
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
File: iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json)
Hash identifier: ZTeCCx5hwiUiTipkvxATUyi2VpaHKnLyUmXMvNzdZC4=
Subject key identifier: 7C:B2:5C:B5:7B:9F:47:1A:C6:54:05:A2:3A:16:B3:47:19:8B:87:9B
Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
Certificate issuer: /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
Manifest number: 01CB
Signing time: Fri 25 Sep 2026 03:49:25 +0000
Manifest this update: Fri 25 Sep 2026 03:49:24 +0000
Manifest next update: Fri 02 Oct 2026 03:49:24 +0000
Files and hashes: 1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: QFUZ6gYZchwt3BjzbWQFIUdFzu8RJap/L8LVMlf5/8k=)
2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: 73ivG8eex7LmjOrNpv37VdMFlLl7/CFLhIGgaTnXkdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Validity
Not Before: Sep 25 03:49:24 2026 GMT
Not After : Oct 2 03:49:24 2026 GMT
Subject: CN=6ab5ef45-7192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:be:27:f6:cd:13:ec:4b:75:35:32:ca:60:56:
63:67:a9:4d:84:a7:2d:e6:a0:bd:55:45:aa:eb:1e:
23:32:7e:af:f1:c0:c9:c6:f9:0f:00:2b:71:b6:56:
3b:5a:63:37:7c:64:1a:fa:b7:c2:75:bf:41:ee:7c:
2f:49:a5:58:2c:26:ad:eb:13:ac:31:f6:e0:8b:7f:
f8:32:77:ab:e0:85:75:b9:19:78:58:96:12:30:16:
99:b0:46:29:65:c5:cc:f0:4e:b0:20:5c:50:bf:25:
32:db:2e:c7:0d:06:6b:d0:eb:a5:2e:49:05:ca:2b:
86:3c:ab:44:2d:bf:a8:8b:38:19:b0:20:97:92:4a:
d3:99:2c:32:f9:31:a8:bb:41:d9:34:e7:94:70:cb:
75:92:f8:18:b1:71:b6:7b:d8:34:61:a8:81:76:a3:
fe:19:8c:66:b0:57:69:2b:19:8e:28:0c:1b:bb:1a:
ab:5d:94:5a:76:05:b9:d9:56:8b:5f:d4:90:dd:84:
5c:ad:b1:2b:8c:d1:2f:ee:66:c0:b6:ec:6b:c7:5d:
89:c4:8d:30:a6:c5:d6:57:00:81:32:cb:c0:00:2f:
28:69:7a:75:ab:d0:e8:17:16:28:db:98:52:ea:76:
a2:c0:f1:4b:ee:d1:74:41:55:73:ac:38:d9:79:ad:
13:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B2:5C:B5:7B:9F:47:1A:C6:54:05:A2:3A:16:B3:47:19:8B:87:9B
X509v3 Authority Key Identifier:
keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:90:e0:af:61:17:53:87:dd:20:07:cb:d4:8d:4a:e5:5e:89:
54:ed:78:5f:71:6f:c1:be:b1:36:87:a6:ff:44:65:74:74:91:
e7:df:0d:d3:3b:f9:ff:f3:67:1c:0a:bd:31:6b:fd:0c:5b:00:
b3:ab:70:31:cd:da:67:11:fe:f5:3b:e5:f6:95:bb:a5:e7:ec:
58:0b:6b:fb:52:43:c2:6c:34:52:24:e8:60:5c:3b:e7:ae:be:
a5:3f:20:0f:66:92:58:5d:0e:2b:3b:3a:34:9d:04:b8:4b:30:
c6:8a:a7:57:eb:be:cd:b7:69:b8:44:05:68:c6:4c:51:90:40:
e5:ef:43:e5:d3:41:11:10:c9:80:55:35:58:ea:57:92:dd:67:
e3:02:1b:6d:11:ea:c4:31:ba:1e:61:5d:2e:fd:d3:73:5f:ec:
97:7e:9f:a1:3f:1d:7d:71:45:75:c0:44:73:e8:f5:bc:a8:83:
6b:e9:17:ff:26:3e:04:55:66:e2:a9:a4:ef:3d:da:c2:21:79:
3d:98:cb:ce:10:cf:80:90:f1:35:a6:e2:5b:78:7f:e6:40:91:
d3:c2:d7:49:1f:65:fd:b2:fc:1f:e1:fd:47:c7:4a:5e:cf:07:
a9:46:e8:73:9e:0b:6d:81:6e:f7:8e:19:b6:b0:ab:a3:64:fe:
8a:b4:11:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:44:06 2026 by rpki-client