
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
File: iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json)
Hash identifier: qJ/WFWTj2/+LxRE81sZSwfzTCPO/viJg59cDUxS0VWQ=
Subject key identifier: 02:EC:0E:87:23:AB:42:AD:19:DC:DD:A6:15:BF:D3:04:01:91:F9:C4
Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86
Certificate issuer: /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86
Certificate serial: 08DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
Manifest number: 0AB9
Signing time: Tue 06 Oct 2026 20:36:47 +0000
Manifest this update: Tue 06 Oct 2026 20:36:46 +0000
Manifest next update: Tue 13 Oct 2026 20:36:46 +0000
Files and hashes: 1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: V7Ir2/2D9Tl6qfxZ5Qv7gXBlbJyfNjbGaTlgjtZ1ypo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl
rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2266 (0x8da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86
Validity
Not Before: Oct 6 20:36:46 2026 GMT
Not After : Oct 13 20:36:46 2026 GMT
Subject: CN=6ac55bde-8f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:0b:17:34:29:f0:4b:05:67:61:49:5b:36:
39:85:9f:7f:28:05:e2:41:fb:28:cd:52:df:40:fb:
99:3a:d5:2d:d2:6f:78:92:1b:d9:dd:54:5d:ff:e6:
4e:f9:e0:81:d4:33:79:b6:38:c5:58:4b:95:fb:7f:
93:78:01:58:06:9f:bf:76:7a:f6:73:34:5c:e9:68:
c9:37:23:27:2c:29:86:c2:43:a0:2a:97:72:58:fa:
34:72:c7:5d:46:3a:aa:d4:8b:a2:5e:74:cd:c7:0b:
54:cc:9d:33:a6:ba:43:e5:2f:01:54:f8:98:66:a0:
f7:8e:fa:3a:f4:ae:ca:b5:04:50:0c:0e:f0:09:c4:
ed:a6:f4:65:46:bc:68:7b:bd:b3:11:c3:f1:5e:b4:
64:2e:25:b2:2a:bd:b5:35:e5:85:92:ed:74:b0:1b:
03:07:d4:80:32:69:55:9f:6d:6c:a4:87:f1:65:05:
ca:83:9b:9e:33:1a:6b:26:b1:28:0d:cc:56:e7:67:
3d:33:63:2f:16:23:da:1d:84:8d:9b:d4:24:7e:a3:
ae:18:8f:e7:4b:d8:e2:8e:a3:19:5a:ae:e1:ed:f3:
f2:56:0e:21:9b:98:ce:f7:1f:e8:83:ec:ec:97:65:
5e:91:83:7b:2b:f1:0d:98:4e:00:34:16:e3:28:a2:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EC:0E:87:23:AB:42:AD:19:DC:DD:A6:15:BF:D3:04:01:91:F9:C4
X509v3 Authority Key Identifier:
keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a3:11:81:15:ce:e4:52:b3:3c:c3:49:fb:ff:0e:ca:e5:0d:
c9:ba:9e:7d:e4:89:46:15:43:53:d0:10:33:50:b6:ff:93:84:
da:7d:7f:35:8c:93:05:0c:92:e2:04:76:ae:74:f6:b7:91:35:
80:8b:03:0d:93:de:77:0e:a5:94:1e:dc:68:fe:d7:18:0a:17:
d4:e5:81:b0:95:4f:7c:4d:ee:cd:a2:5a:f4:b4:f5:5e:4e:d7:
63:98:19:e6:95:7d:57:79:60:89:95:c1:71:27:a7:3f:d0:c8:
a4:6d:ac:f2:19:e7:c5:df:ee:2a:f4:36:bf:58:c2:87:ee:c4:
c1:95:fb:c2:c8:5e:ca:82:c4:da:96:c4:18:c4:1a:d9:1f:1e:
0e:f5:86:12:88:5f:2d:58:bd:1d:f9:c1:30:46:2e:46:a4:61:
99:1a:d3:1a:d2:13:5b:e5:e9:dc:7e:7e:00:44:f9:b3:08:d0:
d5:14:1d:b9:99:3b:76:ed:9c:a6:03:06:35:39:d3:47:7a:85:
72:f6:91:8c:69:ea:98:39:ea:54:84:49:22:ae:13:93:2e:d1:
e2:9d:a7:83:c6:4f:3c:76:34:39:36:6f:09:aa:a4:23:38:33:
cd:eb:28:ad:e0:f0:17:ab:18:f7:c6:d2:b9:de:9b:f6:04:67:
cc:f3:7e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:24:57 2026 by rpki-client