
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json)
Hash identifier: 2WWGmG7+954jVuBniYAmFQjNbvWQNgM6xRLlUt4Z0Ys=
Subject key identifier: C7:FF:C5:B6:A7:DE:FE:E0:E6:0E:3A:45:C2:48:69:2F:0E:BD:68:9D
Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Certificate serial: 08E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
Manifest number: 08C9
Signing time: Sat 04 Jul 2026 20:35:18 +0000
Manifest this update: Sat 04 Jul 2026 20:35:18 +0000
Manifest next update: Sat 11 Jul 2026 20:35:18 +0000
Files and hashes: 1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: H2Qya23Pra2L1d2VluT4+t7ENSIBVM4ZMGL5gbPbeN0=)
2: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: GhHf45/vb5I/X0MIOpzOvwX20CEWTC0IaH/0NH4EfF4=)
3: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: mf6qln82PscHDH0xPIvnUcgowJvdgyrORzlGrhrol0w=)
4: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: +xbbDGKjJ6DqQpBrbDd8JJCmqdHxccmvBDGEJY8Y1eA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl
rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 20:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2275 (0x8e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Validity
Not Before: Jul 4 20:35:18 2026 GMT
Not After : Jul 11 20:35:18 2026 GMT
Subject: CN=6a496e86-7247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:ea:17:05:45:95:63:c4:52:a3:6d:f3:78:
41:fd:5b:ff:d8:33:27:b5:07:68:04:4c:35:eb:64:
59:e7:46:5b:98:1a:32:99:f1:62:4b:55:08:0f:b6:
be:5d:44:f9:97:2b:9c:71:bd:de:50:0e:5f:94:fc:
00:e2:dc:2a:4d:1f:d5:9e:bf:ed:34:02:b0:d4:33:
1b:28:e1:8f:c1:b6:5a:f7:1d:91:cf:df:b4:1f:ce:
8f:8a:b7:fd:ae:d3:5b:ac:b3:db:21:40:54:ba:c9:
b2:89:94:42:85:a0:fa:fb:54:57:82:a1:fe:0d:47:
3d:65:77:4f:76:e1:a1:2e:2f:e5:c9:70:ce:20:be:
7b:44:53:ff:fd:01:bc:25:73:5a:a1:12:20:4b:b4:
26:21:02:7a:12:e1:a8:4f:00:e4:7d:14:5f:b0:23:
da:1c:68:fa:4d:ec:15:46:a7:12:1b:e3:a4:79:93:
21:c8:e7:27:28:75:d6:34:02:b1:b8:33:9e:e4:2c:
3a:69:7f:80:99:c1:d5:c8:6e:ce:61:8d:8b:4a:6b:
4e:ac:08:eb:fc:a1:cf:60:4e:c1:80:a6:af:ae:49:
ea:f9:ca:cd:1f:a9:b4:c3:1c:80:1f:02:12:72:25:
da:97:5a:6d:56:43:50:52:9f:35:6b:03:ff:1c:47:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FF:C5:B6:A7:DE:FE:E0:E6:0E:3A:45:C2:48:69:2F:0E:BD:68:9D
X509v3 Authority Key Identifier:
keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e5:f8:38:ff:21:07:fc:d4:8b:4e:99:96:18:67:0c:5d:44:
59:38:a3:68:64:e7:87:9a:d4:56:ed:13:bb:43:3a:83:57:e2:
41:8b:a1:b6:28:3a:d2:70:1f:14:0a:bc:e7:37:d6:33:9c:e9:
97:c3:3e:a4:98:eb:52:8e:ca:5e:b2:6d:ff:14:32:e8:85:54:
01:27:86:ea:cd:89:07:a7:4d:59:1b:8e:ed:e7:fc:8e:62:2e:
a3:f8:e0:53:1e:f9:37:b0:cc:cf:85:bf:f1:51:f7:b4:b6:a4:
b6:18:1c:d8:de:47:85:86:ce:87:0c:9e:96:52:88:88:aa:9d:
68:89:bd:f8:b1:87:48:28:1e:c9:2e:c4:1e:56:83:e7:44:4e:
3c:47:7a:a0:eb:84:bd:52:eb:3a:14:b1:ab:18:ab:43:85:cd:
08:72:5a:72:57:72:5c:17:94:58:82:e4:5b:a4:af:9c:ed:17:
65:10:55:22:9f:97:e6:d3:24:ed:81:5a:5c:e2:53:b2:90:4f:
6e:08:e9:83:77:61:24:f0:77:da:6d:6b:09:33:50:5d:68:97:
76:64:f1:76:4d:c0:29:79:d2:cd:07:c5:60:ec:ba:8e:2e:4c:
05:47:ca:fc:99:f9:8e:35:6c:fc:29:29:14:36:bd:ef:02:ad:
d6:3c:3d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:40:20 2026 by rpki-client