
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
File: i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json)
Hash identifier: 8UvNDmDKSJQurBqMLv5kh6uIONG9/4Tdx0QA6oTIvR4=
Subject key identifier: 89:73:C7:21:6E:47:F9:29:8C:E2:78:F9:3A:05:01:03:02:54:57:CC
Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
Certificate issuer: /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Certificate serial: 0209
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
Manifest number: 01FD
Signing time: Mon 03 Aug 2026 04:21:12 +0000
Manifest this update: Mon 03 Aug 2026 04:21:11 +0000
Manifest next update: Mon 10 Aug 2026 04:21:11 +0000
Files and hashes: 1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: xki9vqq3GIEF36ON3Cq7G4+FARAJM0iPj1S7afBD5Cg=)
2: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: hou+c7BsoKfVisvEwRZh9uWs6LCWRU5zcufZlx3RZD4=)
3: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: /wrVNUp5njYp8bBfMjYQTOD/jBHOQFuLEFwcPRZnAKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Aug 2026 04:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Validity
Not Before: Aug 3 04:21:11 2026 GMT
Not After : Aug 10 04:21:11 2026 GMT
Subject: CN=6a701738-b4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:85:5a:2f:c2:43:04:a2:3a:23:e8:f0:08:
1a:4b:5c:0d:56:45:6d:7c:19:d3:b2:38:20:1e:9f:
62:6a:6d:19:b6:34:19:9d:9e:ef:f1:54:dd:05:22:
10:f0:44:50:12:7b:10:73:7b:1f:27:23:90:b2:66:
eb:b7:49:8e:79:73:6a:42:b6:ea:81:69:4a:b1:b9:
4a:59:10:82:85:c2:05:1a:12:bf:12:a0:23:42:51:
56:70:f4:26:3a:12:7c:31:5a:63:5b:76:c4:12:58:
74:5a:c0:e0:c7:43:30:fb:49:ef:6d:3f:2d:cb:91:
66:1b:05:49:41:74:28:b4:f7:f0:2d:51:97:82:7e:
6f:83:8e:cc:61:fd:da:a7:e1:59:91:80:28:93:30:
4a:8e:e9:f0:23:9c:8a:06:58:83:55:49:19:35:ef:
23:b9:32:74:fb:b3:a2:ac:fd:06:d9:0f:50:36:07:
bc:1d:04:5a:60:7a:96:37:67:c2:40:c2:a1:d0:d7:
10:75:c4:a5:bf:0b:1e:3d:b2:e1:be:ed:7a:6e:b6:
80:b5:b2:9e:ad:72:9a:12:11:27:87:cf:e5:9e:0f:
ae:82:74:0c:3d:d0:dc:a9:c8:00:ee:23:6b:26:e1:
80:01:3a:d3:57:c4:40:db:57:2a:04:45:cc:a6:ff:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:73:C7:21:6E:47:F9:29:8C:E2:78:F9:3A:05:01:03:02:54:57:CC
X509v3 Authority Key Identifier:
keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3f:8f:d8:2e:cd:97:bb:df:7e:ed:c9:6c:db:7c:ba:2f:f1:
95:c3:5f:8c:46:1d:2b:69:ad:66:40:f9:a9:fa:5a:8d:f8:0e:
d5:65:2d:3b:27:bc:ad:c0:d3:af:64:0b:54:28:24:fa:78:2b:
9a:2a:b5:82:59:cd:75:1c:7b:12:ae:3c:2e:7f:79:96:4c:44:
18:79:30:da:97:35:70:2a:07:ef:03:5e:b3:71:cb:f9:57:ae:
e2:49:17:7c:40:2c:6c:5d:9e:6f:91:19:27:16:ea:0a:bc:73:
d1:f4:4b:af:d9:4b:f8:58:ca:2c:76:38:80:8d:e1:30:b9:5d:
41:ea:16:81:d2:61:99:ee:89:f2:10:13:bf:f8:0b:9b:57:c1:
ec:23:70:99:84:42:8c:80:f0:e0:bb:f2:6e:d8:4b:c0:80:d0:
7c:29:56:21:77:7e:22:87:c4:14:de:0b:44:95:6c:f5:58:ba:
ab:17:f7:d0:f9:f8:99:e6:08:33:3b:c6:04:73:c8:45:69:2a:
db:fa:b9:cc:ec:2c:69:0a:03:07:47:ef:4e:8e:9e:16:2f:04:
c8:5a:24:69:ff:2c:02:42:86:c9:ed:00:43:c3:93:46:90:30:
f9:36:06:8a:11:1b:83:f6:e2:94:7f:9f:cc:c9:5d:12:b7:9e:
1c:a5:87:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdDMkQxMTAvBgNVBAUTKDhCNjVBNTI5NDM3N0Q2ODYzNzhDNDZCM0U5REFEN0NE
QjVCNjY3OTEwHhcNMjYwODAzMDQyMTExWhcNMjYwODEwMDQyMTExWjAYMRYwFAYD
VQQDEw02YTcwMTczOC1iNGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv6OFWi/CQwSiOiPo8AgaS1wNVkVtfBnTsjggHp9iam0ZtjQZnZ7v8VTdBSIQ
8ERQEnsQc3sfJyOQsmbrt0mOeXNqQrbqgWlKsblKWRCChcIFGhK/EqAjQlFWcPQm
OhJ8MVpjW3bEElh0WsDgx0Mw+0nvbT8ty5FmGwVJQXQotPfwLVGXgn5vg47MYf3a
p+FZkYAokzBKjunwI5yKBliDVUkZNe8juTJ0+7OirP0G2Q9QNge8HQRaYHqWN2fC
QMKh0NcQdcSlvwsePbLhvu16braAtbKerXKaEhEnh8/lng+ugnQMPdDcqcgA7iNr
JuGAATrTV8RA21cqBEXMpv+0TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlzxyFu
R/kpjOJ4+ToFAQMCVFfMMB8GA1UdIwQYMBaAFItlpSlDd9aGN4xGs+na1821tmeR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0MyRC85RTM5RjkzNjhD
OUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFvWTNqRWF6NmRyWHpiVzJa
NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kyV2xLVU4zMW9ZM2pFYXo2ZHJYemJXMlo1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0MyRC85RTM5RjkzNjhDOUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFv
WTNqRWF6NmRyWHpiVzJaNUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATT+P2C7Nl7vffu3JbNt8ui/xlcNfjEYdK2mtZkD5qfpajfgO1WUtOye8rcDT
r2QLVCgk+ngrmiq1glnNdRx7Eq48Ln95lkxEGHkw2pc1cCoH7wNes3HL+Veu4kkX
fEAsbF2eb5EZJxbqCrxz0fRLr9lL+FjKLHY4gI3hMLldQeoWgdJhme6J8hATv/gL
m1fB7CNwmYRCjIDw4LvybthLwIDQfClWIXd+IofEFN4LRJVs9Vi6qxf30Pn4meYI
MzvGBHPIRWkq2/q5zOwsaQoDB0fvTo6eFi8EyFokaf8sAkKGye0AQ8OTRpAw+TYG
ihEbg/bilH+fzMldEreeHKWH8Q==
-----END CERTIFICATE-----
Generated at Tue Aug 4 17:36:56 2026 by rpki-client