
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
File: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft (raw, json)
Hash identifier: XMoDYsvU5+Yc0X2HBHg2kR7v37YRX7M9am7nr4bnVjk=
Subject key identifier: 49:94:89:7A:D7:D7:7F:F7:28:9C:C8:6F:DE:DA:4C:3C:22:53:1F:F5
Authority key identifier: 22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39
Certificate issuer: /CN=A9197B7B/serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
Manifest number: 45
Signing time: Fri 05 Jun 2026 08:49:20 +0000
Manifest this update: Fri 05 Jun 2026 08:49:20 +0000
Manifest next update: Fri 12 Jun 2026 08:49:20 +0000
Files and hashes: 1: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl (hash: SohP18DXbKaYjziCcd9p/qY8HWzhovyLcYUrXeY5UYQ=)
2: 153BBC22FBEC11F094C0A6516D6F56BC.roa (hash: Fa+JKx4M6Yd97D4JU6xtHSXgVRciDGQpK7A4XgrvaWo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl
rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 08:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197B7B, serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39
Validity
Not Before: Jun 5 08:49:20 2026 GMT
Not After : Jun 12 08:49:20 2026 GMT
Subject: CN=6a228d90-04fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:0c:38:5f:4f:9a:56:35:cf:b5:8e:f4:e1:
33:cd:49:c4:ef:04:e8:e7:09:b3:79:de:27:5f:f4:
e2:dc:5d:e5:99:6a:9c:21:e9:62:07:70:3b:08:a6:
70:91:e5:78:eb:79:33:e5:64:95:97:a3:9e:6a:cf:
38:d0:10:c4:53:7d:01:46:ed:13:36:50:0d:87:9e:
38:05:8c:23:eb:cb:43:64:7e:41:17:2b:de:e7:a9:
d9:2f:4b:42:e5:c4:ac:3e:9c:8c:61:5d:e6:f3:0e:
f7:71:a1:5a:6a:c5:f2:bf:80:5e:6b:5a:b4:58:f9:
79:21:16:af:e7:7d:8e:45:1d:fc:f0:59:d2:3c:14:
da:a5:88:7b:67:7e:54:99:59:c8:ad:4c:4c:14:bf:
d0:17:a2:b2:e0:52:3a:ac:75:7c:f1:ff:c5:97:6a:
9d:37:87:1f:19:38:80:c9:71:f4:7a:4b:fa:6f:28:
88:e6:42:3b:c4:ba:e0:ed:92:1c:13:7d:68:7f:22:
05:c6:77:b3:8b:db:8d:93:31:8c:7b:d3:ba:78:a4:
35:66:20:ba:7d:1d:52:25:f2:64:7d:f8:8a:7b:91:
28:40:cb:7d:6a:06:ed:a6:07:bb:31:20:c2:49:b4:
99:e0:ab:05:4a:0c:ef:7a:7d:61:bb:de:97:32:60:
2e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:94:89:7A:D7:D7:7F:F7:28:9C:C8:6F:DE:DA:4C:3C:22:53:1F:F5
X509v3 Authority Key Identifier:
keyid:22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:f0:ff:01:a1:c9:00:78:f0:be:32:98:4b:dc:8e:f7:28:5c:
84:aa:93:a8:70:9c:97:f6:ff:65:40:b5:bb:ba:31:a6:cc:d1:
fa:f4:3b:5c:4e:08:81:2b:87:eb:9c:ab:47:36:e9:c0:bf:44:
a5:a7:f0:29:68:8a:16:d3:e3:21:28:dc:54:06:31:93:3a:0a:
78:22:92:cd:73:84:78:91:0a:ce:98:9f:44:42:fd:5a:72:6d:
df:ff:25:c1:a2:77:eb:e7:06:18:ff:5c:a0:82:39:04:71:ce:
7a:56:32:21:99:7f:60:63:d2:2a:3b:3c:01:f3:b7:12:7d:1c:
57:c1:24:77:53:af:8e:95:d0:b9:7e:4d:50:77:2e:2b:9b:ad:
cb:53:d1:70:02:03:28:5f:2e:51:2b:84:dd:e6:64:94:9a:ea:
40:87:73:1b:a0:73:39:67:b3:54:b9:d8:1b:77:28:59:1d:69:
eb:9a:e4:3f:3d:5c:f7:8a:5e:06:9d:87:30:13:8f:fc:05:f7:
3f:8f:b6:26:74:dc:b2:f6:7a:62:5a:1b:13:35:d9:0c:b7:65:
5d:c0:6a:b7:6f:e4:45:10:53:ff:0b:16:0a:67:66:57:16:18:
41:48:b0:43:9b:98:2e:f6:07:1c:cc:9d:b3:d3:4e:7c:cc:77:
21:32:cd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:57:00 2026 by rpki-client