
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/iUAMAppc0ng4IgyaqX_GE2OiL-I.mft
File: iUAMAppc0ng4IgyaqX_GE2OiL-I.mft (raw, json)
Hash identifier: q1WlGXy2qecs1iyKCRxmFNAhKpqWw/UPbIMYE4dc/uE=
Subject key identifier: B5:22:1B:D2:CB:B5:FB:66:90:78:A0:F9:71:8B:9A:F0:2C:18:1F:63
Authority key identifier: 89:40:0C:02:9A:5C:D2:78:38:22:0C:9A:A9:7F:C6:13:63:A2:2F:E2
Certificate issuer: /CN=A9113A22/serialNumber=89400C029A5CD27838220C9AA97FC61363A22FE2
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUAMAppc0ng4IgyaqX_GE2OiL-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/iUAMAppc0ng4IgyaqX_GE2OiL-I.mft
Manifest number: 0117
Signing time: Sat 03 Oct 2026 06:45:13 +0000
Manifest this update: Sat 03 Oct 2026 06:45:12 +0000
Manifest next update: Sat 10 Oct 2026 06:45:12 +0000
Files and hashes: 1: iUAMAppc0ng4IgyaqX_GE2OiL-I.crl (hash: 72k55QTvgxax4Fdoro3/2dt+tZKd9ze9BAmBWUv7HkY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/iUAMAppc0ng4IgyaqX_GE2OiL-I.crl
rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/iUAMAppc0ng4IgyaqX_GE2OiL-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUAMAppc0ng4IgyaqX_GE2OiL-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:45:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113A22, serialNumber=89400C029A5CD27838220C9AA97FC61363A22FE2
Validity
Not Before: Oct 3 06:45:12 2026 GMT
Not After : Oct 10 06:45:12 2026 GMT
Subject: CN=6ac0a479-13d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:51:d0:f0:0c:cd:39:21:8f:8a:67:42:b0:2c:
7e:a6:21:eb:30:5a:cf:b2:ad:c1:6f:5d:38:72:79:
09:3e:6f:cf:d2:aa:c3:e2:e4:2f:95:20:da:34:35:
18:58:38:76:d3:ba:f5:f1:48:f1:ec:c4:65:fa:d5:
37:b1:23:d5:3b:b4:17:11:5b:a3:b2:ca:45:bb:85:
ca:ef:78:97:e2:4c:16:1a:78:bc:2c:f0:a1:cd:ae:
04:29:0e:5e:b1:c4:27:ed:bc:2b:cd:16:81:82:67:
c5:72:2b:d2:64:84:22:95:78:ad:af:66:e4:77:8e:
6b:83:d3:e1:17:4e:bd:c2:f1:15:19:6d:cf:02:15:
73:75:ce:8b:0d:12:04:35:e6:db:50:a7:93:4a:76:
50:37:9c:c5:d4:e5:c1:b5:84:ce:da:cf:6e:b2:7f:
08:50:0e:ad:17:a9:24:c3:76:56:fc:c9:08:96:95:
4d:2c:f7:de:04:63:7c:25:6b:ef:77:c4:20:86:f1:
6d:71:18:d0:de:12:59:8d:60:a6:d8:b1:33:9b:84:
0a:e5:ab:19:d9:5c:6f:a4:01:9d:e2:bf:52:40:cd:
fa:57:66:bf:ec:bc:dd:d9:7a:2b:77:46:0f:10:57:
87:af:af:9d:d3:aa:77:d5:b5:0e:d8:ae:90:9c:65:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:22:1B:D2:CB:B5:FB:66:90:78:A0:F9:71:8B:9A:F0:2C:18:1F:63
X509v3 Authority Key Identifier:
keyid:89:40:0C:02:9A:5C:D2:78:38:22:0C:9A:A9:7F:C6:13:63:A2:2F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/iUAMAppc0ng4IgyaqX_GE2OiL-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUAMAppc0ng4IgyaqX_GE2OiL-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/iUAMAppc0ng4IgyaqX_GE2OiL-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:52:11:1f:bc:a1:ba:e7:15:64:49:1c:c4:32:15:62:a9:3e:
e7:66:60:6e:4f:6f:36:ee:fe:09:6b:ba:6a:67:4d:33:c4:c0:
8d:70:ee:76:45:4b:ee:36:87:0c:27:bb:28:14:81:bc:93:e5:
cc:32:50:ad:94:ce:35:0a:0d:94:75:23:b7:7e:7c:45:29:68:
4c:f0:5c:c5:e2:fe:70:17:ee:b8:34:e8:6e:e1:42:a3:b9:0a:
61:cb:19:2f:31:3a:a3:27:0e:27:34:0c:da:37:5c:a2:59:43:
a6:a0:4d:ed:fb:d8:43:2c:4d:61:d0:38:0b:84:e4:1c:82:29:
55:fc:11:95:64:fd:ec:43:b4:d8:83:9a:b7:34:03:4f:1e:ca:
e9:cb:4a:6b:93:a6:7a:f8:7b:ba:06:a0:5c:cd:5d:ab:40:29:
e3:c6:0f:ba:3d:32:f1:54:40:88:a2:0d:46:f5:e2:50:5e:69:
94:0b:e2:07:18:c9:9d:51:cf:94:89:fe:11:81:4f:94:63:d4:
db:b0:f8:9b:90:36:b8:fb:b0:fd:0f:1e:08:fc:12:d4:a9:87:
f6:c1:65:83:90:06:39:31:f4:95:80:12:2d:87:d4:b7:fe:14:
fc:6d:2c:74:37:a9:9a:1a:93:cd:ab:a7:e4:ca:d6:a8:05:20:
5a:9e:5b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:37:06 2026 by rpki-client