
$ rpki-client -vvf rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft
File: CIE_b-4hrwS022CvNj9a-H-JonU.mft (raw, json)
Hash identifier: P6RHPh1dczK9luZibk7dF/FJugWb5zmsjLcowW8vkaQ=
Subject key identifier: 22:79:73:74:25:C5:46:EB:DD:AD:62:6D:D9:C2:23:9C:1A:63:A7:37
Authority key identifier: 08:81:3F:6F:EE:21:AF:04:B4:DB:60:AF:36:3F:5A:F8:7F:89:A2:75
Certificate issuer: /CN=A91629F2/serialNumber=08813F6FEE21AF04B4DB60AF363F5AF87F89A275
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft
Manifest number: 24
Signing time: Fri 17 Jul 2026 10:11:25 +0000
Manifest this update: Fri 17 Jul 2026 10:11:25 +0000
Manifest next update: Fri 24 Jul 2026 10:11:25 +0000
Files and hashes: 1: CIE_b-4hrwS022CvNj9a-H-JonU.crl (hash: gBJywbqI4NKxTbP0AznQfKESYgaxYolKKza4Xt6PEww=)
2: 9577FE7C4C0B11F1996C5785A4833773.roa (hash: 0qEz6js7PBUojcJH/VQOhbzx5OAA1vw3c9ZuGNzrDdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.crl
rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91629F2, serialNumber=08813F6FEE21AF04B4DB60AF363F5AF87F89A275
Validity
Not Before: Jul 17 10:11:25 2026 GMT
Not After : Jul 24 10:11:25 2026 GMT
Subject: CN=6a59ffcd-f3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:87:f4:0d:90:48:99:da:42:f9:44:af:81:
ca:68:2a:b2:80:d1:4f:08:c0:92:ec:a5:c2:f3:a0:
9c:a9:20:f0:1d:72:47:85:e8:0a:59:28:4c:aa:c1:
79:80:de:94:da:1b:95:5a:8c:04:63:72:2e:27:e6:
c0:05:35:62:f8:3f:4b:90:d5:b6:78:fa:7d:df:4b:
eb:75:27:24:45:b4:61:14:90:b6:15:98:2b:86:47:
ff:ff:f6:7a:c6:02:c3:61:aa:ca:dc:28:e2:54:d7:
57:09:0c:11:cd:8b:38:9e:a9:a0:bf:f2:2b:c1:db:
c9:6a:25:63:33:93:f7:7f:4a:b4:cd:2b:23:f8:6f:
92:b6:9b:ab:7d:f8:b2:93:93:70:05:9f:b0:f2:9b:
ae:dc:c3:b5:57:bd:13:83:af:79:d2:85:06:fc:03:
81:44:ff:71:65:db:66:c1:e7:dd:c7:d6:7d:5b:6d:
2f:fc:70:fc:1b:8e:4b:7f:ee:d4:c2:2a:27:a0:76:
56:35:85:1c:3d:9a:6d:0b:71:6c:86:c0:a1:a8:ec:
6f:ca:69:9b:15:08:84:90:ff:a9:8d:7f:f6:a2:3d:
52:50:59:5d:e3:1d:1d:4a:e7:75:37:a1:62:76:b5:
ea:33:86:ae:20:4a:9e:c8:d2:7b:22:b4:1d:86:7f:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:79:73:74:25:C5:46:EB:DD:AD:62:6D:D9:C2:23:9C:1A:63:A7:37
X509v3 Authority Key Identifier:
keyid:08:81:3F:6F:EE:21:AF:04:B4:DB:60:AF:36:3F:5A:F8:7F:89:A2:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:f5:55:d8:df:5d:45:7e:34:06:5e:6b:77:78:6a:fe:bb:fc:
