
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
File: IW4UMOXDDg0jp10HDbeJi5CEl5k.mft (raw, json)
Hash identifier: dc8vmxCr0RBo4N913G8EBfx2YabnkRIwsrgSgF90hUc=
Subject key identifier: 27:3B:43:C3:3D:F9:BF:8B:19:68:5E:32:9D:21:89:D2:B4:C5:1E:C2
Authority key identifier: 21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
Certificate issuer: /CN=A919A5B5/serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
Certificate serial: 0848
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
Manifest number: 083A
Signing time: Sun 01 Mar 2026 23:22:26 +0000
Manifest this update: Sun 01 Mar 2026 23:22:25 +0000
Manifest next update: Sun 08 Mar 2026 23:22:25 +0000
Files and hashes: 1: IW4UMOXDDg0jp10HDbeJi5CEl5k.crl (hash: ZiuKNgNBz7DRifVUdVMSolkj50wM8grKN+3dX9WNGSg=)
2: ACD444282EC911EB99EC263DC4F9AE02.roa (hash: rCKXyCh+EMd4ulOOsHCpQ92EvtiU4kyrN3RmnguBNlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl
rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2120 (0x848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A5B5, serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
Validity
Not Before: Mar 1 23:22:25 2026 GMT
Not After : Mar 8 23:22:25 2026 GMT
Subject: CN=69a4ca32-e06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:ef:4a:1d:a0:be:f4:21:23:59:da:a6:32:
61:f9:bd:b0:05:58:64:8d:61:7f:e8:13:6c:de:55:
10:23:96:21:4a:88:2b:f9:7a:4a:e5:e3:c7:d1:23:
81:2c:9e:25:e2:e3:1b:0b:cd:ce:e9:fa:3d:e1:2f:
98:94:bc:af:b3:c8:02:1e:90:f4:e4:20:36:b2:d3:
4d:5c:d7:6b:ad:46:03:0d:e6:fd:86:ce:9f:25:f5:
66:2a:3a:66:cd:c8:4f:c7:88:93:6c:b7:e4:85:01:
5e:9f:e9:ac:02:01:14:17:26:f6:f3:0b:e0:19:56:
05:c0:3a:35:df:c4:7c:06:46:0b:0d:99:b1:69:f9:
65:48:f7:60:2f:92:e7:b3:02:68:43:26:e3:2e:3e:
cd:99:f4:8a:64:36:cc:87:02:1a:cb:ad:d5:e1:5b:
03:10:39:f6:5e:a6:e3:8a:46:71:c7:78:0b:a0:71:
d8:fc:b0:ff:d2:d3:a0:2f:30:e3:3c:5c:9b:04:5d:
a1:d7:29:af:58:23:9c:c3:1a:ba:1f:c1:7a:6a:1a:
b4:b4:78:7b:b5:3c:af:4c:c2:c3:68:8a:fe:65:b2:
cf:d0:8b:dc:06:69:12:7a:2e:7e:81:78:d9:4f:c5:
56:93:28:74:23:0f:d0:49:31:cb:70:f3:00:62:07:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3B:43:C3:3D:F9:BF:8B:19:68:5E:32:9D:21:89:D2:B4:C5:1E:C2
X509v3 Authority Key Identifier:
keyid:21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:0b:7a:d4:94:54:8e:3b:0d:fa:76:46:bd:ad:1d:cd:52:93:
b1:5a:a6:83:c7:69:4e:ac:eb:72:79:2f:28:94:ad:18:00:a5:
d9:0f:df:d8:b6:57:0d:cc:c8:24:e0:9b:0f:aa:8f:9e:1b:29:
c3:f1:4e:86:5e:a2:62:08:40:7b:75:ba:54:2e:40:51:66:d9:
d8:fa:9e:07:79:e8:7d:ee:61:41:4a:96:c6:93:f1:6c:37:c8:
3f:d6:48:c2:8e:c6:ed:4e:a8:f1:0b:c1:2c:84:ac:86:ea:96:
08:69:e0:b9:23:5a:eb:c7:f7:7c:0b:e8:e0:b4:06:7b:c8:85:
6d:85:f0:3f:23:67:2b:d8:85:19:49:3e:7b:7a:9d:ff:fb:1f:
e8:c8:3a:d6:38:67:2e:38:93:9e:d3:44:cf:4e:f2:59:41:0d:
f6:12:0c:92:79:b9:8f:74:af:b8:74:ea:a9:fc:87:9b:fb:c6:
d1:ae:98:4b:52:8e:8a:db:3a:e5:08:6b:df:50:4d:26:75:19:
db:fb:66:42:08:a2:fb:79:a2:e2:52:fb:f8:e9:9d:c3:32:40:
6b:64:b3:ab:bc:08:65:21:70:7f:41:37:ea:15:52:72:5e:cb:
55:21:e6:f1:8e:ce:ef:21:01:f1:4f:1c:ea:76:84:fb:8d:f7:
52:d0:67:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE1QjUxMTAvBgNVBAUTKDIxNkUxNDMwRTVDMzBFMEQyM0E3NUQwNzBEQjc4OThC
OTA4NDk3OTkwHhcNMjYwMzAxMjMyMjI1WhcNMjYwMzA4MjMyMjI1WjAYMRYwFAYD
VQQDEw02OWE0Y2EzMi1lMDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1BrvSh2gvvQhI1napjJh+b2wBVhkjWF/6BNs3lUQI5YhSogr+XpK5ePH0SOB
LJ4l4uMbC83O6fo94S+YlLyvs8gCHpD05CA2stNNXNdrrUYDDeb9hs6fJfVmKjpm
zchPx4iTbLfkhQFen+msAgEUFyb28wvgGVYFwDo138R8BkYLDZmxafllSPdgL5Ln
swJoQybjLj7NmfSKZDbMhwIay63V4VsDEDn2XqbjikZxx3gLoHHY/LD/0tOgLzDj
PFybBF2h1ymvWCOcwxq6H8F6ahq0tHh7tTyvTMLDaIr+ZbLP0IvcBmkSei5+gXjZ
T8VWkyh0Iw/QSTHLcPMAYgeeeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCc7Q8M9
+b+LGWheMp0hidK0xR7CMB8GA1UdIwQYMBaAFCFuFDDlww4NI6ddBw23iYuQhJeZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTVCNS81ODNDQzRENDAz
QkUxMUVCQTY0OTIyMEJDNEY5QUUwMi9JVzRVTU9YRERnMGpwMTBIRGJlSmk1Q0Vs
NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lXNFVNT1hERGcwanAxMEhEYmVKaTVDRWw1ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTVCNS81ODNDQzRENDAzQkUxMUVCQTY0OTIyMEJDNEY5QUUwMi9JVzRVTU9YRERn
MGpwMTBIRGJlSmk1Q0VsNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGQt61JRUjjsN+nZGva0dzVKTsVqmg8dpTqzrcnkvKJStGACl2Q/f2LZXDczI
JOCbD6qPnhspw/FOhl6iYghAe3W6VC5AUWbZ2PqeB3nofe5hQUqWxpPxbDfIP9ZI
wo7G7U6o8QvBLISshuqWCGnguSNa68f3fAvo4LQGe8iFbYXwPyNnK9iFGUk+e3qd
//sf6Mg61jhnLjiTntNEz07yWUEN9hIMknm5j3SvuHTqqfyHm/vG0a6YS1KOits6
5Qhr31BNJnUZ2/tmQgii+3mi4lL7+OmdwzJAa2Szq7wIZSFwf0E36hVScl7LVSHm
8Y7O7yEB8U8c6naE+433UtBnog==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:20 2026 by rpki-client