
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
File: IugbMnyx-zUB4Fr6uUEhkY_bW14.mft (raw, json)
Hash identifier: rdEw4WRTMGX6ZNAHiduGkQ2Coy7pq381ZF14TgwTrTY=
Subject key identifier: F9:23:17:C7:75:C1:81:DE:5E:86:71:9F:2A:AA:E1:2B:1E:7A:80:69
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Certificate issuer: /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial: 1927
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
Manifest number: 18DF
Signing time: Sat 04 Apr 2026 16:23:02 +0000
Manifest this update: Sat 04 Apr 2026 16:23:01 +0000
Manifest next update: Sat 11 Apr 2026 16:23:01 +0000
Files and hashes: 1: IugbMnyx-zUB4Fr6uUEhkY_bW14.crl (hash: 8Sf5HxjDTc+3frbbOcAYm67MCXEuO15K18ouflLjxOw=)
2: 0F71ED56069211F1B57EF04B043D8C67.roa (hash: xPY+wIdcnnb2Oks0I60uG5/7XY88MYgKgdGxnk7WO9k=)
3: 609B8BC27D7B11EDB6B77173C4F9AE02.roa (hash: lCIe/jXkg4rN1KsDsytQ0JDHRzjYIhUkGHJLYrtlAfM=)
4: 99D6FBE6341F11E9BF826924C4F9AE02.roa (hash: DTA9mxmgUMp5dN7zA4nVO7JGbSY6mzRAlz02SBccYEA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6439 (0x1927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Validity
Not Before: Apr 4 16:23:01 2026 GMT
Not After : Apr 11 16:23:01 2026 GMT
Subject: CN=69d13ae6-fcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:1d:d8:04:ae:e6:43:98:1e:6e:6f:42:cf:
7d:b2:2b:51:07:c1:ae:05:d7:94:4b:bc:dd:ca:1c:
7a:a4:ba:8c:66:1b:8c:81:c3:f5:cd:db:f7:07:e7:
4c:87:62:62:41:67:2a:3a:74:ba:42:09:55:98:77:
8e:b4:45:9e:9e:b1:14:1f:41:6d:a0:b9:76:da:75:
9e:5d:be:6e:20:82:cf:5e:33:99:f0:bd:87:4d:12:
94:53:89:88:1f:e7:71:0b:f9:48:09:37:dc:97:60:
d4:1d:40:29:fb:83:06:79:be:11:53:0b:fb:17:36:
04:79:21:a5:50:93:7c:ba:fd:71:88:63:73:e5:15:
62:4e:a1:2c:1c:13:2d:90:33:5f:51:5c:95:2d:09:
b1:31:f5:22:a8:dd:b2:50:61:55:f3:1f:b9:1d:72:
b2:2f:3e:21:a6:4c:df:29:e7:36:98:0a:54:b6:60:
e9:0a:e1:fb:81:ba:cf:54:e0:2a:a7:18:8d:ee:70:
37:ed:59:4d:cb:c1:19:8c:e5:13:1b:c1:27:8b:7f:
4a:85:8f:fa:02:f6:b3:8d:9e:ce:d4:ff:54:a3:0e:
43:6a:05:89:3b:e5:14:32:50:39:c9:60:16:fd:ef:
cb:d7:d7:cd:2e:72:c2:d1:30:2f:ed:ce:68:db:cb:
22:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:23:17:C7:75:C1:81:DE:5E:86:71:9F:2A:AA:E1:2B:1E:7A:80:69
X509v3 Authority Key Identifier:
keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e6:5d:e2:f5:a0:28:31:5e:69:f9:f1:2c:7a:dd:10:33:8a:
