier: 93A33Gyvtnz7yG4o7eLOe6y18IWrZVDZToSyt8OgqKk=
Subject key identifier: A7:D6:0A:6F:B1:23:A4:2A:EB:95:12:23:D1:55:0F:E3:2F:95:5E:F2
Authority key identifier: 8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4
Certificate issuer: /CN=A918D14B/serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4
Certificate serial: 049B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft
Manifest number: 047F
Signing time: Fri 05 Jun 2026 00:10:02 +0000
Manifest this update: Fri 05 Jun 2026 00:10:01 +0000
Manifest next update: Fri 12 Jun 2026 00:10:01 +0000
Files and hashes: 1: iyhQBa2gBz4MCUttpqOLtR__oaQ.crl (hash: HVUeEjsKEsitpDjbOrGpixGTGHdAumegGs7XMtHTZFU=)
2: 989BBF70904F11EC8B118911C4F9AE02.roa (hash: OS+MMRRjQluFNuI+98G/Gv/Ff4t99hp6Izi7LUhaJJQ=)
3: 58C00854905211EC90E6100FC4F9AE02.roa (hash: HavGxilFCXPwJZ5ysPf3ohVQv79l6ZGEb7A58aULo/M=)
4: 7E8442B68FE511EC94D98C7BC4F9AE02.roa (hash: JVO8JZCfYqp3N9h+hRdEkwlagsjOuD7MM+G3/8q05pI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl
rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 00:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1179 (0x49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D14B, serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4
Validity
Not Before: Jun 5 00:10:01 2026 GMT
Not After : Jun 12 00:10:01 2026 GMT
Subject: CN=6a2213da-165b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c8:1b:b3:4a:ab:88:3f:17:34:17:c3:8f:27:
6a:51:46:f3:87:96:00:5b:b6:2a:f4:37:5c:2f:cc:
ac:65:a9:88:1e:7e:90:6b:59:e6:2f:2a:23:84:76:
a2:07:f8:76:df:de:7b:86:06:74:ff:de:3c:28:cc:
9b:b0:e4:5e:f1:17:6e:2b:17:8f:5d:52:23:e4:5f:
01:13:9f:36:7c:ce:3d:66:6e:f4:19:28:32:e3:2a:
82:8e:1b:b0:aa:c3:00:e1:39:25:af:60:3e:bb:28:
63:ec:ab:1a:92:3a:44:39:0c:b3:7f:19:4f:42:ca:
0a:57:da:ee:fa:03:ec:c3:a0:9f:0e:8f:2f:69:98:
32:84:9f:95:80:23:66:1c:ac:c0:ee:bb:e5:0c:76:
05:cf:e0:41:5e:ae:1a:f0:b0:25:f6:4c:1c:d1:06:
b2:50:2b:d9:16:9d:0f:6a:00:23:ef:f9:9c:e1:79:
40:f8:d5:4c:5f:d4:44:b2:fc:c4:da:50:59:44:14:
81:20:a2:19:55:bd:b0:33:3f:9e:46:7e:6b:6d:7c:
6f:4f:19:27:8f:c6:3f:4e:ac:5a:8a:ba:fd:d2:5a:
2e:55:f8:32:5c:c6:d2:44:b1:0e:36:7c:36:76:7d:
66:54:3c:b1:a9:64:78:41:ad:42:ef:2b:f2:41:e7:
c4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D6:0A:6F:B1:23:A4:2A:EB:95:12:23:D1:55:0F:E3:2F:95:5E:F2
X509v3 Authority Key Identifier:
keyid:8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:42:12:4d:10:8c:1e:6b:d8:76:74:b1:ba:2d:6c:2c:69:3f:
47:49:58:64:0a:f2:e1:e7:72:61:0c:41:7d:34:0d:18:91:8d:
6c:79:b8:37:b4:89:d1:82:db:8e:8f:c1:65:d5:7e:85:30:b0:
79:c2:8b:d8:fd:06:fb:55:2c:7c:e9:5d:81:13:cc:b6:8e:01:
ae:10:4f:af:b9:84:0f:cc:dd:1c:36:20:0f:dd:f5:2d:7e:61:
dc:28:6f:17:c5:d5:ab:67:3d:50:dc:e6:0e:5d:9f:78:ff:66:
de:be:69:d9:44:84:4a:79:ed:48:6b:1d:00:ad:0a:e8:a7:03:
f4:88:bb:7c:8b:3b:0f:3c:44:53:70:9a:c9:60:3c:4e:71:ba:
e0:92:fe:77:99:93:55:7c:cd:61:c9:09:2f:f1:70:c7:bb:a8:
b1:d4:d3:d5:fe:0b:36:b8:38:1a:a1:e4:01:d9:a8:98:06:db:
24:4b:32:f6:3f:ec:21:98:41:94:6d:d5:cf:13:f2:13:09:b2:
e1:d3:8d:b4:93:e1:ee:8f:9e:1e:87:8f:bc:d3:77:36:b5:8a:
dc:28:41:5e:ca:6c:8e:00:e3:06:4b:25:fa:8d:39:09:34:75:
99:47:24:21:8b:23:91:fd:5f:27:8f:b1:ae:64:d5:29:39:4a:
2e:f5:42:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:05:07 2026 by rpki-client