
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
File: IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft (raw, json)
Hash identifier: hxEC8Y6uLM6En4yWp7QmvOqGFj0IiZKR1kGmRSngkQw=
Subject key identifier: C3:F2:39:2F:72:C7:27:D8:F5:6E:10:4D:01:7E:54:04:66:C0:E9:D2
Authority key identifier: 21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12
Certificate issuer: /CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12
Certificate serial: 0792
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
Manifest number: 0784
Signing time: Thu 24 Sep 2026 21:30:22 +0000
Manifest this update: Thu 24 Sep 2026 21:30:22 +0000
Manifest next update: Thu 01 Oct 2026 21:30:22 +0000
Files and hashes: 1: IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl (hash: petrNeoQ9+msEQa2rd+bIp4irT4o3tszi139BQinIfk=)
2: 24F33D7877AF11EB8E972C66C4F9AE02.roa (hash: D2FjPCyvd3vF7ujAfeb6jLxxPTiHs4WNZiKP3+PGtgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl
rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1938 (0x792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914022F, serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12
Validity
Not Before: Sep 24 21:30:22 2026 GMT
Not After : Oct 1 21:30:22 2026 GMT
Subject: CN=6ab5966e-4352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:8c:f0:24:e4:42:fe:2e:e5:22:3d:52:a7:
d7:9b:f3:ad:f4:b9:81:dd:d5:9e:b4:d3:93:fe:e5:
96:cb:2c:78:50:27:25:ca:1a:d7:78:62:25:c9:20:
9b:3b:c9:f5:4b:01:6e:60:08:a6:28:e5:70:a8:c2:
38:49:80:89:86:32:f7:9c:f8:32:f6:12:80:0d:df:
37:b8:36:c9:fa:20:e8:2e:27:50:51:5f:22:98:9d:
38:ce:4b:a4:99:a0:b0:a1:dd:5d:70:78:e1:3a:7e:
19:0b:b7:98:7b:80:92:d1:1d:c4:88:61:c7:c5:9b:
93:dd:4a:69:c4:7c:41:56:5a:dc:13:c6:51:97:e3:
ff:c0:a8:40:09:b9:05:a1:91:17:5e:e6:a8:8e:e5:
4a:c7:bc:c4:7b:63:1a:9c:89:57:c1:c6:de:25:e2:
8b:dd:55:be:da:88:f0:d5:f9:29:63:ff:4b:35:4b:
fd:b7:b5:fb:98:5e:63:6e:6d:11:eb:c5:52:9f:b1:
04:58:a6:c3:36:5c:3b:17:47:a0:34:21:23:bb:9e:
45:ce:7b:0c:df:45:30:7f:c3:e6:7b:c0:38:ec:7c:
89:ac:c3:b9:aa:f2:7e:3a:23:d1:7b:8b:8d:dd:07:
ef:e6:f0:e2:bb:25:7a:a4:b2:2e:9f:61:e8:f9:c8:
27:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F2:39:2F:72:C7:27:D8:F5:6E:10:4D:01:7E:54:04:66:C0:E9:D2
X509v3 Authority Key Identifier:
keyid:21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:e2:3c:c6:7a:51:a8:b7:86:9f:66:48:53:f6:9e:f8:48:64:
3f:b1:64:59:02:9a:6a:6a:e1:57:7d:e0:e6:23:b3:ba:2c:f7:
47:89:4d:09:e5:e8:c7:f9:0e:a9:d5:01:67:00:55:c1:dc:9f:
53:28:0f:ee:db:8d:8d:1e:52:64:75:89:11:f0:a9:cf:c9:c0:
47:8e:7c:51:fb:d7:6e:ba:29:b8:96:a6:8b:a2:3a:17:85:bf:
5d:17:c5:b7:49:7e:03:01:32:5a:25:a0:fb:a2:83:c1:88:97:
c3:3c:9e:59:55:5f:4e:5e:89:4e:00:5e:35:55:bc:b9:f1:d8:
ee:52:2e:b1:1e:2f:98:69:6c:24:85:bf:8a:be:07:7c:2d:d3:
af:67:2d:2b:9a:7e:54:f6:05:ba:97:dc:ff:00:72:46:72:83:
32:d3:56:b5:b2:04:ed:a2:e7:fb:2b:b9:4f:a0:48:4a:73:18:
9e:cc:f2:39:f8:57:23:3e:59:97:66:bb:bc:21:30:3b:e1:8d:
8e:57:48:bf:66:33:68:64:99:e0:72:fb:be:e8:3d:25:b5:87:
72:e5:c5:e9:d8:81:0e:ba:a1:36:3d:51:75:91:ea:95:77:3b:
6e:74:90:31:56:48:46:ce:b3:ff:f5:97:fe:f9:5d:c0:8e:90:
c5:e2:65:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:23:51 2026 by rpki-client