
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
File: ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json)
Hash identifier: UIN7CxpBrGMFm6d72FamQo9/8yUMGcA6Ktcw7VWO6Y8=
Subject key identifier: 22:5C:C8:26:31:69:B8:DA:2B:26:67:9E:45:C1:80:90:8D:34:4B:72
Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
Certificate issuer: /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Certificate serial: 04FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
Manifest number: 04EC
Signing time: Thu 24 Sep 2026 23:36:10 +0000
Manifest this update: Thu 24 Sep 2026 23:36:09 +0000
Manifest next update: Thu 01 Oct 2026 23:36:09 +0000
Files and hashes: 1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: d8A+y4yPNyV4lBDrQi6LFCs6gi4/MtOkYkWLuVAgO0c=)
2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: btT7lb3t4WSsKXv6kffudUgwc+vUjVoR2tzuvf0VOIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1276 (0x4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Validity
Not Before: Sep 24 23:36:09 2026 GMT
Not After : Oct 1 23:36:09 2026 GMT
Subject: CN=6ab5b3ea-368c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:47:c9:be:00:4f:5e:d8:94:43:cc:c2:cd:
0f:b3:05:f5:92:ed:12:d2:db:22:ea:04:c2:de:b6:
86:80:45:14:06:fe:ec:51:35:87:f9:72:70:bf:37:
8c:f8:2a:d6:97:3d:4b:e9:06:40:fb:2b:02:0b:91:
00:a8:98:94:51:3c:ec:17:29:78:cb:48:0e:50:fb:
f0:36:09:6b:bb:ac:f4:bf:0e:2e:13:49:cf:b5:db:
85:3e:45:8d:c9:6a:b9:bc:b8:13:1d:70:dc:98:dd:
2e:02:f9:07:3a:7f:0f:ee:9f:72:f6:fa:b2:7c:16:
71:16:54:74:f7:d3:d6:4d:81:bb:28:0a:17:1b:2d:
d5:68:7f:e6:8b:03:84:bf:2e:d5:fc:e7:63:93:49:
4b:4c:b9:c3:89:1c:96:30:62:77:89:e3:06:20:d1:
c6:d6:2f:71:37:2d:41:ff:e8:5d:3c:2d:01:fb:19:
3b:13:16:bc:f8:3e:10:a0:6b:6d:78:03:f4:3f:3c:
b1:22:12:f9:f5:8c:9c:38:e2:9a:35:4b:c9:5a:bb:
77:e8:47:0d:a3:fa:77:7d:30:32:9d:83:8a:4f:59:
13:ac:b8:f9:cd:e6:4c:39:98:c3:7b:4f:4f:e8:47:
23:76:e9:eb:d6:92:a9:aa:a3:1b:6b:9b:9c:56:e2:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5C:C8:26:31:69:B8:DA:2B:26:67:9E:45:C1:80:90:8D:34:4B:72
X509v3 Authority Key Identifier:
keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e7:2b:53:5a:c3:10:e1:c9:b5:4c:2b:a0:2c:9c:65:84:cb:
48:19:f1:18:ed:98:d9:3d:f9:83:b5:61:a4:1a:78:9e:1c:7d:
34:5e:6f:83:33:f4:23:e1:ea:b9:75:b8:ba:b0:b7:a7:83:ec:
3b:62:2a:65:96:d7:1e:8c:91:76:40:4c:0a:d8:f6:49:b2:67:
4e:7f:a3:7c:c3:da:e1:06:28:9d:b1:d3:43:c3:4e:01:2a:ae:
c5:88:c5:cf:15:62:87:b7:a8:f8:ba:bb:4d:cc:43:b3:fe:ff:
c9:6b:99:c0:ee:39:f9:cc:d2:dc:db:89:f1:17:34:51:c0:d2:
57:0a:e8:89:b8:54:1d:80:8e:eb:0e:9a:e2:3d:f4:66:ff:ea:
f6:b6:36:a6:25:b8:75:99:ed:96:26:48:5d:d5:ce:a0:f8:a0:
1f:9d:41:43:a9:cc:f6:fe:53:21:8d:e7:6a:89:86:8d:15:51:
9c:4f:8a:e0:1e:7b:81:77:21:f6:03:36:dc:65:d6:7a:8e:53:
9f:03:a9:ed:0c:06:ab:27:32:34:1c:7e:55:fe:b3:d3:14:b8:
1c:38:f9:e4:bf:35:c5:50:0a:56:4a:a7:92:b3:83:0e:1d:81:
05:07:d8:87:b5:3b:cc:97:00:ba:64:58:54:84:5d:bb:4b:07:
a7:35:bf:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:31:02 2026 by rpki-client