
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
File: e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json)
Hash identifier: mzczuxVXDUnVlHc29EkMNm0egD17HdjtJ5RkwkKE98w=
Subject key identifier: 16:04:D1:4C:22:B2:5B:AA:72:47:AF:48:FE:BA:2A:7D:FF:AF:BE:2C
Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
Manifest number: 0213
Signing time: Thu 03 Sep 2026 03:15:57 +0000
Manifest this update: Thu 03 Sep 2026 03:15:56 +0000
Manifest next update: Thu 10 Sep 2026 03:15:56 +0000
Files and hashes: 1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: exgdSr2yGG6ruEaYo1E5Pz2MvqPC2qo1WO2pABNzbH0=)
2: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (hash: 5n/vT2aN9VzYjANmFIq1/DcSFVdlgCzkvZzjJSAeg2Q=)
3: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: W9lanvtL2q9XwYCNQGMdXKdQrewpCRyS44URbarRexc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl
rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 03:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Validity
Not Before: Sep 3 03:15:56 2026 GMT
Not After : Sep 10 03:15:56 2026 GMT
Subject: CN=6a98e66d-eb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:69:95:22:e3:ed:f9:1e:bd:90:ca:01:ac:a1:
fc:0c:cd:9d:05:4e:cd:54:f7:d7:95:51:25:4e:29:
ec:74:d8:f8:0b:8c:a5:60:06:0c:fb:37:71:ef:b5:
8b:64:67:66:76:c4:f8:c9:8d:e9:a5:32:c7:c0:7e:
91:92:d5:c5:51:c9:a2:2a:72:a6:2e:eb:e9:05:5e:
23:15:98:85:d2:46:5c:05:e8:5c:bf:cc:50:ec:1a:
86:33:0a:ff:d0:63:ea:5d:94:f6:fd:f3:5d:a2:58:
28:75:fe:a2:30:ba:85:50:09:00:78:f2:18:ce:ca:
ed:77:f4:ba:34:8c:9c:5e:03:a9:7d:f5:90:04:c1:
f7:11:45:c2:27:52:15:7e:56:d9:e9:d5:32:03:f3:
93:07:44:48:a5:76:a8:30:ee:53:2e:eb:d8:e6:2a:
cd:ad:ca:e1:0a:00:e7:1c:d1:ad:4a:3b:08:5e:eb:
49:f3:9a:47:b9:e7:53:a5:d4:10:bb:bd:0d:6a:47:
a3:66:00:71:07:f0:e5:11:b4:81:82:ff:c7:bd:fb:
43:2c:a1:71:25:83:cc:36:2f:c0:73:1f:f6:e0:60:
26:c6:5c:ba:fd:bf:56:96:40:01:01:76:90:51:0e:
03:68:9d:3a:c3:2c:48:0e:d6:62:9e:46:03:ea:f5:
72:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:04:D1:4C:22:B2:5B:AA:72:47:AF:48:FE:BA:2A:7D:FF:AF:BE:2C
X509v3 Authority Key Identifier:
keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:ac:9d:d5:ea:92:cb:08:f3:8e:d7:24:56:4d:54:5a:29:fc:
f9:85:9d:e2:fe:a8:76:89:61:d4:04:f7:ad:0d:ee:c5:fe:56:
75:02:e4:3b:d6:25:31:e0:19:35:3c:a7:fb:f8:8a:c6:f1:32:
9c:a7:f1:90:7a:0c:c1:59:17:90:aa:3a:1a:51:49:0d:16:b0:
e5:67:8e:a5:de:73:82:a2:bb:6d:fe:17:8c:e6:03:b2:e9:4b:
a3:87:13:38:ae:79:77:a4:de:ac:7d:48:c0:82:18:88:44:ad:
b8:cb:57:d6:a0:3d:4a:2f:c7:78:97:47:2a:48:e7:3c:80:c9:
0d:8c:78:86:9f:47:6c:8a:b5:bc:c6:ae:a6:2b:95:95:fc:88:
48:07:40:6e:19:03:e5:b1:f7:12:b2:ff:be:98:25:ab:1c:2f:
31:18:e1:e1:d7:d0:75:22:3c:f1:40:b7:a2:ce:f1:55:2f:71:
18:c9:5f:fe:80:86:03:d8:c7:79:f0:fc:bc:b2:55:a8:67:7d:
0b:c0:d8:af:29:76:86:12:30:d2:7b:f3:8d:65:c8:6e:6a:be:
8f:9c:bf:52:10:db:3f:97:81:d8:9c:0c:dc:28:ce:68:99:27:
0d:f2:6b:12:fc:bb:da:25:6f:62:1c:23:b2:e7:84:6e:86:9a:
b5:0c:a0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:17:40 2026 by rpki-client