
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
File: iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json)
Hash identifier: SLwlbzmtWj+em/jbOYMHPgFZBlmvuhcqx1vta5ggdso=
Subject key identifier: 3A:F5:BD:9B:5A:9F:BD:4A:37:E0:BD:75:23:CB:B5:43:2A:CD:F6:27
Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
Certificate issuer: /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Certificate serial: 016D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
Manifest number: 0163
Signing time: Tue 03 Mar 2026 04:33:20 +0000
Manifest this update: Tue 03 Mar 2026 04:33:19 +0000
Manifest next update: Tue 10 Mar 2026 04:33:19 +0000
Files and hashes: 1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: vqfg5JplhcaFbzcKPkymuA+adMzcXsWtSXHgQZfJ2Tk=)
2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: 73ivG8eex7LmjOrNpv37VdMFlLl7/CFLhIGgaTnXkdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Validity
Not Before: Mar 3 04:33:19 2026 GMT
Not After : Mar 10 04:33:19 2026 GMT
Subject: CN=69a66490-962a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c6:57:43:fd:eb:f9:4d:3f:bd:c5:5d:f3:6c:
6a:7a:ec:8c:74:59:99:fa:f6:2c:20:8d:48:ef:65:
c2:02:e4:12:11:32:83:2b:7f:fa:88:80:77:c1:3c:
2b:3e:5a:67:13:b5:a1:89:08:76:59:da:ed:1a:a0:
f4:0b:13:0d:01:3f:de:ed:ae:1c:74:91:34:16:13:
1a:b6:0f:76:42:5b:20:57:cf:0a:d6:ad:36:58:12:
9c:9f:31:f7:31:c7:d2:06:8f:99:0e:4c:8d:c5:46:
93:4b:2a:79:78:33:c6:a8:ee:b4:ef:36:1f:8a:bf:
e8:6c:85:3d:84:60:92:45:d6:aa:dd:46:88:55:2b:
0b:67:8f:8e:de:36:51:21:b0:50:bc:e3:9c:a1:79:
8c:1f:55:d6:1d:0a:eb:dc:8e:ab:68:91:38:f9:48:
97:75:f6:43:64:00:8e:1d:b1:e1:48:83:dd:69:0b:
dd:8d:8b:c0:1f:46:fe:e3:ca:a0:04:04:fe:40:8d:
09:0d:90:fe:a4:86:56:ce:12:f2:0d:c6:16:a9:f5:
10:66:b1:d6:1b:bf:c1:66:42:e4:16:81:3f:0a:6d:
3a:a0:7f:3c:a8:4c:06:59:5f:c1:c1:0b:15:cd:c9:
ed:d8:7b:e1:b5:e9:e1:93:76:58:90:8a:99:da:f3:
e6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F5:BD:9B:5A:9F:BD:4A:37:E0:BD:75:23:CB:B5:43:2A:CD:F6:27
X509v3 Authority Key Identifier:
keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c9:e0:18:34:7a:04:be:f0:62:73:c2:03:4a:05:43:72:e1:
5e:54:e3:e9:c2:98:d1:85:47:20:34:c8:28:1e:d5:02:2d:ad:
5b:2a:d8:0d:bf:ea:2d:13:63:7a:f1:ad:e8:33:38:35:62:a1:
cf:a5:9c:7f:09:68:10:99:a4:07:93:ef:3f:08:5e:ad:05:f2:
20:7c:2b:1c:4a:2c:f7:a8:f0:6e:4a:d3:70:aa:0c:9a:09:f1:
b0:6d:cd:b4:97:85:2e:c1:7b:08:8e:f1:53:cd:c5:ab:14:95:
39:f7:33:e1:89:7d:cf:0f:2d:7f:8c:10:62:aa:44:3d:97:6c:
b3:16:ed:62:20:f7:73:32:2b:7c:8c:0b:de:79:da:2f:e7:ae:
83:95:58:3a:c0:e3:9a:f6:bd:2b:1d:a3:70:a5:f4:0c:c9:64:
fc:c9:b1:3b:68:4c:ef:ed:7f:06:6f:68:42:8a:e6:ce:fa:e3:
be:dd:12:8c:58:45:8d:bb:94:01:33:cd:36:4f:71:27:1b:75:
ea:e3:1b:20:da:ed:76:85:bc:e0:64:62:6b:7f:93:36:72:85:
75:64:d5:f3:1c:d2:ae:c4:e0:68:3e:ca:73:8b:da:ab:66:45:
ba:98:50:c0:e3:32:d2:36:07:93:b0:e9:5b:a5:22:ee:a8:10:
2f:ed:f5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:29:00 2026 by rpki-client