
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
File: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft (raw, json)
Hash identifier: mgoxLicI+X4XjAE1sT/p33SorIkIeHJmn5sTZID/99I=
Subject key identifier: 42:76:1C:F8:3F:13:8A:25:F8:CA:F5:B2:41:50:E3:56:E0:EC:9A:D2
Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Certificate serial: 0793
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
Manifest number: 077A
Signing time: Thu 16 Apr 2026 21:31:46 +0000
Manifest this update: Thu 16 Apr 2026 21:31:45 +0000
Manifest next update: Thu 23 Apr 2026 21:31:45 +0000
Files and hashes: 1: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl (hash: G6E/mHMtwTZnRQP9lchjT5vESHVUrevoYzojpDTyVPI=)
2: ED7C5416CD3711EDB6A0F37BC4F9AE02.roa (hash: TFtBaz3XXYr53c4KFkqYw9OsCBY/VjjGiRVEIJaG+ss=)
3: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (hash: Uh0sBPuZpoy8sTTNiUroNOAmNS0FTfsDSQBW+NkNyHo=)
4: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (hash: v2YonyCo9R/dlcaHZ1jfDPJlrOShqZgPxJ5RkLy9g6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl
rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1939 (0x793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Validity
Not Before: Apr 16 21:31:45 2026 GMT
Not After : Apr 23 21:31:45 2026 GMT
Subject: CN=69e15542-a4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:7d:13:b0:55:f7:96:98:84:e8:9b:8d:63:
50:b3:68:39:cc:a0:7a:71:c2:f8:49:f1:16:cc:db:
fa:6d:2e:22:ba:90:b5:f7:a2:2b:23:20:82:68:44:
32:df:94:18:f9:12:04:20:be:dc:a8:3e:e8:a7:ec:
cc:c3:eb:fe:c6:a8:de:97:b5:b8:11:0e:dc:71:6d:
09:2c:49:dc:b3:c6:7c:10:d8:5d:13:bb:c7:47:57:
55:7c:43:4d:84:72:9d:da:fe:24:d9:de:a3:bc:d9:
76:aa:82:d3:69:40:5c:a9:96:e0:6f:78:b9:d9:d8:
43:f7:f0:f5:66:36:dd:ae:26:78:1c:21:3b:63:77:
3a:21:82:e8:7d:06:db:d0:62:a2:10:6f:de:1c:e7:
50:2b:ac:6a:63:35:dc:32:22:9f:9f:6b:33:51:c4:
f8:0b:fe:ef:17:97:7f:fe:e7:72:2c:0f:e8:87:8f:
bf:74:c5:5b:34:a8:2f:24:78:7e:79:86:c1:fa:2f:
71:2a:f8:76:18:8d:58:95:74:16:7f:37:99:fb:f0:
d2:fe:38:86:1d:73:89:39:16:34:23:19:1b:8a:1e:
db:5b:5c:d9:00:31:39:79:b3:b2:f7:fd:e3:33:ec:
76:64:a0:29:32:7b:d9:cb:6c:5a:02:93:3b:a8:e3:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:76:1C:F8:3F:13:8A:25:F8:CA:F5:B2:41:50:E3:56:E0:EC:9A:D2
X509v3 Authority Key Identifier:
keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8b:1f:2a:d3:3c:e7:5b:f1:4f:fd:2f:f3:03:2c:4e:d8:43:
96:fd:e0:d6:a8:f8:0b:6c:d6:63:ab:d3:c8:68:9c:d2:6f:8f:
bb:16:77:73:a1:65:2b:97:c2:26:02:a9:02:ab:c1:fe:31:f0:
56:0e:ce:e3:be:b3:b0:12:7a:6b:9c:80:67:6f:df:a8:17:ca:
dd:e6:ba:73:6f:f4:17:76:04:8f:d6:c4:21:af:9a:dc:33:90:
cf:a8:90:16:ad:c9:92:42:78:83:41:0c:dc:3f:d2:1a:ae:35:
93:c6:ba:ca:5c:5f:76:e1:cb:90:f3:71:30:05:c8:43:73:e1:
5d:58:a4:e9:36:84:9a:ec:10:bf:4d:55:66:ab:43:c5:e1:35:
91:5a:94:34:d3:a5:28:02:40:7a:9b:32:77:c9:08:e2:52:6e:
0e:ad:0e:ea:8d:90:d3:d8:b1:12:3e:e6:d5:29:3c:06:62:8a:
59:5a:49:56:0e:ff:54:0b:1c:7d:4a:c0:6c:54:dd:09:2f:46:
0f:ff:3a:b5:66:ca:bf:2a:3e:5d:75:15:c3:a9:89:a5:d3:33:
45:ed:5c:22:36:b3:11:b5:62:b7:87:34:bf:7a:5e:73:fc:14:
46:ef:34:97:d6:02:57:b4:78:0e:75:19:72:4f:43:52:ab:b9:
0d:21:3d:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx
QzhFNDNGMjQwHhcNMjYwNDE2MjEzMTQ1WhcNMjYwNDIzMjEzMTQ1WjAYMRYwFAYD
VQQDEw02OWUxNTU0Mi1hNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtj19E7BV95aYhOibjWNQs2g5zKB6ccL4SfEWzNv6bS4iupC196IrIyCCaEQy
35QY+RIEIL7cqD7op+zMw+v+xqjel7W4EQ7ccW0JLEncs8Z8ENhdE7vHR1dVfENN
hHKd2v4k2d6jvNl2qoLTaUBcqZbgb3i52dhD9/D1ZjbdriZ4HCE7Y3c6IYLofQbb
0GKiEG/eHOdQK6xqYzXcMiKfn2szUcT4C/7vF5d//udyLA/oh4+/dMVbNKgvJHh+
eYbB+i9xKvh2GI1YlXQWfzeZ+/DS/jiGHXOJORY0Ixkbih7bW1zZADE5ebOy9/3j
M+x2ZKApMnvZy2xaApM7qOOAwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJ2HPg/
E4ol+Mr1skFQ41bg7JrSMB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5
NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTMxNC83MEQzQjM2QTU5NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5
R0xEbUFWMGVEN29jamtQeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq4sfKtM851vxT/0v8wMsTthDlv3g1qj4C2zWY6vTyGic0m+PuxZ3c6FlK5fC
JgKpAqvB/jHwVg7O476zsBJ6a5yAZ2/fqBfK3ea6c2/0F3YEj9bEIa+a3DOQz6iQ
Fq3JkkJ4g0EM3D/SGq41k8a6ylxfduHLkPNxMAXIQ3PhXVik6TaEmuwQv01VZqtD
xeE1kVqUNNOlKAJAepsyd8kI4lJuDq0O6o2Q09ixEj7m1Sk8BmKKWVpJVg7/VAsc
fUrAbFTdCS9GD/86tWbKvyo+XXUVw6mJpdMzRe1cIjazEbVit4c0v3pec/wURu80
l9YCV7R4DnUZck9DUqu5DSE9WA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:36 2026 by rpki-client