
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
File: ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json)
Hash identifier: x9sCtmkv8nEvmeOOEf+MfT1Bu9xIMVmxDp5OaTEsbAQ=
Subject key identifier: 58:83:65:52:8D:2E:11:DC:B8:39:2C:14:ED:53:FB:66:59:35:4A:E3
Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
Certificate issuer: /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Certificate serial: 050E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
Manifest number: 04FE
Signing time: Fri 30 Oct 2026 23:44:05 +0000
Manifest this update: Fri 30 Oct 2026 23:44:04 +0000
Manifest next update: Fri 06 Nov 2026 23:44:04 +0000
Files and hashes: 1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: 2B34pwGEVTTXjFCpgciXoJbdcoYTZdD4Xp92tD/ytoU=)
2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: btT7lb3t4WSsKXv6kffudUgwc+vUjVoR2tzuvf0VOIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 23:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1294 (0x50e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Validity
Not Before: Oct 30 23:44:04 2026 GMT
Not After : Nov 6 23:44:04 2026 GMT
Subject: CN=6ae52bc4-ed67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:aa:84:83:ce:ab:4e:5d:57:15:de:67:e1:
95:88:43:ac:7b:33:26:53:8a:52:cf:fe:83:a1:cc:
1d:c2:3f:c7:d8:53:93:22:64:ae:76:2c:57:08:be:
64:ae:76:a4:45:be:52:c8:8b:81:46:cf:b5:07:3b:
21:11:d4:67:2a:66:60:77:63:49:52:92:6a:5c:5e:
7a:d4:38:cc:9f:cf:79:f6:b8:42:51:c3:75:72:c7:
3a:ab:de:4c:c0:43:76:fe:11:b9:60:d6:97:83:76:
0d:09:6b:7b:b9:ce:a3:8a:dd:e7:2a:d7:55:2b:b2:
48:82:f9:54:e5:f8:87:bf:ed:c0:f5:bf:0e:07:0f:
16:fb:f3:d4:81:7e:1a:57:13:52:d3:3a:45:ac:8a:
dd:5e:86:c0:3f:8f:ca:96:d3:2d:88:b6:64:f2:6c:
55:d6:26:25:09:8c:74:6f:e4:ee:13:46:d4:f7:5b:
50:4d:f9:e9:8a:6a:7f:f1:ae:74:86:ad:59:1f:c2:
20:c0:df:7e:4c:73:53:8c:4e:0b:51:b5:31:78:4f:
f7:43:68:f6:c3:2d:70:77:b0:e4:be:ed:80:cc:29:
5c:e4:9a:29:d8:c7:16:f8:87:5f:aa:a7:e6:e5:d2:
67:f3:11:47:5d:0e:d3:f7:91:b2:4d:a6:56:59:cf:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:83:65:52:8D:2E:11:DC:B8:39:2C:14:ED:53:FB:66:59:35:4A:E3
X509v3 Authority Key Identifier:
keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:cb:b7:7c:c9:9c:85:fa:c4:b4:3a:c2:91:cb:63:18:89:9f:
27:32:62:33:f2:d7:80:e1:78:1d:db:eb:de:df:f7:aa:7e:d7:
2b:d8:31:74:1e:ab:4e:4b:0b:65:8a:6f:b9:b2:e3:2c:ed:87:
a6:a8:47:ef:9b:52:72:66:89:29:55:92:47:62:9b:be:36:27:
8d:31:a0:f0:a6:26:01:9a:f0:4b:e3:1c:b9:2c:99:84:03:91:
be:b7:d5:66:11:06:8e:67:35:7e:43:10:fa:25:17:bd:c3:9c:
59:98:ac:cd:d3:84:e6:98:b4:25:a2:69:69:6c:1a:62:ff:a1:
8a:3f:9c:31:96:54:e4:a0:c1:23:74:42:bc:23:34:2c:b0:1c:
50:a1:a7:13:13:ec:f5:af:f3:b0:17:4f:03:56:e7:5b:43:51:
b4:f5:51:02:6c:40:03:52:8c:84:2e:fa:cb:10:5a:98:80:d0:
35:5c:f1:b8:68:d3:9b:db:a9:60:bb:d8:3e:9c:a3:cc:ae:d0:
fc:7d:45:d2:d1:0d:a8:80:92:5c:a3:f6:1a:eb:e9:e2:93:bb:
23:15:c2:b4:40:cf:d1:5b:54:ab:1e:01:cd:dd:86:8a:17:89:
8f:fc:27:3b:e0:59:16:59:9c:48:91:03:61:da:01:fd:b1:65:
b4:53:f0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:19:17 2026 by rpki-client