
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
File: iEjsDto5b-IU7sAxfw9RuRjW_O4.mft (raw, json)
Hash identifier: L1RmH1LKuMMtwLAsjDVP4AiMiNTFDIo0dgFnFX6opmo=
Subject key identifier: 6D:9D:FF:0B:28:A0:C2:6E:0F:9E:CE:9F:B8:C8:E1:1E:38:25:98:DA
Authority key identifier: 88:48:EC:0E:DA:39:6F:E2:14:EE:C0:31:7F:0F:51:B9:18:D6:FC:EE
Certificate issuer: /CN=A9190A18/serialNumber=8848EC0EDA396FE214EEC0317F0F51B918D6FCEE
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
Manifest number: 65
Signing time: Mon 05 Oct 2026 08:35:32 +0000
Manifest this update: Mon 05 Oct 2026 08:35:32 +0000
Manifest next update: Mon 12 Oct 2026 08:35:32 +0000
Files and hashes: 1: iEjsDto5b-IU7sAxfw9RuRjW_O4.crl (hash: iqJEC7/7nXqqDzu0pef7F6Dimvmt64dZErgi0OfDJro=)
2: 30C6735E371C11F1AB220340C9833773.roa (hash: GKqgW8C/qsqYastwtBswfWup1b4iv3bhSThGxDK7GGs=)
3: 52E7D8963D6711F19B0B1A66AE833773.roa (hash: jBHkGhM620MK8tuRqoRaHTgzaS17izPON56KddA7Jqk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.crl
rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190A18, serialNumber=8848EC0EDA396FE214EEC0317F0F51B918D6FCEE
Validity
Not Before: Oct 5 08:35:32 2026 GMT
Not After : Oct 12 08:35:32 2026 GMT
Subject: CN=6ac36154-51c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:55:02:6a:07:b4:c7:87:2f:94:2e:0b:09:
71:3c:a0:01:2d:64:90:17:39:c1:02:b5:88:e6:07:
9d:63:ff:4b:d6:99:cd:14:68:a2:80:bd:11:b5:d7:
09:15:f9:09:44:88:0b:db:b5:f8:52:29:4c:84:9a:
a7:a1:71:5e:6b:69:f7:e6:4e:72:af:6d:0e:f9:ae:
1f:4b:1e:3d:e8:12:60:6b:5f:27:5f:b0:a6:fa:3f:
2a:5a:6e:21:bd:04:d8:76:8b:c3:9f:78:30:79:38:
9a:c4:c9:ec:16:ef:88:ce:2c:a4:30:91:49:06:37:
01:b1:e9:33:67:e2:48:cf:cd:5f:17:b1:31:8d:da:
c8:ab:52:4c:36:15:65:8d:ca:7a:1c:8e:d2:7d:aa:
cf:ec:d4:29:45:f4:a7:f7:d9:dd:24:8b:de:52:95:
a3:3a:7d:88:16:00:e1:73:66:6b:07:6e:25:92:b4:
67:e2:28:d8:a1:50:c0:49:96:82:d6:3e:a7:ef:e5:
7c:04:51:5c:4e:c1:5b:3f:e4:9d:21:17:a1:5b:b0:
9f:fe:2e:1b:c8:00:e2:be:e7:fc:90:08:95:cd:82:
b0:60:dd:8e:aa:bc:74:40:e3:53:c7:ca:11:1c:2b:
72:c8:92:7a:33:b0:17:c5:e0:3f:55:f7:30:77:5d:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9D:FF:0B:28:A0:C2:6E:0F:9E:CE:9F:B8:C8:E1:1E:38:25:98:DA
X509v3 Authority Key Identifier:
keyid:88:48:EC:0E:DA:39:6F:E2:14:EE:C0:31:7F:0F:51:B9:18:D6:FC:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e9:9e:42:94:36:4e:90:f5:f3:a5:bc:aa:4d:f9:3b:be:77:
