
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
File: iunN4Qvgt38JGw0468GWfIvAkZ4.mft (raw, json)
Hash identifier: 9mlxFH0j/hy2lFxE3HWTrs0CvtUbEwSSgAH1NONku6o=
Subject key identifier: D7:78:04:6D:B5:47:B2:0D:29:4E:27:56:86:EA:FD:22:D2:0B:5A:FB
Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E
Certificate issuer: /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
Certificate serial: 0808
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
Manifest number: 07EE
Signing time: Sat 20 Jun 2026 21:22:26 +0000
Manifest this update: Sat 20 Jun 2026 21:22:26 +0000
Manifest next update: Sat 27 Jun 2026 21:22:26 +0000
Files and hashes: 1: iunN4Qvgt38JGw0468GWfIvAkZ4.crl (hash: PMC2A2Z1OMQJz1FtWoDoyj6lRiHrwxb++CUU3ALyw9Q=)
2: 490CDADA42F211EBB34A1A60C4F9AE02.roa (hash: v7Fb7boRTCMwchTjW0del7sXnV2DChLpJUD5WBCHZN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl
rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Jun 2026 21:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2056 (0x808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116BB8, serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
Validity
Not Before: Jun 20 21:22:26 2026 GMT
Not After : Jun 27 21:22:26 2026 GMT
Subject: CN=6a370492-3b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f9:28:97:c6:68:ee:23:a3:fa:0f:49:5d:64:
d4:45:a8:24:60:9a:f3:8a:67:96:4b:d6:6b:59:87:
4f:41:27:f9:00:83:16:cd:c2:63:24:3b:34:5a:4b:
18:79:51:ef:c3:75:d5:92:cd:f3:a2:56:bd:f5:c8:
00:9c:28:f8:16:bc:f1:7f:e7:d6:f2:25:17:8b:8f:
02:ba:9a:a5:e7:cb:a8:da:b2:f3:b3:d2:3d:de:10:
c0:f4:c1:54:66:86:11:36:c6:6f:75:ae:37:cf:cd:
7b:dd:70:56:53:15:3e:09:ad:75:a1:1a:2d:21:d1:
93:11:6e:24:2f:c1:db:d1:85:67:8e:22:d3:f4:03:
0a:54:e7:2d:08:6a:94:a1:90:c2:ee:64:bc:72:60:
ac:a1:bf:e8:92:15:7c:a2:66:43:78:28:0f:80:9e:
04:4f:9e:6f:fe:95:de:25:75:76:34:21:30:8d:01:
2e:dd:01:ea:17:db:31:74:19:65:88:5f:57:52:1f:
7e:71:68:f9:bf:85:d8:1c:ae:21:b1:e8:42:0a:50:
48:30:1b:79:77:c0:a7:17:d7:91:18:fd:70:5f:7b:
2f:10:0b:71:76:e3:51:af:e5:3b:2d:67:b0:42:cc:
c6:0b:ee:4f:94:22:3d:2f:d8:a1:d9:d0:f2:ea:4b:
60:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:78:04:6D:B5:47:B2:0D:29:4E:27:56:86:EA:FD:22:D2:0B:5A:FB
X509v3 Authority Key Identifier:
keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:8e:fb:26:0e:9f:97:e5:18:bf:4b:6b:18:56:11:8b:e3:87:
1e:bb:01:d4:fb:7d:05:23:48:57:0b:36:d7:00:a4:c0:4f:b9:
20:8a:3a:bc:4f:aa:f9:cd:d4:60:d1:31:ab:e2:35:9e:3b:fe:
76:1f:48:93:7f:70:1a:75:17:be:ab:07:84:f1:72:65:53:f8:
21:b1:c2:bd:c4:3a:27:6d:e9:b0:9b:f9:af:6f:9f:82:55:d2:
75:b9:ce:0b:bf:77:da:fd:e6:6c:52:e6:13:48:9f:48:b1:5f:
f0:e5:52:35:34:6a:f3:22:c1:df:31:0c:bb:48:a3:b9:26:3f:
b1:a5:a6:7f:8e:2a:ec:3c:01:2b:c3:13:20:cf:02:e5:7a:af:
32:13:b1:ed:0d:d8:4b:ee:51:11:74:61:a7:76:65:af:ca:76:
7d:05:91:ae:e9:a3:47:96:b7:cd:d9:b4:9b:b0:3e:ed:d8:8b:
93:18:1c:4e:f1:88:df:0e:32:bc:15:b4:3b:e2:e1:09:91:78:
1c:5b:6b:63:69:a5:89:a9:aa:d6:41:5a:6d:85:b7:94:44:e6:
94:6b:cb:8c:58:2a:6f:55:65:e5:49:86:9f:1a:72:cd:d4:a2:
a7:d1:cf:77:6c:71:28:51:e2:ec:0a:f8:c1:8a:4f:e7:4e:97:
1a:a9:6a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 02:57:47 2026 by rpki-client