
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
File: Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json)
Hash identifier: UeK7T3vjipvsGlz2NjGeVod0XEP6t0P2H7BZlU6osRg=
Subject key identifier: 0A:4D:8A:A5:7E:4E:A1:FC:1F:5C:DB:7E:5C:A4:FE:4F:B3:66:EE:CD
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial: 0579
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
Manifest number: 052E
Signing time: Sat 24 Oct 2026 23:41:32 +0000
Manifest this update: Sat 24 Oct 2026 23:41:31 +0000
Manifest next update: Sat 31 Oct 2026 23:41:31 +0000
Files and hashes: 1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: jKntiMXTsmBSAl/CrDlYdTgywyuKkqlwXr9wkA9D6GE=)
2: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: ddJzWQzhPMRW8RWCPYnqPYLIbALxTv96n4V/wf2N7x8=)
3: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: UCg4wJkvMAwrQhdPO9e6tz9kKiLqe8tkbkp5RwOBI9k=)
4: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: ErPhHuDK3ekByL6ifWQZAzFYI/duFVOlJelFvK4aMbc=)
5: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: sK7hOQtBbdjqCpDICxDk4yk4JTjSJi8T3sqSf4Lha9w=)
6: 4B44D6EC0F3C11F1BF24A2AC1C3D8C67.roa (hash: p+BwKAodmJqbLlqXyZtD+mJHN7NUdRLLCP8+RPEq8R4=)
7: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: u+MRGHbFeFUPlLfGYwJEnpOiyClJtJ0KRuVBvJpUNDk=)
8: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: 2QtjnY/xrXLEykN5W8u+hPxfRcseLCmC+14qCL2SI+w=)
9: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: J/y5zeodGHbN3vp7O7AJhQI6RPkj8TQkWk7gr7sHHCA=)
10: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: 3Nhpzz36VSFEHxJya2rE/6rzHTYaQVksxEeUha/irsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 23:41:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1401 (0x579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Validity
Not Before: Oct 24 23:41:31 2026 GMT
Not After : Oct 31 23:41:31 2026 GMT
Subject: CN=6add422c-ee64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:4c:a4:27:c0:e8:bf:8b:89:7b:c2:e5:cb:
5e:51:b4:bd:25:01:e6:e9:d7:da:39:cd:5f:39:94:
c2:a2:76:34:2e:a4:76:03:ae:b5:60:af:30:96:83:
28:e9:2d:9e:38:8b:69:0e:ec:94:30:4f:03:79:b1:
4d:e2:8d:4c:72:21:29:dc:d9:72:5f:c7:82:57:25:
29:55:17:ed:f6:bf:29:17:fc:14:f2:92:29:48:10:
ab:c2:25:b8:b2:c9:80:70:8d:0a:3c:ef:3e:a4:c6:
9f:43:c7:c1:9d:30:a8:01:5a:66:8d:e2:b2:b6:f7:
e2:2a:11:3d:23:0c:3a:cb:71:d5:f7:d9:19:47:71:
6a:79:07:c8:4f:2a:13:89:bf:a4:65:76:94:5f:ca:
25:17:a3:26:8e:e9:f8:ff:ee:14:44:e6:38:8e:d5:
e3:25:84:e5:20:b8:cb:cc:fd:62:35:e0:df:b8:ed:
60:ba:6e:dd:bb:53:91:c2:4c:74:c5:7f:c2:64:5f:
fa:61:9f:b3:d3:fb:10:ee:82:b1:f9:af:a0:dc:7e:
f0:ef:71:3d:1b:b1:1a:36:a5:f6:27:b8:ae:34:91:
c2:ac:23:e1:8c:0b:a3:68:28:76:8d:a6:e4:07:9b:
4d:3a:95:04:b1:6f:cf:1b:73:ad:b8:87:4c:3e:5d:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4D:8A:A5:7E:4E:A1:FC:1F:5C:DB:7E:5C:A4:FE:4F:B3:66:EE:CD
X509v3 Authority Key Identifier:
keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:2b:ca:d8:0b:b6:91:30:69:7f:53:18:b7:00:5e:42:e0:47:
b2:60:ce:94:4a:47:e9:67:e6:6d:91:69:59:3b:a2:6e:2e:b4:
a5:ef:92:18:e8:8f:77:42:86:21:56:b0:23:ee:91:fd:7a:2b:
ed:b7:02:f6:e9:2e:c6:5d:bc:86:1f:c9:9a:ad:0a:c7:d4:66:
4d:0d:af:a8:b1:95:bb:e9:4a:ac:1b:49:8d:ff:70:05:45:23:
31:15:ed:59:11:d4:c9:37:5a:93:c9:cc:39:64:3a:79:a7:1c:
43:47:45:0c:5f:b3:bb:8c:f6:3b:73:0d:09:aa:76:9c:69:b6:
7c:cb:3c:50:1b:f2:f1:1a:88:95:c9:1e:10:af:0b:1c:99:38:
ff:97:58:3c:bd:c8:75:cf:af:b0:13:e5:1f:25:31:b0:5b:e3:
74:01:fa:11:f4:c2:79:3d:81:b8:11:53:de:9b:1f:89:5a:1c:
d1:4f:44:5b:a7:ad:e9:cd:2a:44:c0:62:e2:fa:e3:a3:73:a1:
ae:63:a3:11:a9:c5:7f:d0:4e:ab:da:f4:d4:91:7a:23:51:7c:
6d:ce:16:f5:f9:6a:8c:68:55:81:67:03:23:32:4a:ec:a9:08:
a2:a4:31:f7:ac:c1:c8:a8:6d:72:1b:99:7a:87:d6:92:29:0d:
e0:d4:b5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:59:41 2026 by rpki-client