
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json)
Hash identifier: BZ1St18GtMcL8Xq2hRbRaV321YrAsMkHSbYpWmlFfoE=
Subject key identifier: 01:2C:C8:4D:EA:C7:0F:2D:A6:9F:72:28:FF:B4:44:B9:36:31:6C:C4
Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E
Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E
Certificate serial: 0D27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
Manifest number: 0D1C
Signing time: Tue 28 Jul 2026 18:22:18 +0000
Manifest this update: Tue 28 Jul 2026 18:22:17 +0000
Manifest next update: Tue 04 Aug 2026 18:22:17 +0000
Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: 0whSb5BGTTxZQA9uRnTmZ/fgW09PR0e/vWWMzKYin7w=)
2: 778B8788063711EA981E916CC4F9AE02.roa (hash: lLzLMFvq75P6s11FcUbySa49RP0prDTXCNFomk88MZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl
rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3367 (0xd27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E
Validity
Not Before: Jul 28 18:22:17 2026 GMT
Not After : Aug 4 18:22:17 2026 GMT
Subject: CN=6a68f35a-e0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:d8:f8:e2:19:16:02:b9:14:5c:2a:0c:74:
67:d7:b0:c5:07:aa:2d:15:ad:6c:54:57:08:c9:22:
0a:2b:c7:b7:bf:74:75:1a:e6:a4:ba:11:4a:6f:d3:
83:82:94:9b:ea:ae:66:f4:4f:e9:80:75:2a:84:8a:
b1:2a:1a:b4:b4:d2:44:2a:5f:1e:c4:87:5a:a4:2d:
fc:f2:60:c4:60:ca:2a:f1:54:d6:99:2d:b2:ff:86:
45:4b:55:a0:4b:b0:c4:9e:04:65:64:b2:64:38:df:
15:78:4a:ca:89:d3:d5:df:77:a4:1a:5e:34:0e:72:
d5:3f:75:ad:18:97:c6:2c:51:a0:54:d9:eb:69:31:
5e:0d:38:f7:b3:97:44:c5:c0:05:82:a5:6b:34:13:
eb:8d:87:69:fb:d0:41:0f:26:7f:ae:01:82:51:22:
31:07:bf:02:02:86:9c:1d:d7:7f:7e:d7:90:b5:38:
cf:ee:f1:dc:1e:30:12:02:96:4b:11:d3:1b:4c:2a:
e5:81:18:b0:00:e6:2e:07:44:84:94:42:08:7f:c1:
d8:ec:41:f6:5a:20:31:a2:59:8c:c2:b0:2e:4e:f0:
95:91:6c:83:38:19:de:67:34:ab:22:57:5b:f1:ea:
f7:26:4a:98:78:16:72:6a:9b:e0:b9:47:07:e2:b6:
9d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2C:C8:4D:EA:C7:0F:2D:A6:9F:72:28:FF:B4:44:B9:36:31:6C:C4
X509v3 Authority Key Identifier:
keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:e7:2a:a1:b1:ab:60:8c:ac:91:90:74:92:05:10:e9:da:6e:
a7:11:96:2c:3e:35:af:08:12:dc:0d:91:66:fd:73:55:ae:71:
e4:07:90:69:11:ca:a0:6f:67:3d:5b:0e:62:3f:45:87:17:3e:
a0:5f:61:4e:1a:67:a7:7a:07:c9:31:9b:cf:3a:e6:06:33:ba:
d2:d2:95:d5:97:6c:f5:40:63:e7:4e:14:85:c7:71:ff:8f:10:
24:1e:f0:26:27:5d:b1:7f:06:f6:17:12:71:08:25:e9:7f:23:
4c:05:ce:2b:05:b6:71:38:cb:cc:70:1d:f0:32:bd:07:a4:0c:
f2:f8:77:0b:ea:95:d1:02:81:38:75:5c:e9:ae:50:b0:95:db:
0c:2c:54:3b:22:f4:6c:e5:13:e4:06:5b:c2:8a:a8:0f:9c:f3:
06:60:ce:af:c3:e4:74:2d:f7:04:5c:62:4c:e9:70:a4:c3:54:
44:dc:7a:67:2a:16:66:71:52:d7:d7:47:7b:34:e8:19:52:b4:
dc:7b:f1:ff:1f:cf:7f:6f:18:3d:8b:43:27:6e:a3:56:57:b9:
89:07:10:54:98:4e:3b:4a:c7:57:37:d4:1a:fd:c8:93:92:3c:
7d:f3:67:5c:0e:36:b6:1e:44:93:a7:b5:71:e7:7a:1b:00:11:
66:ef:53:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:05:57 2026 by rpki-client