
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
File: iWAvTEQ-2KQOCJEYmHawJXdMdow.mft (raw, json)
Hash identifier: 4EgveUlCQJaptvtGMmwy2SoaoQBUI8FDemVjl/SH35k=
Subject key identifier: 32:E6:75:4E:BE:56:50:F4:31:99:BE:65:ED:A5:83:BA:76:E6:44:C4
Authority key identifier: 89:60:2F:4C:44:3E:D8:A4:0E:08:91:18:98:76:B0:25:77:4C:76:8C
Certificate issuer: /CN=A91E1EC0/serialNumber=89602F4C443ED8A40E0891189876B025774C768C
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWAvTEQ-2KQOCJEYmHawJXdMdow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
Manifest number: 1F
Signing time: Wed 19 Aug 2026 09:38:09 +0000
Manifest this update: Wed 19 Aug 2026 09:38:08 +0000
Manifest next update: Wed 26 Aug 2026 09:38:08 +0000
Files and hashes: 1: iWAvTEQ-2KQOCJEYmHawJXdMdow.crl (hash: y8NFEK7yVGUVmPONE9SywLiMcM+IHBkluGWOLgZDLF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.crl
rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWAvTEQ-2KQOCJEYmHawJXdMdow.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1EC0, serialNumber=89602F4C443ED8A40E0891189876B025774C768C
Validity
Not Before: Aug 19 09:38:08 2026 GMT
Not After : Aug 26 09:38:08 2026 GMT
Subject: CN=6a857980-e101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:9c:05:20:d5:47:19:72:85:1f:ae:cf:69:
8e:3b:cd:c6:ce:f5:b0:b2:74:85:c9:43:97:f7:b3:
f5:42:ac:b9:4a:72:bd:34:dc:3b:60:12:07:e8:3a:
ce:61:43:4d:c9:5a:07:f8:c6:25:fe:f2:35:17:84:
b8:85:45:6a:bd:49:74:32:df:67:a2:33:e0:32:15:
ae:49:bf:bf:c3:e7:77:5a:3d:60:a1:a7:10:a5:30:
3b:dd:de:bf:81:c0:8c:62:59:d9:7c:b7:12:ac:53:
b3:94:56:89:ab:8c:a2:19:dc:2f:2b:31:22:84:e8:
d4:4e:13:6d:72:3b:5e:8a:8c:61:42:7e:67:6a:89:
a4:0d:ac:eb:fe:5c:d8:20:36:8f:c6:47:27:79:2c:
12:99:83:d5:23:3b:cb:e3:21:7a:a6:cd:24:e6:32:
52:b3:2f:68:b1:24:34:79:d7:fd:5d:14:5e:7b:72:
b9:f5:49:4c:22:ee:53:8e:16:54:22:1b:6e:1e:ae:
8f:f5:71:00:9c:2a:d1:e4:cb:7d:05:7f:6a:b5:ab:
75:04:93:ab:4d:e0:9a:0f:cd:f4:3f:2d:57:c2:25:
76:b0:75:e7:2b:27:11:0b:26:00:17:ae:0e:c8:d1:
d7:54:38:2a:da:82:1a:f1:35:d3:7e:89:5b:df:54:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E6:75:4E:BE:56:50:F4:31:99:BE:65:ED:A5:83:BA:76:E6:44:C4
X509v3 Authority Key Identifier:
keyid:89:60:2F:4C:44:3E:D8:A4:0E:08:91:18:98:76:B0:25:77:4C:76:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWAvTEQ-2KQOCJEYmHawJXdMdow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:d2:2b:a4:4c:c8:0e:65:ec:ef:e3:73:2a:1b:d3:3a:9a:39:
