
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft
File: iifxtRRZ_TbLLIBghxxVOPnSPX4.mft (raw, json)
Hash identifier: +GDefWkvC6mBcpoALhMGvZ/9MLEf9HVG6oyt990ZukQ=
Subject key identifier: FC:70:7B:C4:70:BB:0F:29:1A:68:B0:23:CA:98:32:C0:D2:08:3A:EA
Authority key identifier: 8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E
Certificate issuer: /CN=A918AACD/serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E
Certificate serial: 01C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft
Manifest number: 01BE
Signing time: Wed 23 Sep 2026 03:47:41 +0000
Manifest this update: Wed 23 Sep 2026 03:47:41 +0000
Manifest next update: Wed 30 Sep 2026 03:47:41 +0000
Files and hashes: 1: iifxtRRZ_TbLLIBghxxVOPnSPX4.crl (hash: TwEjqHPt4mPYgIkIml/6MZPtCOBlVv3q8rdNYiZftUM=)
2: 7DA22F2C199D11EFB19DA380C4F9AE02.roa (hash: yzvAAj6059FyJ5YRc3KAkcmbzPNRGzywLIuOLAJMFFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl
rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AACD, serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E
Validity
Not Before: Sep 23 03:47:41 2026 GMT
Not After : Sep 30 03:47:41 2026 GMT
Subject: CN=6ab34bdd-8f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:a1:54:e8:03:2a:5a:f1:0d:c1:a9:c8:f3:
c3:bb:e0:dd:5d:11:71:13:4e:4d:d6:bc:ac:0d:46:
bb:69:9c:56:b6:ae:19:d4:08:91:08:f5:5b:66:78:
46:f7:03:c2:10:5b:15:d2:18:7a:6f:29:e8:86:16:
58:d4:b7:d9:16:00:19:68:06:a6:c6:60:09:51:15:
e7:9b:08:ee:8b:4a:e6:b5:1d:f1:f8:37:67:f3:76:
9b:1e:cf:7a:45:5a:89:4c:d6:4a:77:bd:17:92:9f:
6e:63:d7:93:11:e2:51:fd:73:63:7c:bb:8a:c6:76:
d4:c3:98:5e:58:3e:17:44:f5:d9:a9:5c:fc:43:02:
65:7c:af:80:71:d6:54:7f:65:76:17:87:87:fa:34:
18:7a:f5:de:c2:f9:3b:b3:67:a8:b9:29:db:e1:50:
1b:81:f3:b7:da:4d:f9:05:1d:49:11:b9:b9:77:f9:
ae:ee:c4:81:0d:a3:87:87:58:e0:74:3e:c3:d1:8b:
3d:40:73:b9:81:8f:54:04:ea:54:90:82:4b:09:f7:
11:c9:e6:1a:d3:64:98:76:5f:33:ee:ff:57:67:fe:
e9:9a:bc:19:86:29:6c:1b:36:ca:51:d9:42:21:02:
2e:f8:12:7b:3c:58:e2:b7:8b:1f:06:9b:de:24:a6:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:70:7B:C4:70:BB:0F:29:1A:68:B0:23:CA:98:32:C0:D2:08:3A:EA
X509v3 Authority Key Identifier:
keyid:8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:6e:d8:a6:57:bd:ba:cf:28:ce:b5:af:eb:92:ab:d6:e8:66:
07:f1:a7:fa:f9:1a:ce:2d:19:85:30:3d:74:c9:0c:3b:d2:73:
a6:b7:7a:e9:50:79:d6:96:e8:70:5a:4d:e2:39:89:df:8b:39:
c0:69:85:eb:7c:6a:ac:90:ec:0e:74:c8:2d:35:a5:5a:63:0a:
26:02:8a:ba:8f:aa:ea:32:49:7e:82:55:dc:6b:a8:d3:7b:91:
21:50:8f:c7:ef:c2:58:63:56:50:0a:73:58:b3:5a:1c:ed:1d:
98:f1:7e:6a:83:93:27:a8:1a:52:9a:1c:71:67:58:fe:38:6a:
27:dd:54:b7:04:55:b3:f3:c6:ca:06:bb:76:aa:c9:b4:02:9d:
db:52:8d:60:2f:8b:e1:f9:6d:7b:62:fe:d8:65:99:de:93:f6:
00:c5:6d:9b:91:1e:9b:e8:00:66:d5:eb:fe:ed:40:58:45:4a:
89:69:01:62:9d:c7:f8:a1:97:76:6f:df:7f:e9:b0:95:9f:46:
b2:c3:b7:e2:a7:f6:24:48:e3:59:f1:5c:de:c3:d4:87:3b:70:
df:61:31:f0:8f:f8:58:74:98:6a:a0:be:5b:22:da:8b:18:7a:
6e:0d:23:cc:e3:b1:f8:fd:a5:1b:dc:a0:14:47:74:79:9c:07:
ad:18:e3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:23:22 2026 by rpki-client