
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File: iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier: Gq8gPmHCJFSkPK8BY8jLg9rpGTTTOB9VAJWjSKT2aro=
Subject key identifier: FF:EE:68:61:B3:F2:88:51:7D:FE:45:24:9C:8C:4F:4B:F0:79:BA:98
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer: /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial: 106A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number: 104E
Signing time: Tue 28 Jul 2026 17:30:20 +0000
Manifest this update: Tue 28 Jul 2026 17:30:19 +0000
Manifest next update: Tue 04 Aug 2026 17:30:19 +0000
Files and hashes: 1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: hFuhsUTK+FU78444N4RYimIug3BJqdMsvOlI4McUI4g=)
2: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: Ri/V1vsZYZSf3Iiz5nBojjsApKtj70HrLpdneU/NrfM=)
3: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: XvZz5Qg4UuABOAvZL3TrqvqvGORz9Mmy5LeD7IN22s0=)
4: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: JR72/EZy5aRrSFB9vWQMg1q1NBXm5hj69ANbCPmEu98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4202 (0x106a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Validity
Not Before: Jul 28 17:30:19 2026 GMT
Not After : Aug 4 17:30:19 2026 GMT
Subject: CN=6a68e72c-c251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:d9:6f:cf:60:64:1c:62:63:8b:02:3d:34:
c5:08:6d:e9:cd:f5:98:c8:40:60:c5:98:13:53:d4:
6a:81:13:b2:41:49:2f:0c:e0:41:c0:58:b5:71:43:
df:83:52:55:ba:f8:65:6b:28:6a:c8:4c:ef:fa:b5:
32:d8:94:20:50:bd:8c:77:e8:18:55:be:af:b2:57:
1e:77:c4:44:c0:5b:c5:7f:f1:8b:53:5b:0f:43:99:
56:c9:3c:85:55:fb:4a:ff:a9:88:0c:c7:a4:fd:53:
ef:c6:a9:fc:19:3e:07:53:42:73:c9:b5:4f:5d:81:
a7:dd:ba:8a:dc:2d:43:b7:07:d6:2b:0f:26:6f:1a:
4a:68:ee:d2:e4:6d:3f:81:ba:e0:12:3a:60:1a:29:
66:91:58:ee:ed:15:b9:6d:cf:62:40:8f:f8:b5:a0:
e7:e3:d9:91:7d:7f:70:2b:a4:62:fe:61:c7:33:51:
da:5b:e7:d4:46:63:12:1f:80:b4:a9:12:8e:b2:d9:
5a:85:69:9e:ae:eb:78:95:54:bd:1d:aa:d6:b7:96:
08:d9:29:81:bd:29:a5:75:c3:a8:3f:99:ab:3c:94:
db:18:c4:b5:75:a6:90:98:ef:9e:56:a6:7d:7d:86:
2a:6f:60:9a:70:5b:75:df:bc:9b:6e:39:d9:ae:34:
ea:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EE:68:61:B3:F2:88:51:7D:FE:45:24:9C:8C:4F:4B:F0:79:BA:98
X509v3 Authority Key Identifier:
keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e2:d1:f2:3b:fe:75:cb:a0:7a:c0:de:45:bf:8e:88:82:95:64:
58:8e:ea:db:03:f6:04:52:1f:fb:9d:e0:c2:03:0a:3a:40:ff:
4f:e6:48:55:ad:b9:5a:93:21:78:b1:58:91:7e:5c:0f:4e:4f:
18:e5:15:ff:97:e3:64:69:30:8e:3f:ce:32:8e:a4:7d:0a:d4:
34:15:02:3d:7c:d2:e6:de:8b:0b:f3:0c:93:43:3b:e2:93:b5:
fd:fd:45:83:dc:1d:ca:cb:a6:52:79:92:86:3a:8c:75:83:3a:
9e:b5:91:0c:f1:46:da:1d:19:65:ab:ea:a7:33:57:ad:51:38:
83:1f:45:e5:e7:d3:a7:3d:1b:e5:cd:a9:30:6a:69:f2:27:77:
9c:31:2e:a7:f4:60:9b:07:02:a1:04:af:be:a1:f6:21:a9:f1:
d0:ad:a4:bb:e6:09:28:ed:f9:f1:60:06:a1:37:3d:65:89:92:
68:a4:21:0b:c6:af:9a:84:41:f4:07:7b:2b:d9:70:7a:b7:47:
31:74:40:2f:54:c6:7e:8e:0c:87:b2:d4:d4:97:5b:42:22:b6:
a2:a8:5b:4e:63:3e:cd:e5:b7:f4:b1:a3:65:91:ab:3d:4a:75:
12:28:55:f1:7a:58:97:4d:bd:8f:d0:44:3c:c3:c9:04:40:42:
3f:e1:ff:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:43:57 2026 by rpki-client