
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
File: iunN4Qvgt38JGw0468GWfIvAkZ4.mft (raw, json)
Hash identifier: BDEX2bcdN0aJIBXGOHJrrr4ZfXretaVr0vjA6o+VF2s=
Subject key identifier: 44:FD:7A:98:AC:85:C7:A7:73:64:1D:18:45:70:72:26:49:1F:0C:83
Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E
Certificate issuer: /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
Certificate serial: 0837
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
Manifest number: 081D
Signing time: Sun 20 Sep 2026 21:10:40 +0000
Manifest this update: Sun 20 Sep 2026 21:10:40 +0000
Manifest next update: Sun 27 Sep 2026 21:10:40 +0000
Files and hashes: 1: iunN4Qvgt38JGw0468GWfIvAkZ4.crl (hash: SNqmLTKnOX+sgfboxBWhYnoZ8mlcqvElKmdGqT5nLmQ=)
2: 490CDADA42F211EBB34A1A60C4F9AE02.roa (hash: v7Fb7boRTCMwchTjW0del7sXnV2DChLpJUD5WBCHZN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl
rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2103 (0x837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116BB8, serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
Validity
Not Before: Sep 20 21:10:40 2026 GMT
Not After : Sep 27 21:10:40 2026 GMT
Subject: CN=6ab04bd0-7acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:9d:f8:4c:0c:91:76:89:3c:ca:60:7a:02:
62:da:d6:69:6b:77:71:1e:3a:0f:1f:82:e7:e1:87:
18:72:00:e5:b5:12:93:9f:97:c2:45:22:6f:c0:62:
35:df:3b:08:be:fa:87:f0:07:cf:48:1d:32:2b:91:
f7:ec:ac:a4:7c:3a:e7:d0:12:1b:8d:2f:fa:82:39:
5e:e6:05:aa:14:c7:46:86:6d:49:9e:44:18:4b:d5:
2e:8c:d2:3e:c7:95:39:fc:ed:64:3b:d3:3d:1b:d3:
2e:8f:0f:f9:8e:69:81:72:bc:3a:b6:2f:68:e1:b9:
43:58:e9:81:16:cb:ec:5b:e2:e0:02:d3:96:33:38:
12:c0:47:a1:79:e0:63:3e:54:33:5d:b2:e0:df:c9:
23:33:d3:eb:a3:3c:91:73:ec:3b:1e:42:9f:36:fe:
ab:8e:76:c0:73:d7:a4:ec:e9:c4:53:e2:41:46:eb:
42:02:61:58:f7:a1:7f:a8:7f:61:3e:25:a2:89:6a:
75:86:9e:38:79:a1:4f:41:fd:53:10:f3:c0:5c:c2:
3e:f3:4f:f5:f4:08:9f:ca:7a:82:a0:d2:e1:a4:74:
35:6e:2b:07:4b:dc:52:2c:25:fa:8e:10:f2:1c:39:
85:c0:3f:e0:a3:14:3a:26:0c:44:d9:c3:0c:30:87:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FD:7A:98:AC:85:C7:A7:73:64:1D:18:45:70:72:26:49:1F:0C:83
X509v3 Authority Key Identifier:
keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:66:ad:3d:54:fc:49:09:bd:a2:07:d1:07:7a:cf:70:9a:c4:
95:b1:3b:84:6d:55:64:5f:f9:3d:ca:2e:78:09:56:64:9b:89:
05:34:54:2f:51:19:65:53:4f:9e:c7:b4:85:e3:29:f9:94:90:
cb:5a:13:f7:84:d2:f4:ed:e0:0a:cc:3c:63:0b:4b:c3:13:aa:
7f:16:37:1e:37:1d:33:5b:47:f7:ab:b4:44:d1:95:1c:bb:e0:
08:34:f5:ac:61:a4:97:f3:7f:60:df:76:53:4b:d3:a7:e4:5c:
0b:e2:55:32:2c:19:89:be:81:08:0a:6b:a7:4b:e4:a1:bc:fb:
85:b1:4c:3b:d9:d7:cf:f6:5f:54:ea:1c:7a:a8:35:3c:fe:70:
b2:72:c7:c6:d8:4c:cd:c2:ba:69:b7:8b:b9:43:09:8c:59:2d:
83:6b:33:74:26:d5:e8:f9:9d:00:3f:16:cd:8f:5e:d9:f3:74:
00:cc:36:c9:7c:19:c4:6f:6b:89:60:7a:38:23:82:7d:7a:88:
17:53:fb:31:20:a7:cc:c2:0f:db:7b:42:71:1c:cb:ec:85:fe:
37:7e:b0:5c:db:34:9f:9a:75:9e:29:51:03:1e:42:1a:59:f1:
cd:2b:9d:e7:d1:ef:de:01:1e:48:07:2e:58:fb:b6:ec:f6:0d:
2c:03:74:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:20:56 2026 by rpki-client