
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
File: iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json)
Hash identifier: mp5VOmcM1HgYbggZVp+Z21sMeNDgHdXYsj9khjyrjjk=
Subject key identifier: 21:9D:58:C0:24:56:5A:10:B6:64:FE:83:56:F7:8F:73:8B:37:71:E9
Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86
Certificate issuer: /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86
Certificate serial: 08C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
Manifest number: 0A87
Signing time: Tue 18 Aug 2026 20:53:09 +0000
Manifest this update: Tue 18 Aug 2026 20:53:08 +0000
Manifest next update: Tue 25 Aug 2026 20:53:08 +0000
Files and hashes: 1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: F2Rk8ZE7/XVdEEScZVLUQyrsHeM0X8j7LnML99daIvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl
rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2241 (0x8c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86
Validity
Not Before: Aug 18 20:53:08 2026 GMT
Not After : Aug 25 20:53:08 2026 GMT
Subject: CN=6a84c634-5367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:0d:cc:75:4f:02:4f:c7:94:44:2a:34:aa:
44:67:71:bb:c4:1f:c9:89:2a:ef:aa:a5:d2:7e:52:
ce:d1:5f:f4:2b:8c:f2:34:62:90:f0:6e:cc:b3:61:
4e:df:10:f6:4a:b0:61:67:ef:63:74:b2:f6:84:da:
17:d8:08:be:80:dd:ae:81:56:e7:7e:c6:7e:67:37:
a3:1a:5e:87:0d:8b:bc:50:e2:71:16:6a:d5:e1:48:
08:5c:47:bb:f3:e7:bf:56:13:21:46:85:57:d2:6d:
31:d9:e8:e5:23:a2:ed:1d:9d:91:4c:f6:c1:79:6f:
f7:ef:3e:24:3c:4d:9f:83:04:19:99:e9:3c:4b:f0:
85:f5:92:14:84:39:95:47:35:93:f3:dd:c3:74:bd:
1d:51:c4:fc:cb:52:c8:1a:a3:92:a9:29:a4:d4:d0:
9c:ae:6e:1c:65:32:1d:33:a0:4b:f0:72:85:14:41:
50:df:4c:f3:fb:94:3c:b4:e2:fa:17:5a:cc:5c:b8:
33:49:92:04:4a:c9:e2:39:fe:ab:1c:3b:1f:19:8c:
5c:d3:32:6e:32:fa:0e:9d:8b:92:ff:a3:89:c3:b3:
c9:3b:9f:66:e1:29:e3:dc:35:18:a0:f5:0d:ba:bf:
b3:27:53:5c:67:f1:bd:6e:78:cd:d3:a0:07:3e:b0:
e7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9D:58:C0:24:56:5A:10:B6:64:FE:83:56:F7:8F:73:8B:37:71:E9
X509v3 Authority Key Identifier:
keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:e5:87:17:19:1c:66:d7:d1:7a:35:85:7b:f9:87:f5:5a:1d:
7d:c3:45:ca:2a:43:1d:39:3c:3f:af:91:e1:c9:4a:06:b4:5c:
9f:85:09:7b:67:9d:c1:4b:1e:e1:11:12:f1:e1:04:a5:69:99:
72:37:0e:fe:63:2a:8c:e0:35:75:43:3e:38:73:e8:07:ec:b2:
39:33:91:3f:a0:37:8e:92:24:59:19:76:71:ce:82:37:82:ae:
57:e6:fd:a8:69:e7:05:06:6b:76:d8:4f:17:ea:63:0f:d9:c7:
16:0e:e4:b6:86:64:4c:9b:33:03:59:1d:33:e2:b6:c2:6e:07:
22:bd:48:9a:36:49:01:51:be:78:3e:24:5a:88:9c:c8:d6:b5:
3f:d2:cb:a7:7a:91:47:fd:96:15:a3:e2:0b:34:61:8a:30:a4:
32:c1:1f:7c:7d:a1:65:5c:f3:d2:df:4c:74:a4:2a:83:4d:c1:
72:54:3c:db:83:04:60:d0:73:87:60:8b:82:b8:9a:c8:4c:f2:
ad:57:87:cc:01:42:b0:65:51:ee:24:08:50:a9:61:d5:22:b7:
16:b1:9d:47:d9:40:6d:53:29:b5:b7:a8:0a:ad:50:4d:97:9b:
6f:ea:89:99:58:98:c3:d4:bb:cf:36:c6:f7:44:30:b1:7a:39:
09:86:64:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:38 2026 by rpki-client