
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
File: iunN4Qvgt38JGw0468GWfIvAkZ4.mft (raw, json)
Hash identifier: 2FlPnZN0fdP0BVSrd+C7PiiYp/OCsfdMLw5LBAJSikQ=
Subject key identifier: 46:07:B4:56:8A:E5:6A:CB:10:C7:24:4C:3D:CF:1D:6A:92:6A:86:4A
Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E
Certificate issuer: /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
Certificate serial: 0825
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
Manifest number: 080B
Signing time: Sun 16 Aug 2026 21:38:10 +0000
Manifest this update: Sun 16 Aug 2026 21:38:09 +0000
Manifest next update: Sun 23 Aug 2026 21:38:09 +0000
Files and hashes: 1: iunN4Qvgt38JGw0468GWfIvAkZ4.crl (hash: g42WeITEIiyD8RiIITue4eKr7MtYeCcDk4AHZIXNymA=)
2: 490CDADA42F211EBB34A1A60C4F9AE02.roa (hash: v7Fb7boRTCMwchTjW0del7sXnV2DChLpJUD5WBCHZN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl
rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 23 Aug 2026 21:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2085 (0x825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116BB8, serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
Validity
Not Before: Aug 16 21:38:09 2026 GMT
Not After : Aug 23 21:38:09 2026 GMT
Subject: CN=6a822dc1-4711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:64:a6:b1:6f:a2:2e:7e:e7:4a:e2:93:ac:
1b:d8:49:85:e6:df:c7:38:d2:6d:1e:2f:b1:85:0e:
c7:7d:3c:b8:b5:01:a8:e0:a9:2b:7a:8c:d6:14:51:
14:a0:60:57:03:be:90:76:07:64:c2:58:b4:15:5b:
e8:fe:69:9a:70:b6:52:f3:24:62:eb:e4:b3:03:48:
16:a2:0d:b8:5c:5b:49:64:03:e5:af:a8:b9:2c:ee:
c9:3c:b0:82:7f:57:64:63:39:fc:8c:e6:f2:7f:10:
49:da:c7:d7:c1:fb:39:42:bc:d7:78:53:e3:c0:63:
e9:1f:2b:e8:71:75:5a:7d:80:16:e0:ae:68:cd:d5:
18:03:d0:5f:5f:7b:f6:b1:e2:a0:79:c8:ec:2c:1d:
b7:76:3c:34:91:d9:6b:b5:d2:99:b0:8c:aa:6a:67:
e5:2d:52:00:74:96:62:79:62:e2:db:cc:e3:fc:cf:
03:5c:53:62:c9:e6:3b:9a:b3:09:2b:0d:39:fe:27:
26:ca:fa:61:34:14:fc:db:43:b4:30:e8:d4:45:2b:
35:77:19:3e:63:c2:98:de:c5:57:71:a5:d1:e9:c0:
b4:87:20:ff:6b:5f:6c:4e:a1:36:04:0d:d9:fe:eb:
e6:49:02:3f:74:33:ed:a7:1c:6a:ca:f1:19:ba:93:
be:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:07:B4:56:8A:E5:6A:CB:10:C7:24:4C:3D:CF:1D:6A:92:6A:86:4A
X509v3 Authority Key Identifier:
keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:8a:6a:21:0d:c4:ca:22:41:21:e2:92:7d:cf:c9:64:0f:90:
7a:6f:61:6d:9e:ab:9e:1e:8b:6e:cd:6d:61:c4:9f:48:5a:b7:
57:91:5b:a9:a4:65:36:7d:ff:41:06:05:7c:7f:b7:d7:17:2b:
a1:dd:ac:3c:09:4d:45:c6:d9:5d:61:8f:69:c7:bf:1a:27:bc:
88:f5:f7:78:97:84:1b:04:35:bb:8e:d9:e4:9e:5c:8c:f7:32:
e6:8a:85:9e:67:fb:74:e4:57:a6:93:fd:a7:07:64:d2:bc:8e:
e3:fc:cb:b1:19:d0:de:63:73:61:78:ec:15:8f:d9:f4:17:40:
9f:a7:77:3f:9d:b7:df:ee:2e:80:96:fe:91:d4:2c:eb:59:7e:
dc:8f:a3:e5:e5:6c:32:9c:46:21:ce:7a:ec:a0:6a:85:70:7a:
b2:cf:be:95:cf:49:ae:8c:4e:80:49:32:62:f1:56:50:04:aa:
ac:f7:16:c1:ef:33:bb:9e:be:71:2e:d1:40:3e:5c:fe:a6:04:
72:94:d8:77:59:c2:d5:6f:58:52:94:ea:c1:57:f1:25:04:34:
cb:3a:39:37:3e:1a:aa:ab:10:cb:6e:ed:25:1b:6c:63:4c:4b:
fc:c2:e0:63:c2:4c:57:ab:1f:86:a2:f1:63:1f:bc:48:5a:7a:
a9:f1:81:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 04:35:39 2026 by rpki-client