
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
File: iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json)
Hash identifier: 24RU0XzOd1kEak/ia0haajVkTam/RAi3LVdB5eyQ3ho=
Subject key identifier: C9:3B:16:50:60:EA:CD:33:E9:B7:45:D6:6C:BC:66:85:F9:33:43:96
Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
Certificate issuer: /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
Manifest number: 0191
Signing time: Mon 01 Jun 2026 05:08:58 +0000
Manifest this update: Mon 01 Jun 2026 05:08:58 +0000
Manifest next update: Mon 08 Jun 2026 05:08:58 +0000
Files and hashes: 1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: imRqPcAdbUt1yD/DkIDoBnAa7Kt7rcomWzLSllmw1kY=)
2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: 73ivG8eex7LmjOrNpv37VdMFlLl7/CFLhIGgaTnXkdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Validity
Not Before: Jun 1 05:08:58 2026 GMT
Not After : Jun 8 05:08:58 2026 GMT
Subject: CN=6a1d13ea-5218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:7e:89:04:e8:31:5b:0b:5e:5b:e8:f8:d1:
af:40:23:6a:9c:e6:ab:c2:6f:98:76:03:a2:7b:58:
af:5c:c1:f6:fb:a7:e7:28:2d:1e:fd:e2:ef:64:6a:
3f:dc:e2:9e:34:91:cf:20:24:cd:79:12:25:fe:65:
82:1d:2a:36:9f:8b:0e:af:f2:19:bd:df:20:06:bb:
b7:75:ad:05:e9:f5:1b:52:2b:1f:f4:f3:f5:be:a4:
b6:92:5d:f1:2b:20:ee:cd:ad:5d:27:ba:dd:53:c2:
04:45:ed:35:2b:d3:4a:8e:22:4b:9a:b1:29:2e:02:
ae:4e:cb:88:ea:70:68:92:ce:a5:1e:7e:c3:58:54:
d5:79:5f:9d:96:18:5f:dc:df:c5:be:f0:83:ed:c4:
1d:aa:37:4a:93:3f:13:21:45:7d:2e:e0:4e:03:f0:
35:70:ad:d6:52:34:b6:37:1c:fe:74:60:cb:56:1b:
1b:56:93:28:c1:d7:f6:85:6b:cd:35:45:01:35:4c:
c2:62:9a:e0:a4:61:79:4f:74:a8:d6:a3:e1:0f:9d:
74:39:38:bb:c5:46:7b:8d:e1:75:30:8a:bb:76:95:
a4:a5:37:06:52:a6:b7:7f:67:98:dd:09:33:c1:a7:
36:23:4f:27:5a:66:e8:7e:95:56:7f:88:83:57:19:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3B:16:50:60:EA:CD:33:E9:B7:45:D6:6C:BC:66:85:F9:33:43:96
X509v3 Authority Key Identifier:
keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:91:69:1e:f4:a3:8a:43:df:de:53:6f:a8:d3:24:52:9e:02:
f2:5d:c4:40:b4:17:40:04:16:03:ae:65:f6:4b:d0:11:df:a8:
69:76:68:3a:a9:c1:bd:3d:8e:90:45:35:e3:8c:66:7c:b9:bf:
f0:fa:d2:a0:c8:57:75:33:cd:f8:f3:68:0e:86:05:e5:e3:d1:
7d:38:9a:4c:20:3c:da:4f:15:22:9e:03:87:0e:41:2c:31:1e:
0b:92:36:ab:e1:e9:e8:d1:89:ae:50:1f:0c:f0:52:1c:f4:14:
30:ee:1f:17:64:78:47:96:1b:5a:bd:e7:21:1d:cc:b7:19:93:
b4:0f:f2:d9:85:9d:45:bb:f2:3f:0d:71:f8:54:df:79:14:50:
9b:2d:ad:1f:cf:05:49:94:be:19:48:12:9a:e4:b3:d2:d0:fc:
e3:c6:70:5e:a5:b0:c2:10:45:1e:04:02:1b:13:f6:67:19:50:
69:89:c8:e3:36:02:07:d1:1a:e7:d8:f1:d9:4d:6c:d7:f2:24:
9c:74:9f:7d:f4:57:df:92:09:b6:a7:9d:72:df:20:6e:b1:23:
86:f0:f5:12:79:3c:81:df:24:f5:dc:15:ed:a5:c7:0b:f5:f2:
53:f4:b1:87:25:42:93:06:21:34:47:68:4d:02:f8:ae:ae:1f:
fc:07:a8:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZEQTcxMTAvBgNVBAUTKDhBMjgyRDFDOEY5MEMzMEQ2NTlFNkQ4QzBCOUJFNDIy
MUMyNTMxOUMwHhcNMjYwNjAxMDUwODU4WhcNMjYwNjA4MDUwODU4WjAYMRYwFAYD
VQQDEw02YTFkMTNlYS01MjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuT5+iQToMVsLXlvo+NGvQCNqnOarwm+YdgOie1ivXMH2+6fnKC0e/eLvZGo/
3OKeNJHPICTNeRIl/mWCHSo2n4sOr/IZvd8gBru3da0F6fUbUisf9PP1vqS2kl3x
KyDuza1dJ7rdU8IERe01K9NKjiJLmrEpLgKuTsuI6nBoks6lHn7DWFTVeV+dlhhf
3N/FvvCD7cQdqjdKkz8TIUV9LuBOA/A1cK3WUjS2Nxz+dGDLVhsbVpMowdf2hWvN
NUUBNUzCYprgpGF5T3So1qPhD510OTi7xUZ7jeF1MIq7dpWkpTcGUqa3f2eY3Qkz
wac2I08nWmbofpVWf4iDVxkrdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMk7FlBg
6s0z6bdF1my8ZoX5M0OWMB8GA1UdIwQYMBaAFIooLRyPkMMNZZ5tjAub5CIcJTGc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80NUJDRkMzMEZE
MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9paWd0SEktUXd3MWxubTJNQzV2a0lod2xN
WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lpZ3RISS1Rd3cxbG5tMk1DNXZrSWh3bE1ady5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkRBNy80NUJDRkMzMEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9paWd0SEktUXd3
MWxubTJNQzV2a0lod2xNWncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ5FpHvSjikPf3lNvqNMkUp4C8l3EQLQXQAQWA65l9kvQEd+oaXZoOqnBvT2O
kEU144xmfLm/8PrSoMhXdTPN+PNoDoYF5ePRfTiaTCA82k8VIp4Dhw5BLDEeC5I2
q+Hp6NGJrlAfDPBSHPQUMO4fF2R4R5YbWr3nIR3MtxmTtA/y2YWdRbvyPw1x+FTf
eRRQmy2tH88FSZS+GUgSmuSz0tD848ZwXqWwwhBFHgQCGxP2ZxlQaYnI4zYCB9Ea
59jx2U1s1/IknHSfffRX35IJtqedct8gbrEjhvD1Enk8gd8k9dwV7aXHC/XyU/Sx
hyVCkwYhNEdoTQL4rq4f/Aeo1A==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:44:02 2026 by rpki-client