
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
File: Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json)
Hash identifier: ARGSNUloF0+CB0n49nPeaa3IVutPazncgqbXzbXMFJ4=
Subject key identifier: 5F:72:A2:D4:E0:F3:E7:85:25:23:AF:7C:3F:A4:27:68:DD:B7:5C:44
Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
Certificate issuer: /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Certificate serial: 07CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
Manifest number: 07B8
Signing time: Sat 04 Apr 2026 21:14:38 +0000
Manifest this update: Sat 04 Apr 2026 21:14:38 +0000
Manifest next update: Sat 11 Apr 2026 21:14:38 +0000
Files and hashes: 1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: lrnm9YX6ShHCvZ4J0Bdz9NORhWl6ohGIeZS/o/5euZs=)
2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: yigo59Gar+8S1aiuGB+d0Lm9hAb5K16jebQb9hDYj9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:14:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1998 (0x7ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Validity
Not Before: Apr 4 21:14:38 2026 GMT
Not After : Apr 11 21:14:38 2026 GMT
Subject: CN=69d17f3e-057b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:5a:db:0b:16:91:d7:b6:91:bd:58:9f:22:
af:8b:90:5f:45:8d:ed:95:af:30:d9:51:91:ca:33:
8e:6e:f1:7a:04:e3:17:f9:86:5d:8d:51:00:3e:69:
48:13:75:b6:45:b4:b3:5c:49:76:fb:a2:5f:ae:e4:
5a:fb:62:c3:5b:e1:7c:4a:d2:32:56:83:ab:de:60:
5f:76:01:c7:ba:29:92:3c:10:52:ea:81:a1:01:d9:
5c:e3:a3:ab:e6:37:4c:c1:e6:43:bf:6a:ac:88:34:
a7:a1:5f:94:cf:aa:2a:94:64:1d:79:49:03:37:09:
e4:a9:71:69:2a:c6:60:68:4c:df:b6:0b:35:a0:1c:
82:06:dd:84:b3:d5:c1:e6:4f:b0:52:ee:44:ed:c3:
5d:bd:a1:80:34:c2:82:49:4e:a6:ea:ba:c9:ab:58:
9b:e7:b3:ab:c6:e3:f6:da:8c:85:ce:8d:26:cb:e9:
e3:19:54:d1:94:58:fe:f2:bc:5f:a6:21:4d:df:ef:
bf:56:c2:80:8e:b0:23:e6:e3:15:33:05:80:42:1e:
1a:15:e6:6d:21:48:e3:68:03:db:d7:65:de:86:ed:
7d:c0:2c:ed:a7:c2:ea:59:73:25:b1:01:52:74:e3:
bb:9d:43:7f:d2:ba:3a:d0:d9:d5:eb:db:fb:d4:f9:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:72:A2:D4:E0:F3:E7:85:25:23:AF:7C:3F:A4:27:68:DD:B7:5C:44
X509v3 Authority Key Identifier:
keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ed:10:89:a7:ed:e9:6c:b7:0d:60:18:a0:c2:58:ef:df:f1:
27:a4:cd:06:e1:72:ea:05:e3:4e:43:3d:78:46:32:3e:c3:a6:
d5:98:41:65:03:26:5a:6a:cd:4f:b9:d0:b9:82:54:11:24:79:
d7:d8:e2:68:a3:bc:84:2b:ef:6a:c7:b4:5b:7c:1c:70:82:27:
74:de:fe:31:b0:62:23:3c:ac:37:cd:34:ac:88:42:ed:ec:19:
11:9c:b6:ba:d6:ea:15:87:b2:4b:5c:69:4a:8f:fe:4d:cd:91:
ba:0e:08:60:42:b8:c3:b6:f7:19:6d:39:47:bb:d8:d9:3e:ad:
29:f2:00:cb:25:25:8e:ff:ac:ea:36:ab:25:11:7b:67:fe:2a:
fb:66:db:00:ba:76:2b:56:43:8b:5a:c5:ea:d0:ff:ea:81:08:
3f:8a:bb:3b:6b:bc:90:9b:2b:62:8a:da:93:9e:90:70:33:3d:
ba:b3:64:62:66:0d:e3:a6:f6:bd:53:07:2c:44:8b:30:b5:65:
0c:7d:aa:56:dc:d3:03:bb:9f:11:fe:26:17:d7:4e:82:10:e6:
f5:36:73:92:1d:4f:13:21:1c:bb:6e:65:e6:06:55:54:00:0d:
98:da:18:aa:6a:62:15:b1:33:cf:0b:27:03:f0:15:ba:24:3f:
2b:83:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:10 2026 by rpki-client