
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
File: IW4UMOXDDg0jp10HDbeJi5CEl5k.mft (raw, json)
Hash identifier: ihxlu0eUYQJvCcf2whx+TRfHOAbGllAHA9i/VBypH4E=
Subject key identifier: 78:77:D4:2C:27:BA:2E:07:F1:40:54:A1:6B:54:D0:25:9F:1D:30:4E
Authority key identifier: 21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
Certificate issuer: /CN=A919A5B5/serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
Certificate serial: 08B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
Manifest number: 08A8
Signing time: Fri 02 Oct 2026 20:54:54 +0000
Manifest this update: Fri 02 Oct 2026 20:54:54 +0000
Manifest next update: Fri 09 Oct 2026 20:54:54 +0000
Files and hashes: 1: IW4UMOXDDg0jp10HDbeJi5CEl5k.crl (hash: ktIdoxmfNO6qDLeNDwkqgaPKSpXv08aIF7CXVfPqxvg=)
2: ACD444282EC911EB99EC263DC4F9AE02.roa (hash: rCKXyCh+EMd4ulOOsHCpQ92EvtiU4kyrN3RmnguBNlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl
rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:54:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2230 (0x8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A5B5, serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
Validity
Not Before: Oct 2 20:54:54 2026 GMT
Not After : Oct 9 20:54:54 2026 GMT
Subject: CN=6ac01a1e-6de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:4b:96:88:19:4e:1f:99:89:94:e4:f1:15:
8f:46:e2:2b:c2:d7:3e:c1:81:cf:a1:2f:28:a3:b6:
be:0f:c3:d8:96:4c:39:8a:c8:71:4b:a6:5a:dd:1e:
ca:b2:3d:31:96:f4:a1:97:90:d7:a7:e9:3d:83:06:
fd:f1:23:b5:eb:26:ee:e1:3d:99:70:87:c3:8d:5d:
bc:24:0d:04:23:d9:4c:0e:92:f4:3a:c8:c4:7e:20:
e6:bc:b8:90:d3:d4:07:01:f7:ed:a3:c6:98:56:b0:
65:59:73:10:37:bb:3e:0f:cb:a2:5c:db:68:d3:90:
61:7e:f7:97:ba:03:24:9e:8a:a4:12:1c:61:df:7f:
b3:be:bd:59:0e:8b:57:7f:a5:29:30:8c:97:bc:eb:
ea:a2:5c:b2:b7:1d:fa:f0:b2:df:63:f8:3c:07:01:
dd:94:90:94:64:bd:a0:59:37:0e:3a:8d:68:55:c7:
b4:4e:99:e3:eb:d8:19:16:01:a1:2e:f9:5f:75:87:
f2:97:6e:32:db:b9:6e:93:9a:ab:56:b0:12:bc:1c:
78:d6:10:a5:71:9c:93:2c:dd:0a:07:a4:e1:fe:e3:
8d:22:28:76:f4:5b:f4:ef:0d:95:9d:05:ed:25:95:
15:43:fb:e8:e4:ee:02:8b:96:05:48:fc:ef:ac:25:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:77:D4:2C:27:BA:2E:07:F1:40:54:A1:6B:54:D0:25:9F:1D:30:4E
X509v3 Authority Key Identifier:
keyid:21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:0b:c6:e5:40:7d:fe:5f:26:e5:ba:2c:b9:26:9e:df:fc:c4:
8d:ad:6d:78:53:e5:a0:e1:57:d6:58:06:c2:e2:68:40:96:f8:
71:f7:ef:43:44:a0:e8:fb:9e:f9:23:fa:e1:0f:8d:52:76:16:
a5:0a:5b:4b:1a:51:a1:69:1d:60:94:2f:81:11:99:65:98:89:
29:e5:15:1b:85:fd:45:44:bc:d7:a5:10:fb:d9:be:b0:78:09:
7e:aa:80:eb:41:0b:2f:c4:b7:35:99:30:99:06:4a:8e:c3:de:
ef:84:c2:ef:55:d7:be:75:d6:b9:41:7f:a2:7a:cc:5c:2d:ab:
84:40:07:b2:22:89:82:77:93:8c:72:46:e5:84:0a:33:07:6f:
6a:a1:f5:0b:c7:bd:88:fd:1a:c6:e1:65:f0:41:d3:16:8e:39:
33:56:33:2c:93:d5:1f:29:39:6a:42:f7:54:50:a5:4f:0f:95:
50:32:c8:38:8d:af:5c:b1:e1:47:19:77:45:b5:22:eb:c5:c6:
3b:f1:f7:84:37:c6:de:79:45:bb:6d:41:5a:7e:70:1a:9b:9e:
8a:8a:33:7e:5d:cd:f8:e4:25:4a:52:93:19:f4:2b:6c:97:44:
9c:84:62:a9:09:f9:81:9d:78:2d:dc:0e:32:c4:62:9a:10:5f:
52:e0:5e:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE1QjUxMTAvBgNVBAUTKDIxNkUxNDMwRTVDMzBFMEQyM0E3NUQwNzBEQjc4OThC
OTA4NDk3OTkwHhcNMjYxMDAyMjA1NDU0WhcNMjYxMDA5MjA1NDU0WjAYMRYwFAYD
VQQDEw02YWMwMWExZS02ZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsDBLlogZTh+ZiZTk8RWPRuIrwtc+wYHPoS8oo7a+D8PYlkw5ishxS6Za3R7K
sj0xlvShl5DXp+k9gwb98SO16ybu4T2ZcIfDjV28JA0EI9lMDpL0OsjEfiDmvLiQ
09QHAffto8aYVrBlWXMQN7s+D8uiXNto05BhfveXugMknoqkEhxh33+zvr1ZDotX
f6UpMIyXvOvqolyytx368LLfY/g8BwHdlJCUZL2gWTcOOo1oVce0Tpnj69gZFgGh
LvlfdYfyl24y27luk5qrVrASvBx41hClcZyTLN0KB6Th/uONIih29Fv07w2VnQXt
JZUVQ/vo5O4Ci5YFSPzvrCV+2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHh31Cwn
ui4H8UBUoWtU0CWfHTBOMB8GA1UdIwQYMBaAFCFuFDDlww4NI6ddBw23iYuQhJeZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTVCNS81ODNDQzRENDAz
QkUxMUVCQTY0OTIyMEJDNEY5QUUwMi9JVzRVTU9YRERnMGpwMTBIRGJlSmk1Q0Vs
NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lXNFVNT1hERGcwanAxMEhEYmVKaTVDRWw1ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTVCNS81ODNDQzRENDAzQkUxMUVCQTY0OTIyMEJDNEY5QUUwMi9JVzRVTU9YRERn
MGpwMTBIRGJlSmk1Q0VsNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQwvG5UB9/l8m5bosuSae3/zEja1teFPloOFX1lgGwuJoQJb4cffvQ0Sg6Pue
+SP64Q+NUnYWpQpbSxpRoWkdYJQvgRGZZZiJKeUVG4X9RUS816UQ+9m+sHgJfqqA
60ELL8S3NZkwmQZKjsPe74TC71XXvnXWuUF/onrMXC2rhEAHsiKJgneTjHJG5YQK
MwdvaqH1C8e9iP0axuFl8EHTFo45M1YzLJPVHyk5akL3VFClTw+VUDLIOI2vXLHh
Rxl3RbUi68XGO/H3hDfG3nlFu21BWn5wGpueioozfl3N+OQlSlKTGfQrbJdEnIRi
qQn5gZ14LdwOMsRimhBfUuBeXg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:53:01 2026 by rpki-client