
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
File: IW4UMOXDDg0jp10HDbeJi5CEl5k.mft (raw, json)
Hash identifier: KEwj2CVlsqNKxSe9j81oc9J/1pHAKmS9vCI9Mt6t670=
Subject key identifier: 1F:A1:E9:39:D9:24:39:26:52:B1:D2:8A:AB:DD:2D:12:7F:9B:0A:9F
Authority key identifier: 21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
Certificate issuer: /CN=A919A5B5/serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
Certificate serial: 08B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
Manifest number: 08A3
Signing time: Tue 22 Sep 2026 20:26:28 +0000
Manifest this update: Tue 22 Sep 2026 20:26:27 +0000
Manifest next update: Tue 29 Sep 2026 20:26:27 +0000
Files and hashes: 1: IW4UMOXDDg0jp10HDbeJi5CEl5k.crl (hash: +usDok3AvyO/3Z8wQ6+zxXhSbp79w0JvrZgAxNysy0M=)
2: ACD444282EC911EB99EC263DC4F9AE02.roa (hash: rCKXyCh+EMd4ulOOsHCpQ92EvtiU4kyrN3RmnguBNlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl
rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:26:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2225 (0x8b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A5B5, serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
Validity
Not Before: Sep 22 20:26:27 2026 GMT
Not After : Sep 29 20:26:27 2026 GMT
Subject: CN=6ab2e474-b943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bd:7e:5e:2e:ae:02:c1:5e:95:6f:fd:ee:93:
92:5b:15:f6:fd:f1:d6:ef:a1:6a:c0:6f:d5:97:c4:
b7:c5:81:0d:18:d7:ba:c3:48:80:01:52:11:bb:bd:
67:ba:0a:68:4b:fd:ed:36:8f:8d:13:e1:f2:aa:0a:
a2:0f:af:c5:0d:34:4f:b8:9d:0c:4c:1e:3a:2e:4c:
49:aa:d2:a0:12:e1:7d:12:8b:2f:a1:2e:48:f6:f3:
ae:8b:b2:f2:20:4f:57:43:9a:fc:0e:23:ab:81:63:
29:7a:b2:09:f6:82:94:ae:33:7c:3a:76:9d:4c:4c:
b0:91:e6:10:1f:d5:89:4c:70:38:1d:f9:8a:71:f2:
fc:76:3e:44:e1:35:85:ba:d7:29:d6:a0:53:fb:da:
01:84:02:3a:3d:7c:9a:81:45:75:8f:96:45:e9:a4:
3c:03:ef:f7:db:6a:f2:2a:87:4d:3c:60:f6:17:a3:
c6:08:36:90:5a:25:66:84:bb:fc:77:3a:57:9c:8b:
87:9f:53:b3:fd:e7:19:00:2c:52:06:cf:17:3a:26:
5e:7c:34:24:81:d3:58:ba:bd:95:79:d8:40:33:f3:
ac:4d:11:45:47:59:87:46:03:18:9d:66:42:3d:cd:
99:db:4c:f0:20:ad:c0:72:c9:2d:db:a8:39:e8:35:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A1:E9:39:D9:24:39:26:52:B1:D2:8A:AB:DD:2D:12:7F:9B:0A:9F
X509v3 Authority Key Identifier:
keyid:21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6f:88:e0:1a:4a:8d:ff:b8:4e:12:88:4c:1c:4f:87:31:75:
f2:67:32:4a:11:ed:51:e9:de:a0:05:2e:dc:b2:71:25:55:e7:
fc:c2:0e:59:92:8b:dd:18:74:91:d4:0e:c4:5c:77:f0:f5:4f:
6a:b4:23:bf:dd:c7:18:b4:cb:4f:eb:28:17:98:34:d6:c4:a6:
2e:18:d3:58:75:eb:10:c3:86:1c:a5:f7:93:f8:a1:ef:a0:c7:
79:cf:02:23:08:28:60:3a:27:8e:c6:f4:5d:0b:d1:87:41:ad:
45:23:b2:fa:c3:12:0b:af:8e:2f:ef:14:a5:2c:72:80:e3:19:
36:f8:e7:b0:36:7b:2e:cd:d6:dc:76:36:3b:5f:43:be:b6:5f:
84:c5:dd:95:e7:c5:e1:08:87:be:56:b8:72:a2:9f:4e:27:4f:
8c:5e:04:d9:06:04:0e:21:a2:b4:af:ba:e8:08:91:29:a7:10:
f3:0d:21:b8:fc:27:e7:7d:fe:04:8b:c3:2f:20:6f:45:e1:54:
b7:f9:76:10:3a:d3:d1:27:ad:ea:b0:a3:56:ef:ed:dc:51:bf:
d2:3f:b0:ae:c8:b4:31:ca:80:ea:df:d7:cc:84:0d:a1:26:5c:
4e:7c:64:e4:4c:76:fc:c6:53:62:cc:35:47:2a:c3:b5:05:63:
00:a8:df:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:41:46 2026 by rpki-client