37:3f:d6:60:14:de:95:79:f0:44:d8:2d:d1:de:be:e0:ab:0b:
ca:af:1d:95:ab:4a:58:3d:36:ad:65:f0:5a:fe:86:ab:2b:fa:
55:76:c6:57:11:9d:5a:3e:03:98:95:f4:2f:3f:7d:60:91:64:
42:34:e9:87:ec:bc:b7:4a:a7:40:88:96:50:a9:ff:da:e0:32:
af:aa:74:24:66:a9:c4:f1:d6:eb:8b:95:5e:51:a9:f6:c7:51:
1c:6c:fa:af:2f:e5:f1:d4:8a:03:3c:0a:b6:87:6e:6b:92:b4:
f7:3a:b5:a6:aa:35:be:c6:0e:38:2e:14:b7:5d:ef:58:28:1a:
59:73:29:aa:45:57:61:81:b0:d0:eb:e2:09:86:02:3f:1b:f6:
cd:83:9b:bc:a6:6b:68:74:5d:5a:ea:3d:6b:24:56:1f:6f:9e:
4d:5e:7d:da:9a:9b:e5:af:05:84:44:98:31:59:73:3b:80:62:
7a:b5:cb:0d:67:06:6c:dd:0d:5c:9d:df:18:9e:8b:e1:e0:9b:
98:07:38:bc:c3:50:3e:a0:88:1a:f7:0b:7f:64:00:08:ee:7c:
a4:03:fe:f0:73:9b:d7:36:4d:b3:27:4c:71:a8:c8:90:c1:d4:
1f:ea:56:08
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MEExODExMC8GA1UEBRMoODg0OEVDMEVEQTM5NkZFMjE0RUVDMDMxN0YwRjUxQjkx
OEQ2RkNFRTAeFw0yNjEwMDUwODM1MzJaFw0yNjEwMTIwODM1MzJaMBgxFjAUBgNV
BAMTDTZhYzM2MTU0LTUxYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCD1UCage0x4cvlC4LCXE8oAEtZJAXOcECtYjmB51j/0vWmc0UaKKAvRG11wkV
+QlEiAvbtfhSKUyEmqehcV5raffmTnKvbQ75rh9LHj3oEmBrXydfsKb6PypabiG9
BNh2i8OfeDB5OJrEyewW74jOLKQwkUkGNwGx6TNn4kjPzV8XsTGN2sirUkw2FWWN
ynocjtJ9qs/s1ClF9Kf32d0ki95SlaM6fYgWAOFzZmsHbiWStGfiKNihUMBJloLW
Pqfv5XwEUVxOwVs/5J0hF6FbsJ/+LhvIAOK+5/yQCJXNgrBg3Y6qvHRA41PHyhEc
K3LIknozsBfF4D9V9zB3XaE3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbZ3/Cyig
wm4Pns6fuMjhHjglmNowHwYDVR0jBBgwFoAUiEjsDto5b+IU7sAxfw9RuRjW/O4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwQTE4LzRGRUM3MUNDMzZE
OTExRjE4REQwRkUyN0IxODMzNzczL2lFanNEdG81Yi1JVTdzQXhmdzlSdVJqV19P
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaUVqc0R0bzViLUlVN3NBeGZ3OVJ1UmpXX080LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw
QTE4LzRGRUM3MUNDMzZEOTExRjE4REQwRkUyN0IxODMzNzczL2lFanNEdG81Yi1J
VTdzQXhmdzlSdVJqV19PNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCt6Z5ClDZOkPXzpbyqTfk7vnc3P9ZgFN6VefBE2C3R3r7gqwvKrx2Vq0pYPTat
ZfBa/oarK/pVdsZXEZ1aPgOYlfQvP31gkWRCNOmH7Ly3SqdAiJZQqf/a4DKvqnQk
ZqnE8dbri5VeUan2x1EcbPqvL+Xx1IoDPAq2h25rkrT3OrWmqjW+xg44LhS3Xe9Y
KBpZcymqRVdhgbDQ6+IJhgI/G/bNg5u8pmtodF1a6j1rJFYfb55NXn3ampvlrwWE
RJgxWXM7gGJ6tcsNZwZs3Q1cnd8Ynovh4JuYBzi8w1A+oIga9wt/ZAAI7nykA/7w
c5vXNk2zJ0xxqMiQwdQf6lYI
-----END CERTIFICATE-----
Generated at Tue Oct 6 01:28:24 2026 by rpki-client