
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
File: iEiqzfKVEwPnCY9BnYygBCKJDGk.mft (raw, json)
Hash identifier: uL6SDLqlQbpBJoCMn45wRiFSXz3zbv+UkwgxoMCzfeg=
Subject key identifier: C7:22:F2:53:9C:96:E2:8D:80:A6:A8:3C:FB:F6:C9:27:B4:8B:E2:5E
Authority key identifier: 88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69
Certificate issuer: /CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69
Certificate serial: 015F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
Manifest number: 014E
Signing time: Mon 27 Jul 2026 07:15:23 +0000
Manifest this update: Mon 27 Jul 2026 07:15:22 +0000
Manifest next update: Mon 03 Aug 2026 07:15:22 +0000
Files and hashes: 1: iEiqzfKVEwPnCY9BnYygBCKJDGk.crl (hash: BgW/8shogtun2S+1luYFtP5g8gIurTPs7Hm3p4Yuhdc=)
2: 029310329B1911EFA0BD6470C4F9AE02.roa (hash: sF4XH0IQ21oQ8m5K9x+3vDfpTIdkfnTIhVS8Hca4fYI=)
3: 07BAAB7C9B1611EFB5C28465C4F9AE02.roa (hash: 56jPZ3sozg97+OIj6pG3u2XuGIaHvsmkzxKJ4TjEACM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl
rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351 (0x15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8047, serialNumber=8848AACDF2951303E7098F419D8CA00422890C69
Validity
Not Before: Jul 27 07:15:22 2026 GMT
Not After : Aug 3 07:15:22 2026 GMT
Subject: CN=6a67058b-3498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:2e:08:1e:14:f1:07:ad:3b:9d:db:ce:50:
c6:28:f0:53:b5:f7:da:4f:a4:26:72:9b:58:18:8b:
e7:d7:44:16:4c:a0:e9:fa:8c:ca:a1:2a:34:f2:d8:
5f:cd:8c:e0:8e:3a:95:33:c1:d6:88:a5:7b:e4:90:
29:18:d6:06:53:3d:64:ec:11:47:c2:07:2c:b5:b1:
5b:7e:e2:34:b9:45:e9:2f:a3:5b:79:af:1b:fb:52:
89:83:2c:46:73:04:e0:e7:ca:72:aa:26:19:a9:dc:
3c:ad:2c:94:2b:50:02:ae:d8:65:2e:38:78:3f:e9:
b6:64:62:75:23:c1:29:ba:3f:56:b8:83:e9:02:95:
c9:60:68:c5:21:09:db:c6:2f:75:63:da:0b:2e:b4:
33:8e:d1:40:5b:90:69:d0:f3:e3:f9:bd:25:2e:f9:
7d:d6:2d:61:c2:54:d3:9d:ba:21:8a:9b:96:53:c9:
90:1f:eb:be:f9:40:25:2c:3d:ea:db:ea:96:9a:20:
b4:d3:94:75:59:16:e1:02:7e:c6:df:7e:57:fa:50:
ac:45:0a:e1:04:5a:46:32:fd:57:a4:78:03:e1:00:
aa:5e:04:4a:a8:fa:0b:4a:70:86:14:c0:df:5f:cb:
52:4b:ea:3b:5b:c9:7e:5b:d8:85:27:c3:f1:25:dd:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:22:F2:53:9C:96:E2:8D:80:A6:A8:3C:FB:F6:C9:27:B4:8B:E2:5E
X509v3 Authority Key Identifier:
keyid:88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:25:64:d9:35:63:19:97:9b:4f:5b:86:a1:e6:a0:c1:fd:7f:
b3:3a:96:a1:c5:c9:83:c9:68:55:70:82:91:bf:1e:87:14:31:
dc:b2:f2:cf:13:36:84:54:0b:5b:23:03:20:4d:e0:11:7a:85:
5a:20:54:eb:3b:19:9e:ec:47:9a:77:54:12:5b:cb:b9:d5:6a:
7b:69:24:1b:41:2c:e1:4b:2b:3c:96:0b:05:36:e3:1d:4d:0b:
e1:c7:0b:c1:26:1b:ca:55:6d:a1:57:50:d6:90:e3:3e:36:32:
0b:b6:e7:6f:f6:ee:9b:a7:9a:08:67:de:e6:a4:db:51:c2:84:
eb:61:8a:3e:80:16:17:3b:93:63:14:ce:19:95:16:a1:3e:ac:
03:58:46:06:15:74:f6:01:05:35:b2:74:5b:c0:d9:f9:05:bb:
20:41:b9:2a:9f:38:41:30:cf:be:e0:5d:6d:a9:ae:94:c7:f3:
b5:3e:12:6b:d5:44:10:71:19:5a:b9:14:8a:7d:56:16:b5:96:
c7:ec:a2:f6:02:0d:1b:7d:3e:a7:f3:8c:31:c2:b0:4c:a0:8a:
65:18:5e:d2:4b:e2:18:4b:39:52:50:07:1c:7f:c7:cb:01:f9:
88:47:12:6f:46:72:9c:37:66:59:8e:4f:fe:d7:bf:b9:5d:ed:
ea:5e:63:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:23:51 2026 by rpki-client