eb:6b:f0:d5:07:7c:43:c2:ef:9f:4b:5e:e7:da:aa:5d:f8:bb:
eb:56:82:f0:0a:09:42:89:32:9b:74:24:00:78:9d:2b:39:10:
b0:31:96:61:b4:bb:3d:62:6b:36:2c:a2:6b:87:91:0f:f6:fe:
49:7f:0c:0b:82:eb:ad:fe:b6:79:79:0c:f9:ba:2d:48:3b:13:
12:63:61:72:d7:8f:7b:0a:e1:4e:9a:38:b9:bf:2f:43:06:60:
2b:f9:39:45:74:5d:94:d4:a7:e4:af:de:ad:fe:c2:61:29:ea:
88:1f:1f:e6:be:75:10:7e:e0:22:3e:33:c6:57:42:f2:80:23:
3c:09:b2:9c:c0:00:e1:95:ba:23:44:c0:93:65:ba:4e:5a:f9:
25:ca:f0:ad:05:10:9b:ee:f5:f8:ce:f3:90:fc:dd:44:f6:d1:
6e:84:aa:6e:da:a0:ad:df:a7:2d:91:3e:43:5a:b5:87:9f:5f:
de:48:d3:02:20:07:09:ba:9b:e5:e9:c6:30:b2:38:c4:ca:25:
86:8d:f4:fd:b6:f6:11:96:c5:99:2f:11:33:40:4f:04:8f:5d:
8a:b6:ff:45:36:24:63:c8:ad:48:44:d5:ca:a1:14:d6:62:a8:
de:8b:e3:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI1QkQxMTAvBgNVBAUTKDIyRTgxQjMyN0NCMUZCMzUwMUUwNUFGQUI5NDEyMTkx
OEZEQjVCNUUwHhcNMjYwNDA0MTYyMzAxWhcNMjYwNDExMTYyMzAxWjAYMRYwFAYD
VQQDEw02OWQxM2FlNi1mY2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv7wd2ASu5kOYHm5vQs99sitRB8GuBdeUS7zdyhx6pLqMZhuMgcP1zdv3B+dM
h2JiQWcqOnS6QglVmHeOtEWenrEUH0FtoLl22nWeXb5uIILPXjOZ8L2HTRKUU4mI
H+dxC/lICTfcl2DUHUAp+4MGeb4RUwv7FzYEeSGlUJN8uv1xiGNz5RViTqEsHBMt
kDNfUVyVLQmxMfUiqN2yUGFV8x+5HXKyLz4hpkzfKec2mApUtmDpCuH7gbrPVOAq
pxiN7nA37VlNy8EZjOUTG8Eni39KhY/6AvazjZ7O1P9Uow5DagWJO+UUMlA5yWAW
/e/L19fNLnLC0TAv7c5o28sirQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPkjF8d1
wYHeXoZxnyqq4SseeoBpMB8GA1UdIwQYMBaAFCLoGzJ8sfs1AeBa+rlBIZGP21te
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjVCRC8zM0NCMTE3QUI1
QTkxMUU3OUM3NENCNzJDNEY5QUUwMi9JdWdiTW55eC16VUI0RnI2dVVFaGtZX2JX
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l1Z2JNbnl4LXpVQjRGcjZ1VUVoa1lfYlcxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjVCRC8zM0NCMTE3QUI1QTkxMUU3OUM3NENCNzJDNEY5QUUwMi9JdWdiTW55eC16
VUI0RnI2dVVFaGtZX2JXMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm+Zd4vWgKDFeafnxLHrdEDOK62vw1Qd8Q8Lvn0te59qqXfi761aC8AoJQoky
m3QkAHidKzkQsDGWYbS7PWJrNiyia4eRD/b+SX8MC4Lrrf62eXkM+botSDsTEmNh
ctePewrhTpo4ub8vQwZgK/k5RXRdlNSn5K/erf7CYSnqiB8f5r51EH7gIj4zxldC
8oAjPAmynMAA4ZW6I0TAk2W6Tlr5JcrwrQUQm+71+M7zkPzdRPbRboSqbtqgrd+n
LZE+Q1q1h59f3kjTAiAHCbqb5enGMLI4xMolho30/bb2EZbFmS8RM0BPBI9dirb/
RTYkY8itSETVyqEU1mKo3ovjSA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:25 2026 by rpki-client