
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File: iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier: tmCMHxb8rAh5M1wUgRqzB2oAWAlH46f3Obt3bt7Crzg=
Subject key identifier: E7:21:DE:BF:DA:4F:94:A6:26:9C:2A:C4:8B:66:96:54:3A:91:B6:43
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer: /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial: 107B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number: 105F
Signing time: Sun 30 Aug 2026 17:24:46 +0000
Manifest this update: Sun 30 Aug 2026 17:24:45 +0000
Manifest next update: Sun 06 Sep 2026 17:24:45 +0000
Files and hashes: 1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: ZR/7/Go3goalEQJcq4YkxDBd/ST+3iRxSMgzfB9iGss=)
2: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: Ri/V1vsZYZSf3Iiz5nBojjsApKtj70HrLpdneU/NrfM=)
3: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: JR72/EZy5aRrSFB9vWQMg1q1NBXm5hj69ANbCPmEu98=)
4: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: XvZz5Qg4UuABOAvZL3TrqvqvGORz9Mmy5LeD7IN22s0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 17:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4219 (0x107b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Validity
Not Before: Aug 30 17:24:45 2026 GMT
Not After : Sep 6 17:24:45 2026 GMT
Subject: CN=6a94675d-45f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:09:d4:f8:f4:b7:7c:01:c1:91:74:1b:de:
06:2f:63:33:29:80:0c:a2:58:60:c7:7c:87:b4:92:
a8:55:be:29:d9:e5:0d:82:e9:55:44:c4:ea:fe:a0:
8c:17:3b:9b:c8:60:a6:ea:89:fe:c7:8a:f9:37:06:
84:09:bc:d6:07:1f:2c:4b:e9:ea:cd:6b:97:73:0c:
89:c2:19:c2:eb:60:80:b4:30:1e:0b:cd:a3:94:d9:
2f:8b:59:79:fb:fd:f3:4a:ae:5e:03:fd:d8:3c:cf:
ef:f7:21:95:18:e4:77:2b:cd:37:b7:54:51:e9:54:
62:3f:c5:34:2e:37:d4:b2:9b:ad:e6:b3:2e:82:9c:
0a:b7:9d:a7:34:9d:73:b9:09:82:8f:74:2b:5c:c4:
07:4e:4b:69:31:b8:65:a9:02:b6:0a:f9:7b:76:e9:
36:6a:92:04:55:44:c4:37:be:8b:49:e4:26:d2:fe:
8a:73:d5:37:a6:2f:65:41:fa:1d:2f:55:0a:60:2f:
89:f7:cd:11:bc:41:1d:c0:2c:0b:64:63:0c:9e:a9:
76:bd:1a:9e:7e:d8:f6:88:8d:d6:e4:e9:eb:25:67:
04:22:4e:a4:de:02:87:0f:6d:37:d9:1d:e5:2f:94:
5c:87:ca:dc:d2:f7:87:f3:ca:46:90:14:9a:e9:56:
1a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:21:DE:BF:DA:4F:94:A6:26:9C:2A:C4:8B:66:96:54:3A:91:B6:43
X509v3 Authority Key Identifier:
keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:7e:06:3e:c8:ea:c6:e2:ae:0a:c7:c8:c0:39:2f:39:31:09:
18:e0:39:9c:63:d6:54:a5:db:0b:65:f2:33:c1:8a:1e:86:23:
c6:bc:20:6c:02:97:6e:cc:6b:90:f0:46:c3:a9:87:d2:70:bd:
d1:ba:7e:b9:2d:38:fd:e8:45:0a:e0:bb:da:4d:a3:92:e5:09:
cf:51:96:31:37:13:32:d2:42:39:6b:e3:28:23:59:4d:64:2c:
30:a1:6c:41:cc:f1:eb:da:d9:21:0d:c0:72:c4:f8:cd:b9:f8:
f5:d2:50:11:43:b8:8d:39:11:f1:b0:b3:e9:78:ed:27:31:24:
05:e6:43:08:d7:47:42:47:76:37:b5:4c:1d:c8:ec:1d:33:62:
0e:fb:d6:99:10:ee:5a:15:6c:70:ce:a5:5d:8c:d6:e6:a0:4d:
29:15:14:11:59:0c:72:31:a3:72:74:ef:a7:47:09:6e:e9:4d:
94:ff:78:88:03:eb:ae:28:df:58:ac:b4:49:54:9e:b5:9a:cf:
99:78:97:95:36:f8:23:86:eb:63:5d:42:73:c7:97:1b:1a:4a:
92:50:44:a4:f7:3d:7e:48:72:37:98:c8:ee:1f:35:9d:62:cd:
e9:dc:1a:98:d0:62:71:3c:c3:90:fd:00:2f:73:69:02:d1:f4:
ed:e2:18:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:37:38 2026 by rpki-client