
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
File: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft (raw, json)
Hash identifier: ri5k6b1COMljw6KPDiH6UDFPAz8HoXmRfHPf+ZnTyME=
Subject key identifier: 24:E2:EB:A2:FD:88:42:E1:EB:97:7D:8F:7B:C8:51:E3:CE:86:7D:23
Authority key identifier: 22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39
Certificate issuer: /CN=A9197B7B/serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
Manifest number: 18
Signing time: Sat 07 Mar 2026 08:11:24 +0000
Manifest this update: Sat 07 Mar 2026 08:11:24 +0000
Manifest next update: Sat 14 Mar 2026 08:11:24 +0000
Files and hashes: 1: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl (hash: f1IryvuakdvOPRoMCLzmuARrRIRHAp/dHnMnhLL40/k=)
2: 153BBC22FBEC11F094C0A6516D6F56BC.roa (hash: Fa+JKx4M6Yd97D4JU6xtHSXgVRciDGQpK7A4XgrvaWo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl
rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197B7B, serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39
Validity
Not Before: Mar 7 08:11:24 2026 GMT
Not After : Mar 14 08:11:24 2026 GMT
Subject: CN=69abddac-cce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:8c:f2:da:78:38:5a:4f:43:db:55:1d:90:
83:bd:d1:96:32:b9:e2:be:a0:5c:45:90:d8:a2:62:
d9:78:93:f8:18:f1:38:9c:10:86:41:2a:13:1b:29:
0a:14:1c:23:29:b3:af:26:3d:92:49:67:21:c0:39:
5a:c5:2f:3b:74:e4:0b:a2:a4:87:9e:02:11:e0:b3:
9b:90:a9:c5:a6:6b:35:68:ec:71:93:8c:81:71:16:
5d:69:3d:e4:b4:ee:02:3e:55:78:b1:9c:18:69:b5:
c4:6d:6e:9a:56:b5:f1:1a:f2:7f:bd:22:1e:2b:8f:
38:b2:df:51:a7:1f:7f:12:8a:0e:8c:e7:b3:e1:d1:
c8:b9:e8:fc:53:a0:f5:c9:57:94:b5:1d:42:c5:36:
f5:da:d8:bb:bb:9b:ff:ce:00:08:d6:cb:43:f7:e5:
63:88:fb:b6:0f:76:e1:85:01:26:8e:86:c1:f9:57:
3c:ae:ec:98:0f:da:bc:da:35:af:8d:84:f2:87:4c:
f3:fa:e0:17:05:c6:10:08:bf:34:58:b2:bb:c2:6d:
af:a6:68:80:e5:13:9f:6f:70:7d:bc:b4:01:78:5e:
3d:74:b7:d4:04:a1:80:a6:dd:02:a2:9d:f8:fc:ab:
fd:dc:6d:41:d8:e6:51:96:ed:9f:47:dd:35:2d:ce:
24:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E2:EB:A2:FD:88:42:E1:EB:97:7D:8F:7B:C8:51:E3:CE:86:7D:23
X509v3 Authority Key Identifier:
keyid:22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:00:ec:63:30:bf:f3:b7:ba:50:b3:ba:d1:cb:58:4e:93:0f:
e6:f2:31:8a:1a:4d:8d:98:00:08:cb:16:12:80:eb:c5:67:f1:
fa:f8:5b:2b:9a:97:73:7d:09:59:3f:f2:a3:7c:c6:8a:52:90:
6e:33:1c:82:81:d2:54:ba:8e:40:84:04:0a:d5:db:be:2f:d9:
98:e6:aa:a4:82:b8:6e:17:f8:51:c8:13:64:85:f5:f9:e3:da:
74:f4:95:e2:2f:36:da:75:e1:9a:70:d4:7a:d0:c5:4f:58:2b:
b2:1a:3a:69:a3:1c:6a:52:92:96:0e:2c:30:b3:a0:e8:2e:f0:
8f:ce:10:9e:4a:92:45:42:54:df:dd:d4:2f:1d:49:2d:ed:f4:
b2:08:17:54:7a:dd:0e:27:d8:de:41:2c:9a:12:2e:a8:d1:d2:
e7:6d:77:47:d6:67:48:67:0e:2f:fa:5c:88:c1:7b:eb:56:39:
5d:57:ad:1e:b2:fa:74:dd:e7:49:50:5b:3c:51:fa:f0:20:fa:
26:05:0e:0e:10:b2:26:cb:ae:88:af:aa:c3:be:11:cd:ef:ec:
42:8d:5d:bb:3f:8a:a4:7d:67:e6:e4:bf:dc:d6:4e:c7:ea:7b:
07:e9:18:1b:ed:bd:5b:f0:87:1e:ba:f4:81:dd:94:ae:bc:1b:
64:bb:9f:df
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
N0I3QjExMC8GA1UEBRMoMjI1NkI4MkIwQTZFREM2MjY4QTNDQzkwQUNDMDVDNzRG
MTE0Q0UzOTAeFw0yNjAzMDcwODExMjRaFw0yNjAzMTQwODExMjRaMBgxFjAUBgNV
BAMTDTY5YWJkZGFjLWNjZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCea4zy2ng4Wk9D21UdkIO90ZYyueK+oFxFkNiiYtl4k/gY8TicEIZBKhMbKQoU
HCMps68mPZJJZyHAOVrFLzt05AuipIeeAhHgs5uQqcWmazVo7HGTjIFxFl1pPeS0
7gI+VXixnBhptcRtbppWtfEa8n+9Ih4rjziy31GnH38Sig6M57Ph0ci56PxToPXJ
V5S1HULFNvXa2Lu7m//OAAjWy0P35WOI+7YPduGFASaOhsH5Vzyu7JgP2rzaNa+N
hPKHTPP64BcFxhAIvzRYsrvCba+maIDlE59vcH28tAF4Xj10t9QEoYCm3QKinfj8
q/3cbUHY5lGW7Z9H3TUtziTJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJOLrov2I
QuHrl32Pe8hR486GfSMwHwYDVR0jBBgwFoAUIla4Kwpu3GJoo8yQrMBcdPEUzjkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3QjdCLzRDQjNBMzg0RkJF
OTExRjA5MTJGRTYxQzZENkY1NkJDL0lsYTRLd3B1M0dKb284eVFyTUJjZFBFVXpq
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvSWxhNEt3cHUzR0pvbzh5UXJNQmNkUEVVemprLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3
QjdCLzRDQjNBMzg0RkJFOTExRjA5MTJGRTYxQzZENkY1NkJDL0lsYTRLd3B1M0dK
b284eVFyTUJjZFBFVXpqay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCxAOxjML/zt7pQs7rRy1hOkw/m8jGKGk2NmAAIyxYSgOvFZ/H6+FsrmpdzfQlZ
P/KjfMaKUpBuMxyCgdJUuo5AhAQK1du+L9mY5qqkgrhuF/hRyBNkhfX549p09JXi
LzbadeGacNR60MVPWCuyGjppoxxqUpKWDiwws6DoLvCPzhCeSpJFQlTf3dQvHUkt
7fSyCBdUet0OJ9jeQSyaEi6o0dLnbXdH1mdIZw4v+lyIwXvrVjldV60esvp03edJ
UFs8UfrwIPomBQ4OELImy66Ir6rDvhHN7+xCjV27P4qkfWfm5L/c1k7H6nsH6Rgb
7b1b8IceuvSB3ZSuvBtku5/f
-----END CERTIFICATE-----
Generated at Sat Mar 7 14:31:41 2026 by rpki-client