
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
File: IW4UMOXDDg0jp10HDbeJi5CEl5k.mft (raw, json)
Hash identifier: QgevikJmcP9ZYhaObm9k8/YhJiVMm8M3psjXiJJ4tNw=
Subject key identifier: 50:39:FD:C2:FF:46:D7:F6:3E:91:DB:94:DA:03:28:0C:AE:7C:3A:13
Authority key identifier: 21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
Certificate issuer: /CN=A919A5B5/serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
Certificate serial: 089F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
Manifest number: 0891
Signing time: Tue 18 Aug 2026 21:01:55 +0000
Manifest this update: Tue 18 Aug 2026 21:01:55 +0000
Manifest next update: Tue 25 Aug 2026 21:01:55 +0000
Files and hashes: 1: IW4UMOXDDg0jp10HDbeJi5CEl5k.crl (hash: qo+Zf6eQkGlKwvIiYrbDGidFvUHF+3qazg45GKbC1bY=)
2: ACD444282EC911EB99EC263DC4F9AE02.roa (hash: rCKXyCh+EMd4ulOOsHCpQ92EvtiU4kyrN3RmnguBNlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl
rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2207 (0x89f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A5B5, serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
Validity
Not Before: Aug 18 21:01:55 2026 GMT
Not After : Aug 25 21:01:55 2026 GMT
Subject: CN=6a84c843-4499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dc:9f:0f:8c:ae:3f:7d:cb:c0:ae:da:9b:29:
b0:ab:86:d2:f5:a6:c8:21:d9:d3:dc:ef:f8:bc:1c:
ba:70:92:20:26:2e:92:37:e8:c7:1b:1c:6a:55:ea:
98:65:af:36:92:31:d2:ba:d3:6b:ea:49:3f:3f:a6:
79:c1:40:fa:0a:10:3c:e5:c8:3a:08:ba:e8:2f:cf:
a9:ef:65:3a:f0:5e:7e:a2:52:0e:85:9d:f8:c7:2d:
89:ce:80:1d:87:9d:fd:37:a0:08:1c:39:27:f5:27:
58:9f:a7:c1:9a:16:5e:64:f4:0e:45:0f:2a:07:92:
5d:70:8a:5e:f7:4f:ec:5a:1e:f5:66:c5:ea:38:4e:
59:16:48:a2:c2:97:f9:7c:f9:f1:e3:8c:79:9b:01:
dc:69:58:d8:76:29:8c:76:a0:2d:80:88:5e:91:ff:
cc:50:99:41:bd:da:b8:a1:ba:5d:ec:80:41:af:00:
c9:59:ea:22:2e:5c:38:2c:d2:06:6c:57:e9:0d:be:
34:5a:00:85:c1:d5:3b:01:69:79:87:97:3d:15:7d:
a7:d9:fa:84:75:0b:db:da:d9:b3:c2:c9:e9:c1:8a:
7f:ed:7e:2e:a4:5b:4b:c5:70:e7:34:5c:d6:f1:8a:
e9:ae:61:4b:9a:e8:d0:64:40:9b:03:0b:63:1f:1b:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:39:FD:C2:FF:46:D7:F6:3E:91:DB:94:DA:03:28:0C:AE:7C:3A:13
X509v3 Authority Key Identifier:
keyid:21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:1a:fe:71:f8:9b:60:15:9e:27:9d:b5:25:1a:cb:f7:ea:29:
11:e2:fb:f8:4a:fc:d4:b1:ec:b3:51:81:54:fc:bf:6e:72:84:
bd:b1:0d:dd:2a:d7:51:f2:cb:bf:75:7a:35:e8:10:83:f6:27:
f1:ab:36:de:d8:8a:9e:d0:b4:3c:45:2b:88:45:10:71:6f:01:
c7:bb:b7:b6:11:74:f9:ee:4b:3f:ee:f2:a5:45:69:ff:9f:18:
5c:39:15:52:c7:20:26:f3:8c:bc:1c:cc:e3:27:8e:63:06:e2:
c3:cf:cb:6b:fb:b2:60:24:59:18:05:9e:64:1d:88:c4:fe:47:
01:71:6d:54:bd:e0:49:99:da:c0:36:43:39:58:14:45:8d:92:
7c:0c:e9:08:68:4b:8b:3c:96:c6:74:f0:cc:e0:16:f1:5d:90:
f8:bf:e5:92:01:37:78:c9:0f:96:11:37:be:7f:0f:b7:31:66:
5b:5f:cd:11:d9:fc:0f:6e:f3:41:34:b2:63:a8:94:35:5f:ab:
e9:51:19:01:27:f2:97:25:26:4f:84:1b:af:09:62:06:58:b6:
86:73:49:e9:30:aa:d0:8f:f1:28:af:b1:9d:a2:4d:5a:ac:e8:
63:a7:2a:4b:e7:24:5b:d4:f3:93:c6:1c:aa:82:ab:93:53:9a:
bc:6c:76:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:57 2026 by rpki-client