
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
File: ieNpO3EjaLD6zmuk5GeXCK85OLU.mft (raw, json)
Hash identifier: sGziO9RdeI6l9LBCe5/iRIkkbXGl9OMI/ted2NU+L8M=
Subject key identifier: 5C:94:3D:4E:45:34:41:FA:23:7C:9B:EB:AA:3E:E9:27:DD:4B:07:60
Authority key identifier: 89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5
Certificate issuer: /CN=A911EA03/serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
Manifest number: 43
Signing time: Thu 23 Jul 2026 10:31:22 +0000
Manifest this update: Thu 23 Jul 2026 10:31:21 +0000
Manifest next update: Thu 30 Jul 2026 10:31:21 +0000
Files and hashes: 1: ieNpO3EjaLD6zmuk5GeXCK85OLU.crl (hash: 5pFmj/UoNBMNzM/ySMBU9slwf0avRGMmeN0f0nbT20A=)
2: FD1CE81824DC11F1AC9E21B6AD833773.roa (hash: aKiZx9bAHTnqGJOBAfW2TQZBMx8LZSsNmHEuGV9buHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl
rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA03, serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
Validity
Not Before: Jul 23 10:31:21 2026 GMT
Not After : Jul 30 10:31:21 2026 GMT
Subject: CN=6a61ed79-e25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:59:91:43:81:18:2a:06:a3:7c:74:a4:6e:
9a:e8:c3:ad:ca:b6:90:95:d5:44:8a:ba:ae:25:37:
ae:ec:4a:cd:9d:01:33:35:b6:b0:bf:fe:7e:5e:60:
af:b4:0d:6c:33:8a:2d:ad:e2:b5:95:d4:1f:b1:99:
98:4f:e3:49:58:fd:33:3d:e9:9a:2a:e9:60:2c:e2:
e4:ef:5a:26:0c:18:85:ba:cc:a6:38:e5:12:2a:3d:
76:5a:46:2b:43:6a:77:da:7c:1f:da:c7:3f:4d:58:
74:d3:9b:75:a4:1c:70:dc:16:75:83:92:f3:82:a4:
ce:e4:64:79:82:b5:df:22:91:79:c7:54:c7:9c:28:
36:55:ce:5f:94:80:bd:77:93:bc:5f:aa:fb:4e:be:
82:e9:c5:93:b4:2a:65:81:05:08:ae:d1:70:b1:9a:
f9:17:8a:8c:9e:d8:7a:9e:ec:dc:db:8c:2e:df:5a:
0f:c0:c8:12:c0:d0:d9:dd:68:4b:ce:53:ec:08:ef:
12:fd:8d:28:ee:ce:01:a4:d1:eb:14:8e:89:fd:b6:
b0:78:12:4d:0c:a9:8b:2b:5e:31:f7:73:e1:e5:0f:
a8:53:73:c1:6a:51:d8:4a:70:25:32:3a:a9:6a:34:
ec:dc:b0:87:ff:81:62:d7:dd:6f:6b:96:4d:65:5f:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:94:3D:4E:45:34:41:FA:23:7C:9B:EB:AA:3E:E9:27:DD:4B:07:60
X509v3 Authority Key Identifier:
keyid:89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:57:e5:43:ef:9f:5c:82:d6:f5:64:ac:b0:56:00:3e:a4:d3:
fe:df:92:ee:ca:bf:7a:15:03:f3:10:40:20:5a:ea:26:c2:74:
b1:2a:02:7a:83:72:1d:d5:5a:66:01:0a:2c:a3:02:8e:49:32:
f2:fc:6d:83:4f:2b:ae:62:9e:6d:d1:6a:13:8d:61:77:ad:54:
7e:a9:e4:d5:08:a6:d0:d7:2d:d3:e9:89:dd:7b:91:d8:30:7a:
62:25:0d:56:2f:b7:38:c8:a0:ac:f7:b2:42:f2:77:70:ae:e6:
a0:e5:5f:a9:03:26:cd:d9:ea:5b:25:32:aa:77:ae:b6:f6:54:
b2:06:b6:0d:18:7e:cf:df:28:68:f3:cb:6d:c5:36:05:01:35:
8b:69:d1:e2:61:a2:6f:63:df:50:3e:53:d2:89:e6:4b:88:73:
0d:b0:31:e7:a6:8c:c3:41:3b:83:c8:8e:04:7b:3e:04:99:ce:
5d:f6:37:93:36:d0:f9:64:b0:08:8c:c5:28:38:4d:4c:a0:6e:
0a:f7:37:e9:63:5c:96:59:8a:20:9c:b4:ea:9f:9e:27:77:9d:
4c:10:98:fb:9b:23:0e:13:1c:1f:25:f4:0c:84:87:00:83:ca:
85:0f:de:ac:e2:d7:4a:2f:08:aa:39:40:43:93:82:ec:3e:24:
64:da:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:00:00 2026 by rpki-client