28:39:99:c0:7c:b0:bd:b6:1e:6b:76:ef:8c:cc:8d:d9:42:a4:
22:d9:81:8e:b5:38:93:01:a4:57:06:0b:86:bc:f6:eb:4c:48:
f4:e0:72:0e:c7:bf:70:62:fb:b8:e6:56:32:bf:e2:62:a1:6a:
5b:5c:f9:ee:8b:ad:7a:31:bf:f2:9c:7d:e6:4c:c6:96:6f:66:
f3:1a:2d:61:b9:b2:59:ca:71:13:88:02:a7:cd:0f:11:85:de:
fd:32:39:e6:c2:e2:8e:d8:30:b0:a6:da:ba:9c:99:15:8d:cd:
07:13:50:22:a4:f2:c7:ea:3e:b9:0c:3f:ba:c5:95:a6:89:35:
c8:85:01:5d:7e:f3:c3:f9:61:47:79:12:d6:b5:26:1c:03:16:
83:72:f3:1e:5f:ad:ce:1d:65:b9:5a:9f:b8:88:9d:5f:6e:24:
e8:36:f5:cb:4e:9b:38:46:ed:4b:a6:27:2e:6e:42:3f:e6:68:
0e:3f:6a:72:b2:82:ba:25:81:c5:51:10:ac:75:57:a3:d6:ca:
70:6b:c8:2c:a4:a2:bc:1d:de:cc:61:17:64:ec:06:1d:0c:d0:
86:ed:22:86:13:41:7f:33:9b:94:65:c0:66:fe:ce:52:2e:10:
32:37:0c:81
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MUVDMDExMC8GA1UEBRMoODk2MDJGNEM0NDNFRDhBNDBFMDg5MTE4OTg3NkIwMjU3
NzRDNzY4QzAeFw0yNjA4MTkwOTM4MDhaFw0yNjA4MjYwOTM4MDhaMBgxFjAUBgNV
BAMTDTZhODU3OTgwLWUxMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8y5wFINVHGXKFH67PaY47zcbO9bCydIXJQ5f3s/VCrLlKcr003DtgEgfoOs5h
Q03JWgf4xiX+8jUXhLiFRWq9SXQy32eiM+AyFa5Jv7/D53daPWChpxClMDvd3r+B
wIxiWdl8txKsU7OUVomrjKIZ3C8rMSKE6NROE21yO16KjGFCfmdqiaQNrOv+XNgg
No/GRyd5LBKZg9UjO8vjIXqmzSTmMlKzL2ixJDR51/1dFF57crn1SUwi7lOOFlQi
G24ero/1cQCcKtHky30Ff2q1q3UEk6tN4JoPzfQ/LVfCJXawdecrJxELJgAXrg7I
0ddUOCraghrxNdN+iVvfVK3BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMuZ1Tr5W
UPQxmb5l7aWDunbmRMQwHwYDVR0jBBgwFoAUiWAvTEQ+2KQOCJEYmHawJXdMdoww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRUMwL0YxRTE2NjMwNkRF
NDExRjFBNjJBOTAzQzVCQTMwRkJDL2lXQXZURVEtMktRT0NKRVltSGF3SlhkTWRv
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaVdBdlRFUS0yS1FPQ0pFWW1IYXdKWGRNZG93LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx
RUMwL0YxRTE2NjMwNkRFNDExRjFBNjJBOTAzQzVCQTMwRkJDL2lXQXZURVEtMktR
T0NKRVltSGF3SlhkTWRvdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBR0iukTMgOZezv43MqG9M6mjkoOZnAfLC9th5rdu+MzI3ZQqQi2YGOtTiTAaRX
BguGvPbrTEj04HIOx79wYvu45lYyv+JioWpbXPnui616Mb/ynH3mTMaWb2bzGi1h
ubJZynETiAKnzQ8Rhd79MjnmwuKO2DCwptq6nJkVjc0HE1AipPLH6j65DD+6xZWm
iTXIhQFdfvPD+WFHeRLWtSYcAxaDcvMeX63OHWW5Wp+4iJ1fbiToNvXLTps4Ru1L
picubkI/5mgOP2pysoK6JYHFURCsdVej1spwa8gspKK8Hd7MYRdk7AYdDNCG7SKG
E0F/M5uUZcBm/s5SLhAyNwyB
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:11 2026 by rpki-client