
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
File: iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json)
Hash identifier: NJmPn0W7NbpoWxPKGFR92QaPcjyxyWMsJjHCH3250R4=
Subject key identifier: 81:A4:29:E0:1F:13:41:16:A1:B4:C6:AC:69:C5:BD:E2:74:17:87:C0
Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Certificate serial: 023C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
Manifest number: 0232
Signing time: Thu 17 Sep 2026 02:50:31 +0000
Manifest this update: Thu 17 Sep 2026 02:50:31 +0000
Manifest next update: Thu 24 Sep 2026 02:50:31 +0000
Files and hashes: 1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: PjPd5ay4QNMHuHznypJdPphqzgI16O6tNnYEkyA5zsI=)
2: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: m4OYQMEnrmC7k1a1yVmKxzd2QvlWXdsaMA1wS2lcsRs=)
3: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: 8VCSX3Py1IyN0f9zmOSlchE4nrVyfSkUdTOEL2+Xh+k=)
4: C95DC5F4A27411F1A78F91D46611F970.roa (hash: ORURaqb/tZ2urpCugRZ8/FpqoxngJp0Iv3YmiEfInTM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 02:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Validity
Not Before: Sep 17 02:50:31 2026 GMT
Not After : Sep 24 02:50:31 2026 GMT
Subject: CN=6aab5577-2c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:d7:b6:12:97:3f:06:51:6e:d2:c7:08:bc:
43:22:a7:5c:57:df:83:6e:b5:08:f6:fc:2d:62:72:
0d:e0:42:79:ae:a2:bd:37:55:c8:e8:05:d1:e9:74:
c4:66:3f:b7:8d:21:5e:39:88:95:a9:b3:4f:2b:1d:
19:f2:1e:fe:68:31:81:01:c9:90:12:38:59:58:72:
9e:c8:2d:d4:1d:9e:4c:5a:5a:fe:4b:bc:31:7e:64:
af:a8:83:a9:3b:ac:b1:b3:0a:ca:71:8b:07:ab:a8:
c2:cb:a2:33:a7:85:ef:e5:9c:7b:2e:97:2e:8c:9b:
b5:3f:74:f7:22:a8:8e:e8:8a:ef:9e:81:34:1e:98:
c7:24:0f:ba:d0:f0:8d:ff:fe:5a:6a:ed:1a:52:5b:
fd:a4:ec:a5:d9:b6:7b:d5:5d:c2:42:47:9c:2f:d8:
41:5b:57:00:99:6d:c5:f9:28:a7:60:d6:c2:00:0b:
4a:92:11:d5:f1:09:f2:be:59:6e:51:6a:af:d4:76:
2a:33:06:ab:4a:6f:95:e1:12:44:f7:67:0e:61:ac:
99:06:5e:5d:34:fb:9c:7f:00:36:43:d6:ca:e8:dc:
cf:6b:f7:99:6d:b1:00:58:e4:9d:56:1c:ab:1b:05:
5a:c6:96:88:8c:2a:75:eb:74:77:f5:b5:04:9c:7e:
9a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A4:29:E0:1F:13:41:16:A1:B4:C6:AC:69:C5:BD:E2:74:17:87:C0
X509v3 Authority Key Identifier:
keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
eb:5f:fb:44:82:75:26:57:5e:66:a8:67:96:fc:b2:2b:b7:9c:
cc:3e:3f:1d:b4:84:ab:d2:1d:80:73:10:ca:1b:20:6f:75:72:
73:73:f6:a4:b1:a2:40:56:90:4a:d4:64:10:9d:04:26:64:6a:
5c:45:5a:46:bf:74:2a:72:eb:da:3e:7b:02:79:93:b9:12:48:
08:d5:ae:7e:5c:24:aa:99:09:7f:db:50:76:d2:36:4f:59:6d:
cb:0b:b1:86:83:9a:c0:54:70:85:5d:2e:b1:53:15:57:0d:1f:
23:a5:32:84:8e:37:de:ea:68:7f:ae:b4:0e:d5:b1:d4:5d:b0:
9c:ca:b3:19:e2:df:0d:c4:42:1c:8b:0f:b7:a8:2a:9a:e6:3f:
9c:36:e2:ae:e8:f0:78:b8:54:72:c9:fb:07:39:f3:f2:d2:83:
61:e8:f3:25:de:f5:73:ee:26:b3:9e:38:95:25:1d:52:03:09:
29:34:f1:4d:83:54:e5:48:e7:11:0e:7e:e8:a2:37:c7:6a:45:
b7:12:8d:7a:b7:b0:0b:00:11:52:1b:b2:6c:d6:4b:e8:9a:8c:
f1:df:46:01:e6:a2:c9:e3:37:33:76:28:8d:92:25:49:80:ba:
96:b8:93:6e:4d:7a:f0:50:c8:d2:ef:a3:03:96:b8:a3:ab:21:
3c:80:6d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:12:12 2026 by rpki-client