
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
File: ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json)
Hash identifier: bua1ddnv8Dtm1FbqmXY1WEYDCuae9LDnj/IADVmty0I=
Subject key identifier: 38:67:B7:1D:24:C1:8D:7B:01:F3:1E:9D:63:B2:73:F7:52:B8:F3:A0
Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
Certificate issuer: /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Certificate serial: 04DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
Manifest number: 04CD
Signing time: Mon 27 Jul 2026 00:52:05 +0000
Manifest this update: Mon 27 Jul 2026 00:52:04 +0000
Manifest next update: Mon 03 Aug 2026 00:52:04 +0000
Files and hashes: 1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: vqbaQsdzRGodwgV7doCPnbhebVDhINnP9dwMEvxjE2Q=)
2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: btT7lb3t4WSsKXv6kffudUgwc+vUjVoR2tzuvf0VOIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1245 (0x4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Validity
Not Before: Jul 27 00:52:04 2026 GMT
Not After : Aug 3 00:52:04 2026 GMT
Subject: CN=6a66abb4-0fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:8c:72:42:53:87:9f:b8:ce:60:bf:d9:39:
b9:6f:99:43:92:4b:9b:84:c3:97:1a:5c:50:59:0d:
17:b8:43:16:d4:c3:13:20:be:5d:45:fa:a3:02:4b:
62:96:0d:e1:5e:85:c5:0f:01:0c:f6:3f:93:6c:51:
fc:4f:20:75:80:86:48:dd:48:5a:a8:fa:bb:36:1f:
f0:17:af:9c:c1:f1:9c:85:85:3f:d5:00:22:8c:c2:
e9:2c:e7:c5:12:f0:44:ad:1a:a5:6f:f2:45:ff:54:
a9:68:e8:e7:9e:28:4d:5c:86:27:26:13:c8:5b:4d:
57:8d:38:71:34:98:92:83:a4:8b:85:e4:f7:b1:de:
43:7d:93:8a:88:af:58:ec:23:9b:c7:e3:10:79:be:
65:bc:40:cd:1c:f1:4b:d8:3b:22:2e:a2:99:89:e7:
83:cf:1a:72:d3:3d:c5:63:91:28:a3:28:9f:2a:ce:
97:e9:8e:e7:0b:43:eb:62:87:1e:af:d5:40:7b:cd:
01:be:69:4a:1c:46:7c:b5:10:a4:68:2e:d5:9c:d4:
eb:66:f9:6d:5f:08:43:7b:3c:1a:7e:c2:b2:0e:ed:
75:3d:06:46:d8:24:d4:f6:b8:b4:fc:74:9e:07:fb:
a5:d4:e3:a5:ae:a1:fb:46:6d:e4:c1:67:bd:13:bc:
e7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:67:B7:1D:24:C1:8D:7B:01:F3:1E:9D:63:B2:73:F7:52:B8:F3:A0
X509v3 Authority Key Identifier:
keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:7b:38:27:3d:c7:4f:0d:58:4b:30:8f:94:aa:70:e5:8b:c1:
01:81:b5:78:83:ba:6a:d0:cb:e5:9d:a9:3f:42:f9:be:24:93:
30:12:89:24:19:03:94:a1:d9:23:8d:4e:0b:b9:1f:27:3a:e7:
40:36:63:a2:48:a2:c4:2d:e0:1e:21:1e:a1:5c:c0:d0:c1:c3:
ff:d8:f6:df:4b:d2:95:8f:ec:4f:81:f6:2f:cd:50:5a:6b:26:
cf:68:6b:dd:d0:c4:a1:a8:78:c7:1d:52:e1:15:d5:91:d9:88:
64:81:7e:f4:6f:c4:5c:f3:05:bc:db:7e:0a:05:9b:89:15:39:
56:5c:74:e4:26:20:cc:5e:79:ed:73:02:ab:20:f4:9b:7e:cb:
2d:d8:e5:91:56:f8:7a:d5:bc:ea:65:c4:92:a6:01:a3:ff:5b:
9d:4c:4f:0e:28:be:3b:6d:14:be:5a:fa:e7:b4:82:69:e2:03:
79:e3:09:8e:ad:8b:c2:d0:7b:c1:d0:ef:14:4c:59:19:c8:dc:
af:95:5b:fc:9c:12:cd:01:04:63:73:58:e5:46:a2:f7:06:4c:
64:c9:13:07:e3:e3:6f:f4:9f:a0:36:73:09:f8:db:2e:3b:f5:
59:d2:6e:6a:eb:bb:0e:31:95:ab:ad:17:1c:f9:86:c2:f1:85:
69:05:d6:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUVBNjIxMTAvBgNVBAUTKDg5RjU5NjExMDAzMEJEQzlCM0JBRDc2Q0ZEMDVDMzEy
NDYxN0M5NTIwHhcNMjYwNzI3MDA1MjA0WhcNMjYwODAzMDA1MjA0WjAYMRYwFAYD
VQQDEw02YTY2YWJiNC0wZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQ2MckJTh5+4zmC/2Tm5b5lDkkubhMOXGlxQWQ0XuEMW1MMTIL5dRfqjAkti
lg3hXoXFDwEM9j+TbFH8TyB1gIZI3UhaqPq7Nh/wF6+cwfGchYU/1QAijMLpLOfF
EvBErRqlb/JF/1SpaOjnnihNXIYnJhPIW01XjThxNJiSg6SLheT3sd5DfZOKiK9Y
7CObx+MQeb5lvEDNHPFL2DsiLqKZieeDzxpy0z3FY5EooyifKs6X6Y7nC0PrYoce
r9VAe80BvmlKHEZ8tRCkaC7VnNTrZvltXwhDezwafsKyDu11PQZG2CTU9ri0/HSe
B/ul1OOlrqH7Rm3kwWe9E7znmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDhntx0k
wY17AfMenWOyc/dSuPOgMB8GA1UdIwQYMBaAFIn1lhEAML3Js7rXbP0FwxJGF8lS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUE2Mi8xMTY4MjExQzgw
NkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9pZldXRVFBd3ZjbXp1dGRzX1FYREVrWVh5
VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lmV1dFUUF3dmNtenV0ZHNfUVhERWtZWHlWSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RUE2Mi8xMTY4MjExQzgwNkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9pZldXRVFBd3Zj
bXp1dGRzX1FYREVrWVh5VkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWHs4Jz3HTw1YSzCPlKpw5YvBAYG1eIO6atDL5Z2pP0L5viSTMBKJJBkDlKHZ
I41OC7kfJzrnQDZjokiixC3gHiEeoVzA0MHD/9j230vSlY/sT4H2L81QWmsmz2hr
3dDEoah4xx1S4RXVkdmIZIF+9G/EXPMFvNt+CgWbiRU5Vlx05CYgzF557XMCqyD0
m37LLdjlkVb4etW86mXEkqYBo/9bnUxPDii+O20Uvlr657SCaeIDeeMJjq2LwtB7
wdDvFExZGcjcr5Vb/JwSzQEEY3NY5Uai9wZMZMkTB+Pjb/SfoDZzCfjbLjv1WdJu
auu7DjGVq60XHPmGwvGFaQXWPw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 07:37:13 2026 by rpki-client