
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
File: iWZCPuKkFWMfevMU5NiEAHqEaLY.mft (raw, json)
Hash identifier: TfqNuHO2iOhwEszxYUk/c0tMQAe0DK9l9Nz2qY/+Mig=
Subject key identifier: BC:35:97:8B:55:76:28:17:D4:04:47:8B:EF:BD:F3:DF:D7:CA:93:D8
Authority key identifier: 89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6
Certificate issuer: /CN=A91A91CB/serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
Manifest number: 012F
Signing time: Wed 23 Sep 2026 05:27:55 +0000
Manifest this update: Wed 23 Sep 2026 05:27:54 +0000
Manifest next update: Wed 30 Sep 2026 05:27:54 +0000
Files and hashes: 1: iWZCPuKkFWMfevMU5NiEAHqEaLY.crl (hash: Hx4FDznHy7/8s0Y/NJVq9+rKcuiABnqJtQQkipiMR68=)
2: 0EB302DCEA5B11EFABB07C6DC4F9AE02.roa (hash: yxcEwj+JBBXiVTX+aFQc5ddxq/vEi232S7B1rwDfWO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl
rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:27:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A91CB, serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
Validity
Not Before: Sep 23 05:27:54 2026 GMT
Not After : Sep 30 05:27:54 2026 GMT
Subject: CN=6ab3635b-9c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:71:fb:fd:5b:e1:ee:d0:94:a9:be:e6:03:2d:
b9:72:b1:fa:a5:89:75:e0:4e:31:34:2f:7b:6e:12:
76:98:08:f8:d9:ab:7d:f6:f3:d3:49:43:1f:65:51:
2e:99:03:ca:43:a7:c1:1f:ab:d2:6d:79:0d:6a:e8:
7d:05:7b:ae:20:bb:00:da:0f:70:22:3d:66:cd:6d:
11:c7:48:ed:ca:68:95:a5:98:de:6c:56:c3:bb:70:
e1:86:0e:41:42:02:cd:b1:38:17:5c:4e:50:39:cc:
d6:50:d5:a2:5d:27:3c:67:65:a6:63:4e:cb:8e:d4:
b6:23:8e:bf:69:72:96:f6:d5:20:cb:34:fd:c2:d0:
9c:f4:2f:bc:ad:ba:a4:79:68:7c:ee:87:b8:f5:93:
e4:49:75:2a:d5:77:9a:f1:73:56:d4:d9:a8:23:18:
32:81:9b:d3:2f:83:fc:e5:0a:46:e5:ec:86:51:1e:
eb:20:29:76:34:16:62:25:4b:51:b6:f9:d2:98:0c:
82:64:4e:f8:9a:4f:55:4f:b1:8c:40:c4:9c:04:84:
ce:ed:b7:3e:c2:b2:94:8c:07:39:02:80:26:ef:52:
4f:a4:5c:9a:c7:ee:6f:f5:ad:2c:0f:48:37:93:e9:
9c:6b:fd:ee:8e:0a:63:fa:ec:7e:9d:46:99:10:97:
65:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:35:97:8B:55:76:28:17:D4:04:47:8B:EF:BD:F3:DF:D7:CA:93:D8
X509v3 Authority Key Identifier:
keyid:89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7b:9a:2b:38:fa:18:24:33:ab:e6:63:d1:f4:af:31:fa:50:
18:bf:65:ad:c8:5c:85:66:14:ab:e3:4d:99:38:05:22:b2:84:
41:94:9a:d8:32:5e:2f:fb:bc:0c:5e:3b:81:f7:14:80:54:a0:
44:e4:25:6b:38:0a:8d:e8:43:2f:2e:c3:fb:4f:b2:a0:83:39:
af:a0:60:53:a6:49:e0:6f:e8:cf:d4:20:ff:fa:d5:c4:d3:07:
cb:df:be:c0:58:a4:dc:e1:97:f7:55:c7:12:2e:a5:c4:76:23:
00:64:0d:9c:71:bc:74:c2:b0:68:52:2b:70:f5:da:09:f3:c6:
ca:e6:17:48:4d:e9:c4:4d:1d:6a:2f:4b:0c:67:79:b3:cd:81:
14:9f:8d:9e:29:5a:a3:65:86:db:b1:f0:e5:9c:c2:03:45:4e:
f5:45:bf:81:4e:d9:4f:03:f7:3e:95:6e:22:8e:49:a7:b8:99:
11:49:c6:4e:e4:bb:73:c3:c0:d7:06:4d:7e:d2:b2:3b:87:49:
ae:e4:2d:38:ce:d9:bc:09:3b:c2:cd:c4:86:c4:a8:90:fa:15:
86:37:3c:2d:af:3f:ee:27:0f:26:06:92:53:33:a1:bd:95:45:
36:b3:31:47:81:de:16:85:ed:09:d5:38:c9:01:c5:2c:11:b8:
03:9d:2f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:38:42 2026 by rpki-client