
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
File: IugbMnyx-zUB4Fr6uUEhkY_bW14.mft (raw, json)
Hash identifier: o5rQ/RxyDeCJHHFsdsngXkBj/eWW9rfuxU0TUVUJ0bc=
Subject key identifier: AD:0F:0E:6F:FD:B7:E2:03:DD:51:63:C0:A4:69:7D:E2:C4:58:58:7C
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Certificate issuer: /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial: 1915
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
Manifest number: 18CD
Signing time: Mon 02 Mar 2026 01:32:18 +0000
Manifest this update: Mon 02 Mar 2026 01:32:16 +0000
Manifest next update: Mon 09 Mar 2026 01:32:16 +0000
Files and hashes: 1: IugbMnyx-zUB4Fr6uUEhkY_bW14.crl (hash: dQnNTiA5Mq3lF/i8L800rBKceahJqYXZ6MqIkfoKkr0=)
2: 0F71ED56069211F1B57EF04B043D8C67.roa (hash: xPY+wIdcnnb2Oks0I60uG5/7XY88MYgKgdGxnk7WO9k=)
3: 99D6FBE6341F11E9BF826924C4F9AE02.roa (hash: DTA9mxmgUMp5dN7zA4nVO7JGbSY6mzRAlz02SBccYEA=)
4: 609B8BC27D7B11EDB6B77173C4F9AE02.roa (hash: lCIe/jXkg4rN1KsDsytQ0JDHRzjYIhUkGHJLYrtlAfM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6421 (0x1915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Validity
Not Before: Mar 2 01:32:16 2026 GMT
Not After : Mar 9 01:32:16 2026 GMT
Subject: CN=69a4e8a2-9082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:06:63:ef:f9:41:d0:30:39:d0:af:87:0a:
51:85:74:ec:80:57:a9:09:8d:b6:70:7d:c6:13:ae:
08:e5:10:2e:b3:f7:90:5f:23:7b:5d:90:00:42:6a:
db:25:90:b5:b7:b9:1a:ac:bd:18:00:38:f4:53:f2:
cb:5e:bf:e2:3a:29:35:aa:e3:a4:66:d3:f6:1a:6f:
70:23:cf:be:48:ce:23:d2:53:2a:d8:de:b6:d9:f7:
d6:50:f7:ed:56:e7:9d:70:c3:95:8a:d3:dd:76:66:
ec:82:3b:56:d0:51:6b:51:79:97:e3:19:e4:80:6d:
ab:ed:c4:c3:b3:39:4b:83:ac:0a:f2:79:1f:4f:a7:
83:45:0c:51:e9:81:9c:c0:70:60:ae:2e:22:7e:77:
81:2e:59:53:88:e7:ba:13:fa:72:4f:65:4b:c9:fa:
3b:b5:16:12:b4:a6:a4:89:8f:c1:f5:61:c4:ba:55:
5d:34:2c:09:ed:87:b6:65:37:b3:95:0c:d5:41:05:
50:81:1b:1a:f1:0b:c6:90:b1:ac:a4:77:26:c4:ef:
98:d5:52:85:44:08:04:2b:da:ae:29:9d:c2:c8:8c:
29:e2:ff:43:23:64:df:92:e2:3d:a5:2b:f2:6a:61:
ab:c3:d0:36:ea:06:84:be:4e:5c:f9:28:e0:9a:90:
2b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0F:0E:6F:FD:B7:E2:03:DD:51:63:C0:A4:69:7D:E2:C4:58:58:7C
X509v3 Authority Key Identifier:
keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:a4:31:9e:21:76:6d:a1:c8:db:db:cd:34:26:d5:27:05:13:
46:0c:d6:ba:c3:e9:3d:66:1e:a9:0b:d5:51:ca:8f:95:2b:0e:
94:5a:49:37:3e:71:3c:f5:cc:ca:8b:16:e7:da:1c:05:58:79:
b0:c3:35:34:29:d2:1e:d3:bb:60:05:b3:58:c8:19:3c:46:55:
eb:4d:4c:6a:03:80:6e:15:24:ad:fd:44:bb:6f:73:e6:8d:58:
49:c0:34:86:4f:b0:64:45:97:31:3e:49:d7:9e:62:57:c6:6f:
75:e7:d3:89:9b:c4:b1:d5:b2:79:df:fe:7d:28:88:bd:50:be:
c4:77:14:db:5f:13:1b:25:0a:b7:8f:3e:25:4e:ce:f7:bb:6d:
1b:8d:a1:0c:75:20:6b:d8:e8:91:fb:ab:47:19:6a:ed:39:35:
70:8c:a8:05:09:46:1c:ca:3e:d1:40:93:9d:ec:e9:a2:d7:e4:
de:d2:97:bd:f9:c6:a4:b4:ef:f7:bf:6f:91:c7:49:43:76:5e:
af:bc:dc:8e:1e:25:d8:0a:91:ff:28:43:ec:0d:9d:a5:10:c7:
6c:fc:64:c2:8a:e2:a9:af:02:34:01:5a:00:12:8f:79:b0:1e:
5b:8f:0c:f8:1c:a9:b2:d3:3c:5e:92:49:48:a5:89:4d:eb:96:
6f:27:b5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:50 2026 by rpki-client