
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft
File: IwN4FncHnC-7R0lkDwZXociO20Q.mft (raw, json)
Hash identifier: q6jRsWSZmV9tjd6YLVRe9hqNVZJD6GQtnkf38p5eSqI=
Subject key identifier: 74:E3:BC:FB:5A:4F:8D:27:9D:5C:57:22:20:21:1B:BD:D0:39:FB:32
Authority key identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44
Certificate issuer: /CN=A911E0B4/serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft
Manifest number: 0111
Signing time: Wed 13 May 2026 06:04:32 +0000
Manifest this update: Wed 13 May 2026 06:04:32 +0000
Manifest next update: Wed 20 May 2026 06:04:32 +0000
Files and hashes: 1: IwN4FncHnC-7R0lkDwZXociO20Q.crl (hash: sQEu/HBQwYbnQYZO/b9YUrFsAT1fFK22DVrbui0h4FE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl
rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:04:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E0B4, serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44
Validity
Not Before: May 13 06:04:32 2026 GMT
Not After : May 20 06:04:32 2026 GMT
Subject: CN=6a041470-fc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:cc:4e:c0:79:59:f2:ca:e0:8a:7c:9a:45:
3d:c8:5f:80:9c:ef:53:a5:ea:3d:fe:e6:60:14:49:
b2:66:b7:be:40:a2:cb:95:58:04:43:43:62:b1:4e:
b1:da:9d:38:0c:3c:30:43:33:8b:cb:a3:ac:69:f0:
df:34:4b:df:0e:85:63:45:b0:2e:49:8a:03:99:34:
52:34:f1:47:8a:04:62:42:2e:c4:db:e6:fe:29:bf:
69:12:61:e8:14:d1:4e:eb:93:8b:cb:a9:b7:58:2d:
eb:c8:00:c6:3f:8d:79:45:df:50:bf:8d:3f:dc:33:
9b:2a:77:b5:6e:29:3c:d7:c9:6e:6a:e2:84:59:cf:
19:af:f4:6b:92:9a:7a:d5:eb:29:06:50:56:79:15:
3b:f5:4f:dd:e2:0e:db:5f:ca:58:d5:aa:a0:79:0d:
95:55:b5:b0:52:80:5f:37:e9:53:04:39:a6:fb:54:
55:35:28:c3:dc:0d:48:69:88:83:6d:bf:e0:b1:98:
3f:58:42:a3:80:1c:7e:00:48:da:90:28:3f:10:aa:
c5:62:37:65:f2:33:b0:3f:6e:fa:83:f1:20:3f:09:
19:26:5b:05:ac:dc:c1:71:c7:ba:77:09:79:b1:35:
bf:c7:5b:0b:92:1d:c5:fe:75:7d:8a:d6:b5:3c:cc:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E3:BC:FB:5A:4F:8D:27:9D:5C:57:22:20:21:1B:BD:D0:39:FB:32
X509v3 Authority Key Identifier:
keyid:23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:84:25:94:1b:9c:37:e7:b6:b6:44:ef:c4:c6:98:5a:43:ad:
d5:78:ff:38:b3:5b:9e:cd:aa:5f:3b:82:23:b2:ed:63:9d:77:
2b:47:ec:ff:35:37:0c:1a:f9:26:e7:fd:aa:b6:87:9b:e1:1a:
e1:d9:06:c8:4b:5e:2c:75:41:b8:38:16:17:e4:1f:12:e1:6b:
cf:45:84:52:4e:ba:0d:f8:68:fd:85:95:04:b2:10:d3:df:4c:
f9:ad:1f:8b:c4:be:78:55:96:4f:ec:57:7d:e3:21:e0:a5:63:
89:90:a7:95:11:02:87:32:dd:26:6f:7b:d5:34:c4:01:fb:ba:
07:41:2f:2c:96:7e:b6:5c:52:90:2b:c5:da:e3:cd:23:cd:3d:
e6:43:d1:81:a0:73:4e:ed:04:8e:f0:4d:f7:38:4b:20:04:5a:
b5:61:88:9f:ad:c2:fc:85:67:d0:8c:02:b1:ec:be:e1:52:95:
34:96:60:40:3a:ba:e1:67:43:31:4d:55:8a:57:47:9e:25:2d:
eb:9a:52:e5:44:16:fa:b3:bb:b7:88:9e:83:02:40:d8:85:cb:
ff:bf:2c:53:d6:e1:e6:a8:f2:f4:67:e3:df:4e:60:1f:60:6f:
34:fa:0b:72:d1:83:c5:72:9a:6f:a4:fd:8d:95:d3:ce:0c:d4:
5d:6e:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:23:03 2026 by rpki-client