
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
File: iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft (raw, json)
Hash identifier: a2pXaeXMxuVIBZco9MYrvWj4DytpMJaXTqrmPFMiE4s=
Subject key identifier: 23:96:B9:7E:87:AF:D3:0A:40:5F:4E:FA:C3:9F:19:AB:1A:42:FB:20
Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
Certificate issuer: /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
Manifest number: 0221
Signing time: Thu 15 Oct 2026 03:41:13 +0000
Manifest this update: Thu 15 Oct 2026 03:41:13 +0000
Manifest next update: Thu 22 Oct 2026 03:41:13 +0000
Files and hashes: 1: iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl (hash: lozAT+K5qTa7WtSt+vQEP7ZAzCNwGwhPQdKe5e7YPj4=)
2: 51D4585A89B211EE9ADA615EC4F9AE02.roa (hash: Kopjf9ZoJzRg8VCg2Qj9EUxQF2CjA+68cqIxaYzasxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl
rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 03:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919821D, serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Validity
Not Before: Oct 15 03:41:13 2026 GMT
Not After : Oct 22 03:41:13 2026 GMT
Subject: CN=6ad04b59-7996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:2d:fa:09:fb:83:2f:ed:e5:26:5b:19:ad:
ef:b2:76:91:f7:45:9e:80:ce:b5:3f:6c:ae:46:9f:
cf:43:f5:2d:35:5c:b3:1f:48:9d:c0:0c:f8:80:c8:
86:ed:f0:86:e7:40:2f:22:d5:46:b6:e4:5d:13:04:
ea:b4:1c:68:9c:68:ce:88:77:ca:93:01:90:29:09:
15:cb:46:df:fc:11:d8:a2:5d:51:f5:71:2b:31:47:
e0:1c:85:c0:ff:e4:7b:2b:d2:4b:39:a2:17:62:4e:
59:99:96:c9:03:27:b6:3f:bd:23:45:fc:8b:4d:79:
75:fe:2b:3d:e1:2c:73:f1:8b:26:ce:f8:57:3a:ad:
68:45:0b:ce:3f:63:85:22:40:c6:ba:6b:20:75:9d:
db:18:7a:b9:34:21:d1:58:34:ae:2c:fb:b4:2a:00:
4f:9c:88:63:88:c8:af:5a:5e:66:8f:56:4a:5c:5a:
e3:6e:9a:15:13:4a:1b:91:08:93:8a:30:1b:ad:ae:
45:4a:6a:22:05:a4:cb:1b:c1:3b:d1:82:f8:d7:be:
0a:97:17:9c:7f:54:04:f1:ef:11:bd:d9:48:43:58:
f3:2d:f4:57:08:b5:7d:52:5f:33:20:f6:b4:cb:76:
d6:27:a1:6b:35:42:4b:48:57:79:b0:57:fa:cb:46:
56:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:96:B9:7E:87:AF:D3:0A:40:5F:4E:FA:C3:9F:19:AB:1A:42:FB:20
X509v3 Authority Key Identifier:
keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:23:ed:a6:34:3a:36:81:31:53:fd:69:f9:f2:6b:e0:06:3e:
12:a0:5a:b9:2d:23:35:43:ca:84:f8:04:44:c3:91:39:e1:90:
65:22:f0:eb:8a:a5:31:d9:db:6d:49:bd:9c:3f:7a:13:f0:e9:
c9:24:c8:28:be:0d:b6:a5:4b:1d:9e:25:52:be:81:68:2a:76:
13:aa:05:59:ff:8a:ab:27:65:5d:11:49:fa:d6:21:2b:e3:f3:
6b:64:90:1a:be:c3:b8:d9:a9:47:f5:e9:92:ba:f9:f4:f8:a0:
44:50:46:50:91:63:ad:74:28:d7:26:0b:8d:b3:3e:45:5b:8b:
36:4f:a6:47:87:9b:01:b6:77:08:2b:a1:3f:26:2e:fa:78:25:
ed:9f:d8:67:4b:39:93:97:95:88:97:7f:f7:cd:88:87:4b:a1:
74:83:8f:de:81:44:70:b9:d5:34:42:9b:d8:f4:5c:29:8c:72:
9b:b5:c4:d2:1f:ec:07:d8:b8:3e:f8:9a:d9:64:48:51:8c:bc:
cd:9c:6d:95:80:7f:3b:0b:be:5a:76:70:a4:b3:14:e4:e0:29:
c8:79:a7:0c:45:41:76:fc:74:ce:3b:ac:c4:6c:d9:3e:04:d8:
f3:41:11:f2:0a:25:ce:8d:b3:1e:35:be:3d:88:09:30:d3:4c:
61:67:f1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:09:02 2026 by rpki-client