75:3d:c9:3f:f3:88:d0:d8:21:cb:b4:03:27:20:ff:bd:36:f7:
af:03:8d:bf:01:97:02:ba:5d:00:86:54:4e:b3:55:df:7f:48:
3c:c7:ac:eb:6e:26:f5:db:c5:59:9a:37:1f:4d:e9:b8:87:e8:
a9:98:5b:21:6d:7a:f0:b0:3e:18:db:0e:44:e1:ba:52:bc:74:
94:84:3b:b4:be:1b:ad:3e:3b:1c:43:9c:28:35:f8:c0:a3:91:
0c:6d:ef:da:3f:03:b0:40:cb:97:c1:4f:2c:96:2d:ab:a1:9d:
72:fa:73:1d:58:d8:b8:5e:ea:ae:f6:d0:06:7e:8a:ba:b3:22:
bf:7e:33:c5:00:0d:d3:e0:2e:5a:f4:5c:63:7d:15:49:60:9b:
69:16:51:f6:7a:1f:1c:e5:31:22:ed:45:1c:9e:87:35:54:8d:
e0:83:4c:25:96:4a:80:e4:d7:7f:95:fb:2d:e0:2d:a2:aa:cd:
11:8b:18:87:de:0b:6d:03:65:89:36:a3:70:e6:ca:09:53:e6:
62:4e:51:70:a3:f2:57:0c:24:41:d2:aa:18:51:1a:2a:1f:a7:
5f:4e:1a:e8:5b:82:ea:bc:02:c6:60:27:3c:10:27:92:fb:34:
49:68:d0:41
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MjlGMjExMC8GA1UEBRMoMDg4MTNGNkZFRTIxQUYwNEI0REI2MEFGMzYzRjVBRjg3
Rjg5QTI3NTAeFw0yNjA3MTcxMDExMjVaFw0yNjA3MjQxMDExMjVaMBgxFjAUBgNV
BAMTDTZhNTlmZmNkLWYzYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9FYf0DZBImdpC+USvgcpoKrKA0U8IwJLspcLzoJypIPAdckeF6ApZKEyqwXmA
3pTaG5VajARjci4n5sAFNWL4P0uQ1bZ4+n3fS+t1JyRFtGEUkLYVmCuGR///9nrG
AsNhqsrcKOJU11cJDBHNizieqaC/8ivB28lqJWMzk/d/SrTNKyP4b5K2m6t9+LKT
k3AFn7Dym67cw7VXvRODr3nShQb8A4FE/3Fl22bB593H1n1bbS/8cPwbjkt/7tTC
KiegdlY1hRw9mm0LcWyGwKGo7G/KaZsVCISQ/6mNf/aiPVJQWV3jHR1K53U3oWJ2
teozhq4gSp7I0nsitB2Gf0QTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUInlzdCXF
RuvdrWJt2cIjnBpjpzcwHwYDVR0jBBgwFoAUCIE/b+4hrwS022CvNj9a+H+JonUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyOUYyL0VCN0Y5QURFNEMw
NDExRjE4QTZGOEQ3OUExODMzNzczL0NJRV9iLTRocndTMDIyQ3ZOajlhLUgtSm9u
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQ0lFX2ItNGhyd1MwMjJDdk5qOWEtSC1Kb25VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy
OUYyL0VCN0Y5QURFNEMwNDExRjE4QTZGOEQ3OUExODMzNzczL0NJRV9iLTRocndT
MDIyQ3ZOajlhLUgtSm9uVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCG9VXY311FfjQGXmt3eGr+u/x1Pck/84jQ2CHLtAMnIP+9NvevA42/AZcCul0A
hlROs1Xff0g8x6zrbib128VZmjcfTem4h+ipmFshbXrwsD4Y2w5E4bpSvHSUhDu0
vhutPjscQ5woNfjAo5EMbe/aPwOwQMuXwU8sli2roZ1y+nMdWNi4Xuqu9tAGfoq6
syK/fjPFAA3T4C5a9FxjfRVJYJtpFlH2eh8c5TEi7UUcnoc1VI3gg0wllkqA5Nd/
lfst4C2iqs0RixiH3gttA2WJNqNw5soJU+ZiTlFwo/JXDCRB0qoYURoqH6dfThro
W4LqvALGYCc8ECeS+zRJaNBB
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:11:10 2026 by rpki-client