
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
File: iaGX0JdonG6zOGepzIrM1_s2Tok.mft (raw, json)
Hash identifier: dCwjT3qIQo/vrQfFr4Zo1GHLlVLtVhFn2WkKKXzAiRQ=
Subject key identifier: 14:6A:89:5E:BC:DB:99:89:09:81:41:BF:19:5A:DE:BE:62:A7:2F:BB
Authority key identifier: 89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89
Certificate issuer: /CN=A917991B/serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89
Certificate serial: 054B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
Manifest number: 053E
Signing time: Sun 04 Oct 2026 23:34:02 +0000
Manifest this update: Sun 04 Oct 2026 23:34:02 +0000
Manifest next update: Sun 11 Oct 2026 23:34:02 +0000
Files and hashes: 1: iaGX0JdonG6zOGepzIrM1_s2Tok.crl (hash: UVba6/52aCm1aTKQ74juTQt34gEOUMpOIGJLAmlyKvo=)
2: E82DE3C290AB11ECAB81252FC4F9AE02.roa (hash: PglW3T12IKlMircnLLUZ33j6kRlzVW56A2kCHbmh2rY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl
rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355 (0x54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917991B, serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89
Validity
Not Before: Oct 4 23:34:02 2026 GMT
Not After : Oct 11 23:34:02 2026 GMT
Subject: CN=6ac2e26a-29a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:48:45:78:1c:17:c8:b6:a1:f7:65:ed:0e:39:
89:f2:5a:e1:67:dc:c5:51:7d:3d:39:b5:92:e6:66:
f0:62:81:05:9e:4c:95:a1:e6:02:3c:29:e5:f2:6e:
38:72:c1:fd:e2:61:d1:e9:b3:1a:bf:79:18:fa:74:
2d:db:92:10:1a:98:61:b7:27:a8:69:ed:d4:82:36:
a3:5c:87:b6:14:4c:2c:23:82:15:d0:ee:34:bb:fe:
ed:7a:6e:7f:86:fe:5a:0f:6c:4f:f1:22:68:ff:a6:
bc:b5:68:89:76:c7:29:2c:ad:d0:03:db:f3:7d:d2:
20:eb:fc:ec:1c:62:14:df:aa:1e:34:a1:17:7f:56:
eb:45:90:fb:1f:41:03:bb:41:29:ef:f5:68:b2:77:
b9:3f:0f:30:e1:d6:52:ac:c8:69:f3:3a:30:80:cb:
23:0f:6b:04:a5:eb:c1:49:36:a3:04:b6:d8:b4:f9:
f0:b4:37:d2:9d:4c:89:a8:40:5e:57:83:3e:7d:31:
32:d9:fd:5a:fb:03:72:ad:19:ba:50:34:3f:6e:7f:
bc:6f:a4:91:8b:82:90:b6:64:94:ac:15:44:77:6f:
05:ec:1a:c7:4b:0a:48:cf:4a:a3:34:e5:9c:7d:90:
e5:64:a3:c2:5b:59:d1:07:d6:ca:b8:08:78:cb:9f:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6A:89:5E:BC:DB:99:89:09:81:41:BF:19:5A:DE:BE:62:A7:2F:BB
X509v3 Authority Key Identifier:
keyid:89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:35:c3:0b:22:28:f6:65:77:84:d9:83:b0:ff:ca:6a:21:69:
65:78:ce:57:83:e5:16:2a:a3:4d:79:f7:a2:04:47:b2:b5:36:
c4:41:08:b5:a5:b6:02:21:10:ed:fa:4d:94:d5:23:9c:9a:25:
9c:28:e5:5e:ed:9c:c2:52:64:b1:10:f6:c1:8c:16:21:66:9a:
72:ed:7e:21:cd:16:e1:2e:3f:f9:16:e0:69:ba:e4:b9:13:95:
aa:32:31:ce:e1:d2:1f:be:af:58:4f:02:df:86:99:0c:08:13:
6e:40:de:cc:d0:e7:d2:5a:d2:86:d9:4d:c3:4d:71:a0:5c:11:
54:34:5f:31:53:61:e0:5f:b0:d6:e1:f2:19:c8:24:c1:0e:38:
74:4a:81:18:df:b7:9b:53:8f:b4:49:4f:df:2b:ad:c8:12:53:
f1:f8:08:75:a4:5f:e2:0f:9e:9a:55:5e:a1:19:11:96:b5:3c:
12:c6:89:af:6c:4d:88:a8:f0:c3:54:ad:7d:60:9c:36:c2:87:
cc:e1:e2:db:34:35:00:48:5a:c8:17:29:a8:f0:d6:f2:fe:30:
50:35:e4:1a:5e:0e:37:4d:ea:3a:5f:e9:ba:30:9c:43:2e:0f:
85:ca:a9:c0:91:57:6b:85:d4:6f:22:cc:87:bb:9e:65:54:97:
7e:b0:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:20:56 2026 by rpki-client