
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
File: ieNpO3EjaLD6zmuk5GeXCK85OLU.mft (raw, json)
Hash identifier: f/zSCh+MOmpIz06EO0X+Rb8YHEZz4HK6+ky9qBJdxcQ=
Subject key identifier: B1:86:09:42:00:F3:B2:3B:C7:94:3C:C4:33:F7:0D:E8:C5:11:8D:81
Authority key identifier: 89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5
Certificate issuer: /CN=A911EA03/serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
Certificate serial: 76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
Manifest number: 73
Signing time: Sun 25 Oct 2026 08:18:30 +0000
Manifest this update: Sun 25 Oct 2026 08:18:29 +0000
Manifest next update: Sun 01 Nov 2026 08:18:29 +0000
Files and hashes: 1: ieNpO3EjaLD6zmuk5GeXCK85OLU.crl (hash: bGif19FWrqBryes6JepUyYxb6aym7MhrzW97DXVEPEQ=)
2: FD1CE81824DC11F1AC9E21B6AD833773.roa (hash: aKiZx9bAHTnqGJOBAfW2TQZBMx8LZSsNmHEuGV9buHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl
rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 08:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA03, serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
Validity
Not Before: Oct 25 08:18:29 2026 GMT
Not After : Nov 1 08:18:29 2026 GMT
Subject: CN=6addbb55-308b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:cf:95:2a:4e:62:6b:26:b6:0b:26:f5:de:
eb:f5:13:1d:cf:d6:cf:fd:bd:d3:6d:7d:68:e2:39:
91:98:02:5a:97:71:0b:f7:cf:16:98:7e:65:98:b9:
a0:7e:24:36:c8:c9:47:e7:30:3c:33:52:f6:5b:63:
96:35:0b:2e:ab:2b:63:69:1b:74:67:f9:01:50:12:
e3:ad:1a:d2:69:01:09:68:a7:a3:50:f6:dd:09:c1:
56:2d:5c:e0:43:e8:45:49:15:95:b4:94:1e:a1:d7:
db:bb:78:88:34:3c:1c:61:ab:c8:19:ac:1e:1f:a0:
9d:7c:d7:e2:03:19:b5:48:96:ac:06:c6:5a:68:05:
79:9d:ab:27:79:d1:a6:17:2b:f3:dc:99:09:e6:b5:
59:ba:62:e5:bc:17:e0:4e:58:d2:b0:15:84:6c:50:
f4:af:1e:99:07:1d:09:02:87:c8:8d:61:1a:cf:d9:
11:f0:93:4e:29:3b:88:59:75:d4:09:7d:be:ed:82:
68:86:40:06:de:b1:b2:aa:da:ed:84:54:7e:21:60:
29:2a:92:86:cf:86:85:7e:22:bf:56:ff:9d:c0:32:
8c:63:cc:90:8b:e1:5b:e5:87:34:8a:29:bb:ad:95:
4c:b8:22:c3:f8:98:14:60:07:e0:cd:45:6d:7b:ad:
01:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:86:09:42:00:F3:B2:3B:C7:94:3C:C4:33:F7:0D:E8:C5:11:8D:81
X509v3 Authority Key Identifier:
keyid:89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:d4:05:a9:ce:6f:a4:ae:1d:57:93:d8:30:2c:78:ad:aa:03:
bf:30:77:47:dc:7d:0b:9b:ab:83:7a:c9:12:47:fd:b9:55:e5:
d3:d1:40:5d:9f:d3:fb:c5:c2:35:06:dc:0a:47:46:96:6f:18:
d1:fd:b9:70:d0:38:dc:74:da:ed:8b:10:20:b1:15:bf:ae:25:
34:db:f3:4b:96:7d:45:6c:92:80:e8:8d:af:13:f8:d0:1c:8e:
f6:3b:bc:24:3e:4e:e4:88:a7:b5:55:94:ef:60:58:d1:5e:9b:
6a:f2:65:00:56:62:2b:d2:79:f1:af:36:00:b8:fc:ea:ad:e1:
49:1b:a4:f9:e9:c3:9a:e4:e3:8b:23:6e:ad:2a:fb:2d:dc:d7:
c6:4d:67:c8:3f:41:42:25:ce:f2:89:42:cb:43:fd:5e:5f:7d:
9d:81:19:a4:ed:12:ca:37:4f:f2:60:28:45:ae:86:98:47:ec:
72:5a:24:81:6f:13:5c:79:fa:d6:4a:bc:98:70:46:6d:70:d3:
cb:24:89:ad:81:a6:e9:25:e2:8f:17:55:5c:90:e0:2c:e7:b9:
40:03:6a:e2:e0:ac:0b:d5:01:25:8d:95:8e:5a:c7:08:4e:54:
12:73:57:1e:8a:a0:61:b8:c6:94:b9:0f:64:5c:02:46:97:50:
37:4f:3d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:21:58 2026 by rpki-client