
$ rpki-client -vvf rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
File: IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft (raw, json)
Hash identifier: R53KcB5VgkWQjMyuF7IpGtaVYIAuPt6HOan8AYf6VLg=
Subject key identifier: E7:B2:9F:DC:D5:72:21:C7:6D:AE:FA:3C:B1:B9:03:93:B7:36:86:5F
Authority key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17
Certificate issuer: /CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
Manifest number: 025D
Signing time: Fri 17 Apr 2026 02:02:08 +0000
Manifest this update: Fri 17 Apr 2026 02:02:07 +0000
Manifest next update: Fri 24 Apr 2026 02:02:07 +0000
Files and hashes: 1: IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl (hash: EL2+AFjlW6UUvJC5y3mrX1keTkr2412zkmO97HH+SD8=)
2: CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa (hash: aKMlcoKPOK4sVWlP0NCeOszEtBXOmIcZnqYHH1capVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl
rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912905D, serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317
Validity
Not Before: Apr 17 02:02:07 2026 GMT
Not After : Apr 24 02:02:07 2026 GMT
Subject: CN=69e194a0-3418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f6:38:c4:c8:56:cf:27:51:35:e0:60:af:a0:
d6:58:68:7d:35:c4:1d:a7:b0:3c:11:ff:80:00:8f:
16:6d:39:54:dc:c6:a3:68:b9:a0:1f:d5:38:4e:bb:
c1:7c:55:76:90:c3:51:72:54:9b:fa:b3:0e:c1:9a:
10:fe:09:ae:61:0f:ab:46:a1:8a:a2:61:aa:c3:23:
d1:ce:5c:67:9d:4e:f4:20:cd:62:b0:cd:06:2c:e4:
b7:69:6a:87:17:fc:0d:66:58:a2:e6:e5:3f:e6:1c:
fc:7d:76:64:22:c8:d5:08:ce:1b:4f:e3:21:f4:67:
b2:89:26:e3:49:26:9e:58:4e:09:de:33:8d:cf:a2:
d1:1a:bc:95:cd:20:54:c0:36:2d:ec:e4:da:68:6d:
6c:0c:6f:25:e1:d6:e1:c1:a6:c8:73:93:76:67:e0:
9a:bc:bf:55:5b:83:bf:36:85:b7:da:98:07:dd:8c:
69:21:ce:d1:9e:e9:c8:00:1c:31:75:9d:d8:ba:f2:
0a:1c:40:58:6b:5e:e6:bc:d2:7e:ed:d7:08:22:99:
d8:5a:5e:18:36:35:ac:eb:ea:be:b4:74:ec:46:11:
f2:03:fc:73:e8:4a:05:a7:7a:b9:e9:8b:f4:f4:73:
e8:be:5a:3e:38:b5:fb:92:67:c3:a7:81:69:35:4e:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B2:9F:DC:D5:72:21:C7:6D:AE:FA:3C:B1:B9:03:93:B7:36:86:5F
X509v3 Authority Key Identifier:
keyid:20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5d:86:7c:2d:85:eb:c0:b9:43:64:d4:33:5b:86:cf:ce:48:
68:3a:4c:9d:c7:0b:a4:17:a3:06:22:d6:7c:0e:db:80:cb:f4:
8f:7a:82:c8:28:16:da:ac:3b:d9:e1:f5:6e:37:5d:34:03:7e:
f2:f0:38:7d:8d:83:5f:52:3a:b7:81:f5:55:4c:7d:99:ac:11:
86:74:e3:91:36:81:e3:7b:0e:a4:99:56:af:19:b2:11:59:22:
2e:30:c7:af:b0:dc:58:5b:b6:b6:45:00:74:f6:80:ed:4a:0d:
e0:c6:23:bf:ed:cc:c5:69:21:f0:93:53:87:ee:5b:63:0f:fa:
42:61:72:8e:f0:0e:90:9b:2c:5d:36:6b:bb:27:4c:d3:2d:40:
c0:9f:79:c7:71:11:eb:3a:45:14:ba:26:38:fe:fa:1e:5b:c9:
1e:5b:1a:66:16:b0:c9:42:0a:e2:a1:79:31:74:d9:62:89:0d:
ff:45:6e:04:92:61:dc:d5:eb:6b:94:81:80:2c:43:88:dd:b2:
d3:6b:e4:e9:b7:64:ea:bd:10:f5:27:58:19:ec:ba:f6:fd:33:
d0:53:b4:ef:14:69:0e:1a:d5:73:19:9d:a9:45:83:4b:6f:a1:
27:18:af:0c:b2:a1:ca:fd:88:49:38:43:c0:6e:3e:46:8f:01:
ca:04:f7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:18 2026 by rpki-client