
$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
File: e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json)
Hash identifier: QhkvFQORPKJ5kY63BbfPWKQfxfFvtDmtjoc1OXTSSHo=
Subject key identifier: C7:29:18:46:1D:ED:4A:6C:D1:DC:6B:99:B4:DB:FD:D7:2A:33:AB:92
Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
Manifest number: 01E9
Signing time: Sat 13 Jun 2026 03:32:45 +0000
Manifest this update: Sat 13 Jun 2026 03:32:45 +0000
Manifest next update: Sat 20 Jun 2026 03:32:45 +0000
Files and hashes: 1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: TG+USxotsGqGb+SxB2USr+K2I4SJjulNWli5hDkgkhA=)
2: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (hash: 5n/vT2aN9VzYjANmFIq1/DcSFVdlgCzkvZzjJSAeg2Q=)
3: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: W9lanvtL2q9XwYCNQGMdXKdQrewpCRyS44URbarRexc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl
rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Validity
Not Before: Jun 13 03:32:45 2026 GMT
Not After : Jun 20 03:32:45 2026 GMT
Subject: CN=6a2ccf5d-cf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:ca:6a:8c:18:8f:b9:1c:d1:39:79:bf:ee:
aa:ac:3d:a2:39:37:d4:16:b5:1f:d2:18:f6:3d:af:
15:18:03:5e:e5:1e:e9:f9:54:1a:be:64:03:92:60:
1e:6d:14:01:f3:4d:01:57:e4:28:c9:43:d6:3e:99:
1d:13:e7:d9:31:6c:35:c8:c2:43:5b:80:f2:7a:eb:
50:0a:d1:24:f8:94:25:2f:83:f3:dd:a5:0d:de:cd:
ec:cc:14:65:28:d9:5d:64:83:a9:12:3f:f3:eb:68:
cb:43:fd:08:2f:0a:11:80:9d:90:2a:96:33:0c:c7:
90:2f:53:70:6a:c0:c0:81:0f:0d:c4:5e:a2:de:5b:
d5:71:d0:8c:b8:09:99:67:5c:7e:22:61:72:7c:16:
c6:66:a3:9c:ca:d6:10:7c:55:20:fc:4b:5f:51:db:
71:d5:44:32:e6:a2:e6:fa:34:5d:25:a5:14:9c:05:
53:49:ad:87:8f:8d:1d:22:b1:4f:c9:15:f8:91:0f:
17:8a:7d:74:ef:2d:30:6d:77:f2:af:ff:c3:bf:c2:
c5:8c:10:18:50:96:ce:ef:37:ad:64:b9:dd:c4:bc:
c1:95:9f:79:38:f4:39:80:cc:6b:47:b6:ab:d4:df:
f1:0d:7a:ae:d7:d9:c5:5b:42:53:b5:3a:b3:2c:b5:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:29:18:46:1D:ED:4A:6C:D1:DC:6B:99:B4:DB:FD:D7:2A:33:AB:92
X509v3 Authority Key Identifier:
keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f8:65:4f:e0:4a:fc:08:fd:f7:e7:ef:74:c5:34:2e:61:60:
6b:7b:be:04:91:59:3d:e7:fd:f8:4c:8f:9e:30:0e:5a:b4:c0:
44:70:0f:01:0a:be:e9:7e:41:99:91:ac:ba:84:8b:fb:fd:f6:
34:5b:57:85:09:2d:e8:04:5a:79:1f:e1:41:ce:56:0d:2d:dc:
85:89:14:44:db:c2:50:c5:a1:46:c9:b8:08:58:be:6e:75:98:
22:90:b4:09:d4:b9:b9:37:fc:e4:56:5c:4e:82:d6:dd:87:f4:
80:ae:52:bf:43:f9:01:d8:03:ce:c7:02:c1:ad:fe:ca:ae:8c:
37:57:e3:11:c0:c7:f8:52:98:81:fc:a9:50:6c:22:cd:4c:60:
5c:80:8f:ed:2c:46:9b:41:2c:a9:9d:23:e9:ed:74:8f:e5:cc:
28:55:3f:8e:5d:ef:89:07:d6:12:f3:eb:7c:ac:9b:70:6c:3c:
6c:e0:d9:3c:e6:84:40:51:7b:1f:2e:91:6b:6a:35:22:c3:33:
8c:8d:68:0d:69:4a:35:6a:27:07:18:57:53:9c:1a:cb:3f:e9:
44:8b:80:15:e7:5d:c6:6f:77:78:a5:a8:75:91:62:1b:8c:5d:
8b:7c:83:06:18:aa:ab:55:52:fe:fb:08:8b:49:af:cf:86:88:
ab:11:d3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:23:03 2026 by rpki-client