
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
File: ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json)
Hash identifier: zHYog+tfGRUf1RCEv30kEJvpuYP94JTXydzWnVJWBpY=
Subject key identifier: 14:20:15:F7:23:E7:F3:CC:7D:3B:37:39:CE:13:67:3D:20:93:1A:EB
Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
Certificate issuer: /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Certificate serial: 050D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
Manifest number: 04FD
Signing time: Wed 28 Oct 2026 23:54:13 +0000
Manifest this update: Wed 28 Oct 2026 23:54:12 +0000
Manifest next update: Wed 04 Nov 2026 23:54:12 +0000
Files and hashes: 1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: HioNj5xssHQAXNzgmbQ0EydyRHpBAIoGsYy9iMrBpok=)
2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: btT7lb3t4WSsKXv6kffudUgwc+vUjVoR2tzuvf0VOIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 23:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1293 (0x50d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Validity
Not Before: Oct 28 23:54:12 2026 GMT
Not After : Nov 4 23:54:12 2026 GMT
Subject: CN=6ae28b24-1e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:72:7f:06:c3:af:2f:79:15:76:e8:06:94:
b2:a3:d0:76:38:20:e0:db:2c:6a:26:16:78:a3:cb:
4f:21:25:a9:7f:7e:97:6b:48:a7:23:83:60:39:f4:
a0:a0:10:8b:f6:e8:91:c2:cb:26:71:23:0f:f9:15:
91:2c:1b:94:e1:3e:74:20:67:d9:8b:a3:7a:17:f6:
e0:9e:17:74:59:4a:35:f0:26:88:48:eb:9b:8c:11:
b1:2f:71:32:04:aa:f4:af:cf:ca:99:83:64:7c:a6:
70:54:0e:1f:51:be:fd:c4:f6:0c:d6:80:80:bd:00:
03:e6:15:06:60:70:cd:e5:c3:20:75:13:4b:0a:80:
92:b7:06:ff:49:65:f8:e4:73:6b:cc:4b:af:e4:73:
59:97:e2:5b:64:87:6f:c6:b1:b9:4f:ae:89:85:f0:
9d:43:83:33:5f:e1:e4:67:da:7d:6a:96:4f:d8:07:
40:1a:80:47:ca:2d:2e:fb:15:c1:0a:1b:27:0a:fe:
42:72:cb:1f:89:e2:98:25:89:20:d3:88:5d:30:3f:
11:f0:31:58:4a:ca:4a:e5:81:28:ea:f4:9e:c4:25:
e1:08:5c:78:b8:88:5d:57:13:80:ac:9e:51:8d:22:
81:13:c8:4e:15:44:0b:20:0b:38:96:07:53:2d:c9:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:20:15:F7:23:E7:F3:CC:7D:3B:37:39:CE:13:67:3D:20:93:1A:EB
X509v3 Authority Key Identifier:
keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:23:96:6c:30:5e:3f:92:5d:72:41:4c:2d:ec:3f:a0:70:df:
89:c1:c9:c0:58:cd:5a:a2:ff:e4:4b:3a:f1:f6:3c:f6:50:4a:
e3:3e:0f:e3:a8:25:99:8c:10:95:93:cf:57:15:d5:94:55:56:
22:ab:53:2d:66:ce:65:c9:55:28:d4:56:5d:2c:99:08:9f:38:
46:88:f8:af:c1:e7:94:a9:a2:f7:30:7b:8c:91:2d:db:38:8a:
de:69:67:58:bd:66:c9:75:23:02:26:75:52:01:ff:23:ae:06:
94:08:d2:eb:69:b9:a4:16:d8:e8:a7:0b:dc:ac:0e:78:2b:45:
5a:d0:5b:40:a5:3d:2f:48:11:c1:1f:ed:34:00:cc:6f:f1:96:
67:dd:a9:64:2b:93:53:b6:24:ee:ae:1b:93:33:a8:4e:4a:20:
06:5f:70:85:bc:84:b7:10:52:b3:25:43:64:4c:0c:a1:d0:ac:
58:25:fa:38:32:26:d9:bc:60:3d:20:10:10:e1:33:6c:c2:de:
30:15:5c:bf:0d:7e:1e:7c:a1:82:72:cf:81:e6:a6:96:b5:28:
5e:b2:67:1a:84:47:53:6b:cb:49:41:25:27:19:07:4b:b2:30:
92:6b:99:00:78:b0:82:d0:ba:bd:69:a0:89:18:f1:cd:3c:20:
d6:ab:50:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:09:19 2026 by rpki-client