
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
File: iWAvTEQ-2KQOCJEYmHawJXdMdow.mft (raw, json)
Hash identifier: d68R9TeGfxqu9xn20U+fE7pXkbviHdXHOp7WKcBzYTY=
Subject key identifier: 58:E4:D8:CA:4C:65:63:BB:01:EA:54:0E:F9:B4:8B:A2:EA:C8:43:4C
Authority key identifier: 89:60:2F:4C:44:3E:D8:A4:0E:08:91:18:98:76:B0:25:77:4C:76:8C
Certificate issuer: /CN=A91E1EC0/serialNumber=89602F4C443ED8A40E0891189876B025774C768C
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWAvTEQ-2KQOCJEYmHawJXdMdow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
Manifest number: 13
Signing time: Mon 27 Jul 2026 11:26:16 +0000
Manifest this update: Mon 27 Jul 2026 11:26:15 +0000
Manifest next update: Mon 03 Aug 2026 11:26:15 +0000
Files and hashes: 1: iWAvTEQ-2KQOCJEYmHawJXdMdow.crl (hash: SdjS6grynt/tYNtw0KKzlOcX+X/0GEciEmgBMYX3ZPg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.crl
rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWAvTEQ-2KQOCJEYmHawJXdMdow.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:26:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1EC0, serialNumber=89602F4C443ED8A40E0891189876B025774C768C
Validity
Not Before: Jul 27 11:26:15 2026 GMT
Not After : Aug 3 11:26:15 2026 GMT
Subject: CN=6a674057-16e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:c6:63:b1:df:6c:50:60:a6:af:42:88:9f:
ff:97:a8:4c:77:e8:95:a2:73:fd:60:a0:79:43:0f:
89:28:e2:8d:c4:29:7a:f8:ec:d6:5d:47:41:28:da:
5b:75:0e:1b:5d:c9:66:fb:16:4d:6b:5f:f1:34:dc:
5a:b0:19:38:e2:54:10:67:8f:30:f5:eb:6f:26:3d:
77:37:5b:56:01:24:e2:ff:80:72:5f:e1:3f:cd:b9:
d6:e6:5b:33:34:05:0d:b3:a5:3f:21:fc:82:50:81:
4c:81:83:96:84:22:a0:28:22:3c:8e:e6:df:70:8b:
ef:06:b9:66:1d:97:dd:f3:6a:ef:36:fe:82:87:cd:
04:3d:48:71:57:78:c0:91:9e:3e:4c:9b:6d:71:59:
c3:4a:df:e0:ab:86:bb:28:a9:b0:20:c1:d5:6d:fa:
72:c9:5a:fe:ac:b9:28:19:57:06:bf:d7:03:27:81:
04:49:1c:52:74:23:f9:7e:d1:7c:88:54:58:b3:c6:
47:22:01:4c:5b:47:bb:d9:af:3c:79:c9:a8:92:ff:
86:70:06:43:82:78:33:63:bd:9b:c3:89:2f:b7:c7:
ad:13:f3:d9:d3:c1:5b:0d:48:ee:95:9d:83:46:fa:
be:be:88:60:89:f5:1f:3c:23:7b:53:0b:cc:05:1b:
43:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E4:D8:CA:4C:65:63:BB:01:EA:54:0E:F9:B4:8B:A2:EA:C8:43:4C
X509v3 Authority Key Identifier:
keyid:89:60:2F:4C:44:3E:D8:A4:0E:08:91:18:98:76:B0:25:77:4C:76:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWAvTEQ-2KQOCJEYmHawJXdMdow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2f:4f:c6:18:b0:92:e2:3f:2c:65:b3:2f:0d:1e:a9:eb:93:
5d:4a:5d:bc:e5:6b:ea:61:82:21:8e:b8:0a:47:22:3a:db:0b:
62:13:e2:a9:8b:07:97:b6:c8:24:f8:8a:bd:1f:87:25:f9:ea:
05:6b:44:26:19:0b:b8:6d:53:12:6c:c9:ac:9b:48:c9:fa:25:
45:a3:32:f4:4e:d8:e1:94:79:61:a5:5b:f0:2d:2c:2c:f3:8d:
9f:c2:64:3c:9c:34:15:1d:40:09:70:20:a1:ad:2b:a7:1d:b9:
2a:f6:5e:aa:58:4b:9c:93:0a:7e:41:a6:bb:e2:26:59:74:97:
63:a1:64:0b:d5:00:8b:2d:7a:e0:b9:80:39:21:32:27:49:d8:
b4:57:f6:24:57:eb:4d:ce:15:79:a2:d3:e8:74:b6:1a:57:1c:
f2:47:ac:1c:d5:d5:b9:0c:4d:f5:d8:b2:b6:47:ee:c9:28:31:
3c:e0:ce:c8:9c:35:ad:1b:d2:72:38:5d:f0:e7:d8:87:41:71:
55:1a:52:08:c4:47:ae:69:35:48:79:4b:19:7a:e7:98:ed:d2:
a8:69:ca:86:c9:62:51:90:e6:95:cf:a9:19:e6:32:23:f0:34:
b6:ef:10:fa:f6:6a:72:8e:bd:f6:c2:1e:9f:c5:2a:4f:67:11:
44:a1:cd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:01:20 2026 by rpki-client