
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft
File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json)
Hash identifier: Ritsk21YJH6RbSAVO/2WR4Fzic1F23GA/zUgg0uHtHg=
Subject key identifier: 73:BF:BA:D1:C3:3F:25:56:B7:5E:2C:F8:4A:DA:6C:2A:34:72:7E:FC
Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8
Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8
Certificate serial: 0574
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft
Manifest number: 055D
Signing time: Fri 04 Sep 2026 23:09:31 +0000
Manifest this update: Fri 04 Sep 2026 23:09:31 +0000
Manifest next update: Fri 11 Sep 2026 23:09:31 +0000
Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: SC22a7NTTnA0f/UPHXtp5nu3a2GH6p3oQ4b3ieZVYLo=)
2: E097013E910C11EFB994E187C4F9AE02.roa (hash: HrJ+8JztV8jOok9XoxaSZjsBUJtbPDSkJYLMEhJeKdI=)
3: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: LJy17ILIBfPomAik/C3VD6opwZLbdXQBjkGQXiaQSQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl
rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 23:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1396 (0x574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8
Validity
Not Before: Sep 4 23:09:31 2026 GMT
Not After : Sep 11 23:09:31 2026 GMT
Subject: CN=6a9b4fab-3b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:80:5d:d8:bf:06:98:44:65:86:d3:09:ae:
28:ff:f0:00:40:92:75:10:40:18:e6:7b:be:c5:17:
48:d2:42:3d:e1:a9:cd:54:44:fb:27:07:78:66:a4:
3b:91:75:16:c9:f3:04:a0:f2:a3:1e:1f:30:73:d1:
fc:d0:da:a9:2b:68:f7:98:0e:80:09:bb:77:c8:8b:
7d:f8:8d:17:62:f2:84:0e:87:b3:c1:11:08:ae:41:
1e:c5:5a:bc:24:97:be:00:f4:d1:1f:6d:27:93:28:
6b:26:a5:ca:f9:6a:56:22:bb:b8:75:36:f8:a3:06:
18:e2:b0:86:91:03:0b:00:42:5a:81:ac:88:94:04:
68:ea:75:08:b0:28:c0:fa:04:04:ae:35:65:b8:b0:
5e:b6:02:73:30:5e:d6:32:5b:69:4b:0d:1a:a3:61:
62:5b:fe:bd:22:fd:0a:10:ee:95:2a:b4:ff:a4:f6:
88:3c:98:b2:f6:72:d6:47:e7:bc:e5:48:eb:26:39:
09:b4:d6:5c:d6:01:3b:c4:23:d1:6c:42:f3:fa:b6:
0e:eb:7e:1a:7d:5f:bb:7d:e1:d5:74:02:50:b0:ea:
93:9b:60:98:0f:b8:b2:1c:3a:3a:17:c5:f1:a3:6b:
e9:29:ec:ed:a1:c3:bf:ed:99:0b:78:a3:d9:76:e0:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BF:BA:D1:C3:3F:25:56:B7:5E:2C:F8:4A:DA:6C:2A:34:72:7E:FC
X509v3 Authority Key Identifier:
keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:16:6c:59:84:f7:87:d0:d4:83:9d:60:47:fd:60:c8:6c:0b:
cd:c4:d7:2e:03:50:94:10:ed:f6:98:21:aa:70:8d:7a:4d:01:
f3:bf:06:bc:4b:0b:35:f2:d9:6f:86:17:02:8b:e7:4b:21:33:
e1:ec:f9:fd:e7:41:49:df:0a:9d:22:c6:12:dc:62:8d:2e:2a:
bd:21:1d:c5:ae:0c:6e:7f:33:66:76:9b:ea:e8:d6:04:c7:a9:
b1:50:03:51:d5:da:8c:7e:58:be:0c:d6:1a:8e:66:2f:eb:3c:
ba:f3:ed:fc:60:0b:fa:5d:65:56:e0:23:57:38:ab:06:34:b0:
c8:d2:35:75:0e:d9:9d:c9:cc:e5:0f:04:54:ec:26:42:f7:5b:
7a:0e:bf:b3:38:a6:2d:73:81:83:55:dc:f5:5f:66:de:99:f9:
bc:3d:cf:92:43:c0:1a:f9:7c:3c:5f:6b:08:39:f7:36:9b:bc:
93:0d:09:2e:00:f2:30:ae:74:3a:fd:87:37:4f:97:35:a4:35:
f2:b6:23:ae:38:83:22:42:85:1e:c1:68:ea:45:1e:18:e6:06:
8e:08:9e:67:c6:1d:b6:d6:67:e0:84:99:76:74:f1:bd:e2:2d:
bd:91:88:00:1d:a9:8a:11:92:68:bc:9a:c0:3a:cc:bc:db:e9:
43:69:0d:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy
RUYwMzlDRTgwHhcNMjYwOTA0MjMwOTMxWhcNMjYwOTExMjMwOTMxWjAYMRYwFAYD
VQQDEw02YTliNGZhYi0zYjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtQuAXdi/BphEZYbTCa4o//AAQJJ1EEAY5nu+xRdI0kI94anNVET7Jwd4ZqQ7
kXUWyfMEoPKjHh8wc9H80NqpK2j3mA6ACbt3yIt9+I0XYvKEDoezwREIrkEexVq8
JJe+APTRH20nkyhrJqXK+WpWIru4dTb4owYY4rCGkQMLAEJagayIlARo6nUIsCjA
+gQErjVluLBetgJzMF7WMltpSw0ao2FiW/69Iv0KEO6VKrT/pPaIPJiy9nLWR+e8
5UjrJjkJtNZc1gE7xCPRbELz+rYO634afV+7feHVdAJQsOqTm2CYD7iyHDo6F8Xx
o2vpKeztocO/7ZkLeKPZduAMLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHO/utHD
PyVWt14s+ErabCo0cn78MB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC
NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu
T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE
VlNtSFJqNWtJcGN1OERuT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXhZsWYT3h9DUg51gR/1gyGwLzcTXLgNQlBDt9pghqnCNek0B878GvEsLNfLZ
b4YXAovnSyEz4ez5/edBSd8KnSLGEtxijS4qvSEdxa4Mbn8zZnab6ujWBMepsVAD
UdXajH5YvgzWGo5mL+s8uvPt/GAL+l1lVuAjVzirBjSwyNI1dQ7ZncnM5Q8EVOwm
Qvdbeg6/szimLXOBg1Xc9V9m3pn5vD3PkkPAGvl8PF9rCDn3Npu8kw0JLgDyMK50
Ov2HN0+XNaQ18rYjrjiDIkKFHsFo6kUeGOYGjgieZ8YdttZn4ISZdnTxveItvZGI
AB2pihGSaLyawDrMvNvpQ2kNfw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:17:01 2026 by rpki-client