
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
File: iunN4Qvgt38JGw0468GWfIvAkZ4.mft (raw, json)
Hash identifier: 9yhxzFGXpPuJG1audtgjaZY0A2EW3JGUFMvcHw14QUM=
Subject key identifier: 71:13:EA:05:05:55:A7:48:65:A4:82:14:86:8D:45:9F:B1:68:03:8E
Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E
Certificate issuer: /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
Certificate serial: 0841
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
Manifest number: 0826
Signing time: Sun 04 Oct 2026 21:19:04 +0000
Manifest this update: Sun 04 Oct 2026 21:19:03 +0000
Manifest next update: Sun 11 Oct 2026 21:19:03 +0000
Files and hashes: 1: iunN4Qvgt38JGw0468GWfIvAkZ4.crl (hash: 4NxnXtFwCDeUogTqW16IHKhfNr8dkd+OFiM0o1mZwOk=)
2: 490CDADA42F211EBB34A1A60C4F9AE02.roa (hash: la63BA0PxQXwAwc4lMp5AyHrUtUe8vBqW+bXasUdsW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl
rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 21:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2113 (0x841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116BB8, serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
Validity
Not Before: Oct 4 21:19:03 2026 GMT
Not After : Oct 11 21:19:03 2026 GMT
Subject: CN=6ac2c2c8-5ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:9f:22:dd:d6:17:14:27:1d:fe:06:24:f4:
df:6f:3c:d5:6e:2d:5d:fd:b3:a1:0d:ef:04:fb:45:
1d:81:0b:e4:13:b6:0c:e5:3d:7c:b3:ca:a7:dc:9a:
b7:9b:3f:72:2a:a7:7d:83:fb:43:31:b6:21:da:47:
21:33:92:a7:71:bb:58:f6:84:6c:14:42:a4:49:84:
3d:ae:09:b4:aa:79:14:0a:83:d5:56:4c:d9:ed:3b:
35:b1:2c:2f:cc:96:6a:58:7b:ff:05:c5:fd:06:2b:
22:80:db:e6:1d:7a:97:73:6d:c4:6c:8c:20:b6:38:
06:bc:8f:86:cf:1b:a2:4d:95:7a:85:82:a4:f2:c9:
64:a0:1d:24:a3:9e:be:d3:f9:17:55:6e:23:77:55:
69:8a:98:27:48:81:17:fe:ad:c2:18:06:6a:cc:b2:
6f:1a:65:de:5c:f0:db:05:fd:a5:b9:7a:0e:53:5c:
3f:f2:30:53:45:1e:3b:8e:93:e8:8e:e8:aa:91:55:
36:9a:98:e5:4c:41:93:26:77:40:f4:b8:78:b5:ab:
ec:a3:70:c1:d7:4d:a0:8a:12:ff:20:54:58:18:85:
e7:65:64:78:9c:25:bd:c4:50:55:19:60:00:a2:80:
55:f6:a5:7e:f4:ef:7f:25:06:3c:1c:26:2d:21:62:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:13:EA:05:05:55:A7:48:65:A4:82:14:86:8D:45:9F:B1:68:03:8E
X509v3 Authority Key Identifier:
keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e9:d7:3b:9f:b6:14:a3:28:04:12:5e:04:aa:a0:e8:70:85:
3d:a0:1b:ab:ef:46:65:1d:f3:30:76:2b:92:93:ba:90:fa:41:
90:bd:5f:4c:8e:ac:f3:f1:88:a2:1c:38:5f:98:cb:6a:6f:df:
5f:07:ac:9b:20:90:6e:79:11:02:98:e8:86:23:4e:c0:71:25:
c7:d1:ce:21:53:be:e4:71:57:18:c7:ef:ef:67:81:d1:84:b7:
3b:49:69:05:f0:92:dc:ef:f2:da:17:e7:02:49:d5:c0:d9:f6:
68:49:d8:d0:75:27:55:2e:ca:63:a0:51:33:3d:f2:00:16:0c:
09:a7:1c:30:e9:1c:51:f0:3f:af:18:e7:6b:9e:63:b2:28:21:
e5:c0:6e:b2:68:8a:41:5a:cc:08:2a:73:b3:86:2a:d2:af:40:
eb:49:99:50:5e:28:d9:8e:32:6d:84:bd:40:0f:16:05:45:23:
25:86:a7:0d:02:f5:6a:ab:91:c7:e8:6e:9b:8a:c2:2f:0f:87:
de:c5:13:dd:52:9b:af:8f:04:03:3e:aa:be:4c:38:d0:71:21:
99:0d:0e:fd:4d:b8:44:ae:07:58:2a:34:ff:61:cd:ee:5d:f2:
16:ff:d5:2a:11:5c:3c:85:25:37:98:1d:b4:a3:f4:b0:28:ae:
df:4f:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 00:58:30 2026 by rpki-client