
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
File: iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json)
Hash identifier: lUFssCyVG9SvJO0n8r4nMnfsF9at8jKXIgTZhCbdLuc=
Subject key identifier: 2B:9B:09:EB:CB:FB:BB:49:23:12:A8:E8:94:6B:F0:B7:3D:7B:1A:0F
Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86
Certificate issuer: /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86
Certificate serial: 08A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
Manifest number: 0A56
Signing time: Sat 04 Jul 2026 20:46:05 +0000
Manifest this update: Sat 04 Jul 2026 20:46:04 +0000
Manifest next update: Sat 11 Jul 2026 20:46:04 +0000
Files and hashes: 1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: +ovIAdOFkzAH/LhKLgBeYrTgUfAsqhiKLkAYZ01X4mg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl
rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 20:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2217 (0x8a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86
Validity
Not Before: Jul 4 20:46:04 2026 GMT
Not After : Jul 11 20:46:04 2026 GMT
Subject: CN=6a49710d-4869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:d4:64:9d:74:df:21:2e:bd:cb:3c:7e:c3:
b5:2e:ce:df:de:1d:b7:b5:4b:59:9b:12:99:ab:9b:
cf:1c:fe:7e:fb:ad:16:00:e5:8e:d0:24:92:15:82:
27:64:3a:dd:3c:5b:c7:91:40:3a:fe:fc:8a:7d:e6:
15:5d:07:74:c4:81:0f:30:08:55:87:cc:f1:79:5b:
2f:a4:d6:f0:de:83:6f:62:99:10:5d:51:26:39:c4:
0d:9b:cb:a0:1b:50:ff:89:68:c1:31:db:e7:2a:da:
c0:23:6d:ab:b5:38:4d:3d:ff:1d:dd:43:bb:de:d1:
ba:5e:64:83:db:d8:d0:ea:fa:6c:ac:8f:e2:2e:18:
84:a8:9b:5a:e7:1e:8d:a8:8b:af:08:b1:1f:81:46:
ea:73:ee:3d:93:2e:eb:9b:53:75:d4:61:b0:cc:f1:
6d:cf:69:2d:a3:c4:b7:2e:8d:88:5c:f4:e9:9c:2c:
d9:b0:cd:03:b4:df:35:bd:ae:61:ef:b3:68:58:fe:
e1:8c:70:43:bb:63:19:51:b7:00:a4:4f:86:05:f1:
c2:68:52:6c:67:e7:d3:7f:df:16:25:f7:ba:f2:39:
b8:ca:53:2d:ed:a6:c2:48:e1:a0:ca:92:c1:fd:43:
2c:fb:57:44:5e:b7:07:80:02:86:5e:a5:78:fa:d6:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:09:EB:CB:FB:BB:49:23:12:A8:E8:94:6B:F0:B7:3D:7B:1A:0F
X509v3 Authority Key Identifier:
keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ce:d3:28:f7:16:26:f4:ce:cb:b3:26:00:57:50:63:92:d7:
4f:6a:e1:fd:63:bc:f3:00:0a:6e:08:1c:3a:9a:39:74:6a:e4:
c1:85:37:e3:4b:76:e1:c2:e9:6e:7d:5b:33:ca:71:df:f0:21:
bd:94:3f:b6:b3:ba:73:66:26:54:56:15:c9:b5:12:38:4a:2c:
99:ca:35:ee:d0:1c:b2:84:02:e8:99:8b:29:4e:39:bd:b1:3b:
4a:e5:55:a6:c6:12:d9:aa:58:55:39:17:9b:31:b2:e3:99:5f:
ad:c5:90:7c:85:45:d7:ed:a2:0a:f2:2d:52:48:a9:82:f7:a5:
46:3c:cb:dd:82:cf:f3:fb:bc:60:3d:8b:2a:1e:89:1d:88:c6:
cc:24:f1:3a:db:60:4b:a0:c1:de:44:e2:bf:ad:2a:25:60:66:
e3:d8:f0:0b:32:e4:4f:94:34:a4:a5:f9:49:ec:dc:9e:f3:59:
fd:96:87:9b:ef:24:33:63:11:e8:b6:46:63:46:3c:2e:7f:b6:
c4:bc:19:01:c6:c9:f1:59:9f:b8:84:af:2e:66:24:53:68:64:
17:09:38:2d:7a:cc:09:67:8e:a4:b9:51:1e:91:d9:4b:34:f3:
48:54:8b:27:fa:ef:dc:d1:30:a9:9d:b5:13:5b:53:5f:ff:91:
0c:6e:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:44:48 2026 by rpki-client