
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
File: Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json)
Hash identifier: 40XjqRYVq0IGgjr90xmw6p0aIFp1nr9DrnPBLCptFiM=
Subject key identifier: 11:54:63:31:03:89:56:E5:B9:FA:FC:B5:28:B9:23:E7:AC:22:0F:07
Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
Certificate issuer: /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Certificate serial: 0824
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
Manifest number: 080E
Signing time: Sun 20 Sep 2026 21:08:25 +0000
Manifest this update: Sun 20 Sep 2026 21:08:25 +0000
Manifest next update: Sun 27 Sep 2026 21:08:25 +0000
Files and hashes: 1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: xfN4pSOBgyfsh0tbX4XSWSM3VBY2bodT5INluOm98iw=)
2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: yigo59Gar+8S1aiuGB+d0Lm9hAb5K16jebQb9hDYj9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2084 (0x824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Validity
Not Before: Sep 20 21:08:25 2026 GMT
Not After : Sep 27 21:08:25 2026 GMT
Subject: CN=6ab04b49-104b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:c4:73:fe:1b:9c:ad:a7:1b:5c:a2:1a:c9:
1b:aa:97:c2:92:92:84:c7:7e:96:9c:fe:48:e8:16:
95:75:cf:2a:57:24:d6:43:6d:5f:06:69:b5:06:82:
e0:9b:2e:7f:9a:59:d2:d6:24:69:53:58:d4:b9:7d:
4d:d5:b2:19:86:97:b9:70:b0:ab:44:f9:17:f9:41:
0e:ff:b6:57:d3:da:f7:12:28:80:e4:da:81:77:38:
ee:78:8d:ed:95:66:22:d4:e8:13:d8:ba:5b:c4:94:
77:39:f2:42:aa:7d:f3:0b:1c:ad:73:e3:2b:0a:8a:
0d:1f:f1:df:cb:35:88:b0:7f:aa:81:7d:fe:d1:2f:
40:51:32:e9:62:2b:9d:e4:59:47:bd:4a:3f:8b:91:
fa:28:f4:c7:07:36:aa:c6:ce:bb:db:76:4c:72:8f:
25:a0:b5:64:91:1c:66:34:8c:d8:09:ae:00:08:0d:
66:19:3e:f7:71:0c:b2:00:59:bf:cc:24:30:cc:c8:
0e:52:81:db:1e:9b:ef:86:48:a4:a6:2b:6f:6d:7f:
80:1b:54:8f:8b:fd:7d:7c:5d:d1:31:32:c2:58:ef:
ba:61:5d:c6:db:1f:29:e0:23:a0:ed:42:0c:db:b8:
f0:9b:b9:1b:64:6c:b4:22:ad:d2:ca:07:13:e4:4b:
75:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:54:63:31:03:89:56:E5:B9:FA:FC:B5:28:B9:23:E7:AC:22:0F:07
X509v3 Authority Key Identifier:
keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:96:2c:22:33:f1:94:30:22:4c:72:28:05:5d:ba:33:60:63:
15:e8:6e:00:19:19:1d:f1:10:40:89:0a:7c:b9:7f:bd:82:ad:
03:b9:7f:d4:55:66:a9:76:94:16:03:fb:89:39:36:b3:a2:27:
f6:35:0d:99:e6:24:a7:67:4e:02:35:5a:17:65:aa:b7:bc:8d:
c9:a8:73:e5:ac:16:81:f6:e7:17:99:10:e9:d3:e3:da:34:99:
d0:3f:ed:4b:67:74:0d:8d:50:50:ec:d7:6b:98:4b:08:ca:15:
5a:53:05:df:d0:1a:b9:b1:6b:8d:ab:08:f5:ca:54:f8:4a:c3:
b7:fe:df:0a:d9:1e:3a:13:66:6a:9a:ff:70:e4:0f:b4:59:a8:
ca:1f:6d:95:b0:31:b3:01:7e:6b:e7:f7:02:93:8c:82:b4:78:
6e:ac:ae:1e:3c:5c:99:cf:c2:ab:de:61:12:76:69:a4:28:e4:
f3:8f:c8:c8:68:8c:71:e6:7e:30:49:b9:0f:45:e5:9d:f9:a0:
4b:2f:b2:d3:f7:48:b7:c1:29:68:50:d5:05:c9:95:2d:5b:3e:
33:1e:55:88:01:a9:59:81:94:99:79:84:1f:06:d8:51:88:0d:
65:5f:f8:46:e0:c0:ea:02:2a:e3:03:9a:67:d7:16:ab:43:33:
a8:40:02:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:51:50 2026 by rpki-client