
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
File: ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json)
Hash identifier: sqp51601JeC59VAcN8iFRuxVixdFnBEXwijRlVOP57M=
Subject key identifier: 6D:91:80:59:88:4B:D3:02:B1:21:96:8A:D3:CE:89:23:05:5F:88:CF
Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
Certificate issuer: /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Certificate serial: 0A48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
Manifest number: 0A3C
Signing time: Sat 16 May 2026 19:42:57 +0000
Manifest this update: Sat 16 May 2026 19:42:56 +0000
Manifest next update: Sat 23 May 2026 19:42:56 +0000
Files and hashes: 1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: RpIICl/fBTLAn67cbM0q2sfxwL5S94QnFzVYL22lFSM=)
2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: Lmz5u1XQZ5pr8gx+0xG0dq5xcsKIBrpCQ17vf78quGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2632 (0xa48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A3CA, serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Validity
Not Before: May 16 19:42:56 2026 GMT
Not After : May 23 19:42:56 2026 GMT
Subject: CN=6a08c8c0-3c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:d8:2d:67:d6:ae:9f:c6:7f:0b:df:b5:40:
cb:04:cf:7f:e1:5c:de:05:16:53:0c:50:85:24:79:
40:09:50:b8:a8:bb:2b:af:59:b4:94:49:a8:c9:a0:
67:e3:ab:84:26:16:97:56:6b:95:b8:87:2f:83:3c:
0b:ff:81:49:9d:e6:3a:3e:02:3c:90:ba:77:93:62:
41:5c:0e:0b:db:11:35:dc:92:0c:86:50:75:b5:10:
45:96:05:7b:ce:59:9e:55:11:79:56:de:88:a4:a7:
e8:cb:56:3b:d9:5e:73:ad:87:02:f9:f8:72:bf:11:
6e:c1:11:5a:0c:27:6b:49:da:5c:f9:9a:60:9a:15:
4f:2a:e9:d6:75:51:2f:0a:97:23:4d:fc:da:df:3c:
6f:26:4f:d0:09:dc:ee:26:c9:e4:57:54:cd:79:99:
11:e2:d4:2a:bb:30:71:23:ae:87:30:9a:83:09:58:
3f:d4:5f:25:1c:01:dc:72:a2:fb:f4:1b:d8:1d:a8:
cd:d5:8a:57:f6:ea:7b:7a:e5:81:f8:e2:77:aa:14:
f5:63:84:1c:7a:00:ef:16:d4:e9:de:ec:e7:bd:b7:
0d:92:1f:72:64:93:e9:bf:13:21:35:67:0a:c5:ee:
53:a2:2a:d2:75:c3:13:85:dc:1f:59:b3:2d:52:5c:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:91:80:59:88:4B:D3:02:B1:21:96:8A:D3:CE:89:23:05:5F:88:CF
X509v3 Authority Key Identifier:
keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:93:f2:00:be:b2:31:6b:9e:27:d0:aa:07:90:8b:1d:04:81:
66:aa:51:2c:82:9c:1a:fd:76:db:9e:48:aa:35:0c:ab:09:63:
db:f3:1a:e7:a3:28:9d:2c:b2:0d:61:da:92:17:8c:f4:a8:7b:
ea:3e:a9:8a:70:3a:28:5e:18:bb:81:f0:21:8d:ae:43:2d:cd:
d0:eb:28:b1:c6:ff:29:fc:ce:ae:e7:fb:c7:1d:cf:e9:07:b0:
04:22:bf:b0:00:03:3c:14:19:35:46:f3:4f:d7:8f:a7:bf:a8:
12:d8:bc:51:03:c4:dd:c3:ca:2f:8c:44:60:40:b7:d4:2d:57:
db:ed:00:05:2d:e1:28:49:a3:11:6b:da:4e:86:12:12:21:1b:
73:25:97:10:e4:6b:56:9c:f9:98:d5:4a:33:1b:79:12:43:86:
4f:6e:94:fa:c0:00:4e:b3:b5:2e:1d:05:c3:53:ec:28:b8:cf:
02:46:f7:00:51:71:c2:58:55:c6:0d:9b:56:b2:55:3b:d6:0a:
a9:ad:4c:9e:27:c6:12:75:bf:99:35:bb:12:8d:56:3c:d0:f0:
89:60:9b:7c:fc:9e:cf:b7:d8:2f:85:9f:d5:5c:7f:b7:d2:7e:
c7:82:59:9f:2b:46:d7:c3:c0:2d:67:06:2c:69:0a:ab:41:9d:
dd:d2:57:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:30 2026 by rpki-client