
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft
File: IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft (raw, json)
Hash identifier: Z0hxgGK8Go8fPwmDsdkFwllbktuvyjENpy1W9GnH+5g=
Subject key identifier: CD:7E:0E:45:AE:91:F5:F2:97:CC:F1:AE:9B:43:0C:B6:DA:E7:2C:B4
Authority key identifier: 21:81:BF:BD:A4:53:6E:98:C8:54:B8:3C:12:FA:6C:AC:F3:C8:F6:C4
Certificate issuer: /CN=A915CF84/serialNumber=2181BFBDA4536E98C854B83C12FA6CACF3C8F6C4
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft
Manifest number: 2E
Signing time: Fri 17 Jul 2026 09:59:07 +0000
Manifest this update: Fri 17 Jul 2026 09:59:06 +0000
Manifest next update: Fri 24 Jul 2026 09:59:06 +0000
Files and hashes: 1: IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl (hash: YvrEipZFwfL1DXzpIR16l4gxYEdcMABb4qjFRul+DZc=)
2: D13F8D3A3C9811F1A7092461A3833773.roa (hash: Y1MSrA58sZfZcObah4zCDcRiu+6k10Md9q8BKTCP3rk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl
rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CF84, serialNumber=2181BFBDA4536E98C854B83C12FA6CACF3C8F6C4
Validity
Not Before: Jul 17 09:59:06 2026 GMT
Not After : Jul 24 09:59:06 2026 GMT
Subject: CN=6a59fceb-2537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:62:af:18:32:bb:ae:92:7d:52:60:ab:e5:
f7:2a:89:0e:12:47:99:a3:87:99:d6:d0:19:ba:03:
8a:49:82:26:f1:ab:fb:62:94:19:68:da:5d:65:b4:
78:53:4a:cc:ec:29:22:a0:3a:82:84:83:3d:ff:80:
fc:c6:1e:04:08:c5:03:ba:9b:cb:d5:dd:48:8a:c5:
a7:c7:e3:1c:ac:b2:92:37:ca:50:c6:8e:0f:56:e3:
10:58:af:fd:a8:53:30:f9:77:8b:74:77:62:24:ff:
98:59:20:78:5f:96:4d:14:ab:31:6b:81:3a:a0:33:
11:7e:53:83:3a:eb:0b:1a:75:5c:97:7c:f2:75:c7:
65:9d:00:c7:ce:41:ea:de:d9:e5:4f:07:60:38:fd:
88:0d:43:ad:67:09:3e:47:05:6a:d8:ab:01:e1:11:
ee:57:3d:1a:f4:65:b9:ce:c6:99:71:86:15:7f:cc:
64:7e:11:fe:80:63:98:35:e2:52:88:ca:d6:29:95:
3d:87:27:c4:50:52:9f:12:ff:b7:53:c9:3f:eb:e7:
ce:f0:ab:53:62:25:b3:17:b0:db:66:3e:df:d9:d8:
af:9b:3c:72:8d:c9:f6:d7:a4:ad:90:52:90:10:1e:
e0:cb:ec:0c:95:0f:86:1a:24:ca:71:7e:8d:66:b1:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7E:0E:45:AE:91:F5:F2:97:CC:F1:AE:9B:43:0C:B6:DA:E7:2C:B4
X509v3 Authority Key Identifier:
keyid:21:81:BF:BD:A4:53:6E:98:C8:54:B8:3C:12:FA:6C:AC:F3:C8:F6:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:60:a2:a0:d2:63:02:71:78:8f:fe:1b:fd:ee:9a:67:97:2f:
4f:3d:f0:a3:0b:8d:c1:46:39:a3:9e:10:1f:4d:7a:f7:2e:e2:
3f:da:f2:e7:3c:e2:eb:05:5e:0f:2a:11:8c:fd:53:87:e6:e0:
7c:d2:b9:b3:bd:12:0d:08:be:93:22:70:10:b0:2b:65:a8:98:
59:bf:ab:b6:cd:e3:a8:8d:90:6b:32:48:ef:34:ed:79:7d:e1:
26:4c:56:41:0d:db:92:55:60:5e:26:a5:08:81:cd:2d:fe:bf:
ab:d6:1c:e4:f0:30:ef:70:2f:48:ac:42:c8:2b:af:55:b6:3f:
94:06:49:ff:e2:2d:42:d0:9f:bd:fe:85:d9:32:81:56:ad:b3:
72:5c:0a:e6:be:6c:31:ce:80:c9:f0:7d:70:cd:a5:1a:f5:13:
01:27:3d:62:aa:7a:7c:50:ea:61:54:b4:57:04:fe:85:bf:e8:
10:43:d5:0a:56:24:08:ad:b6:72:0d:6b:db:2f:99:0f:4a:b4:
39:cc:7c:c8:f3:c7:11:b7:6e:4d:db:3d:44:f8:69:f8:22:cd:
e9:3a:9d:dc:66:79:d5:55:18:76:dc:26:b7:87:2a:a7:79:e6:
d1:d9:a7:bd:39:3e:f4:ea:e6:2d:3f:29:24:2a:e3:90:48:23:
b6:2a:0a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:31:10 2026 by rpki-client