
$ rpki-client -vvf rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
File: IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft (raw, json)
Hash identifier: GhksxuQL23TCCfkMFvoLWZ08neNdFWZM2zsRf3+i9VE=
Subject key identifier: 43:E9:72:96:21:92:21:18:43:F8:6B:4E:F0:D2:55:F8:33:26:DE:8D
Authority key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17
Certificate issuer: /CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317
Certificate serial: 029B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
Manifest number: 028E
Signing time: Thu 23 Jul 2026 11:48:59 +0000
Manifest this update: Thu 23 Jul 2026 11:48:59 +0000
Manifest next update: Thu 30 Jul 2026 11:48:59 +0000
Files and hashes: 1: IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl (hash: NPTz9RqIc1s7+v7oSFIdqeWbNHbU6wN0rN9MDeo8LWE=)
2: SdX95TlC1Lr51eFQH3-UwnM7ByQ.asa (hash: N6mlVMJ+GuqxRdKaS9hP75eWe+/snkjj54gL1Yphwjg=)
3: CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa (hash: aKMlcoKPOK4sVWlP0NCeOszEtBXOmIcZnqYHH1capVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl
rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:48:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667 (0x29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912905D, serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317
Validity
Not Before: Jul 23 11:48:59 2026 GMT
Not After : Jul 30 11:48:59 2026 GMT
Subject: CN=6a61ffab-f3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:b4:95:72:ac:94:66:1b:eb:a2:fe:20:80:
ca:5d:1d:b6:4c:da:9d:11:85:12:4f:3e:1b:a1:0b:
c0:8f:65:a6:40:d3:1d:ab:0c:64:eb:d7:f1:7a:06:
ed:03:28:de:9e:20:1c:23:17:6b:26:2e:8e:3a:15:
c0:38:75:5a:74:c0:20:3b:f0:9c:b8:32:bc:80:37:
ad:60:0d:8a:9e:1f:88:a6:8e:f0:d6:57:c0:30:6a:
a4:57:73:9e:df:6b:0e:73:1a:99:f2:0b:74:86:d0:
74:b2:70:d0:96:09:ee:39:3e:ae:7d:ce:83:66:73:
eb:43:b2:ba:06:bd:a4:29:23:0e:0d:bb:66:f3:9b:
6e:17:45:4c:1f:d2:80:47:bc:b0:1f:83:ce:e1:33:
11:5e:b5:4c:9b:a2:dc:c9:4b:15:63:94:9f:24:74:
34:08:8c:69:10:b2:29:5f:1c:c0:f3:8b:ba:8b:21:
06:ec:a3:e1:24:77:d8:cb:2f:a1:c6:87:88:df:44:
d3:ce:fb:a9:76:67:16:d7:e9:84:4f:c9:40:ef:41:
22:e3:24:79:37:e2:bd:16:c6:b8:70:d6:b6:ac:e6:
fd:d4:dd:e6:8f:5f:87:54:55:c7:27:3a:b8:90:24:
ee:89:7d:ef:3d:ff:18:76:4b:9a:a9:7f:b8:d9:23:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E9:72:96:21:92:21:18:43:F8:6B:4E:F0:D2:55:F8:33:26:DE:8D
X509v3 Authority Key Identifier:
keyid:20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:1f:36:cc:e2:04:e9:1d:db:1d:4a:12:3e:07:8e:c7:43:16:
2a:60:c5:f3:4f:d4:f9:d2:b4:0e:1b:78:70:97:5d:6d:78:6b:
34:79:61:54:9d:1d:e8:e6:b3:b4:96:4e:ed:2a:1b:77:85:66:
03:2c:02:72:50:11:97:96:c6:6f:0b:bf:c4:d3:05:e9:1b:57:
48:81:03:cd:1e:9d:5b:f2:80:69:73:ea:b4:2a:d8:5c:8a:e3:
98:56:2c:3a:59:30:f0:47:86:cb:8e:cc:39:03:88:6c:9f:0f:
37:e5:b3:d8:02:f9:d7:7d:68:9b:cc:e0:ad:43:04:57:cb:c4:
41:a7:96:d8:f0:86:55:7c:10:96:84:42:94:3d:f5:55:e1:07:
7b:65:23:be:02:86:98:b0:63:fd:6f:1a:f3:d5:27:56:37:34:
b5:1e:f6:35:0e:51:05:45:6d:63:58:0f:14:41:f3:77:f0:0a:
a2:6b:bc:0f:1e:ff:26:1b:4f:aa:7c:7a:e9:9f:01:a9:8d:a1:
62:5c:f3:85:3c:a6:10:cb:ec:da:27:9d:c8:3d:cb:04:a1:e7:
3a:af:6c:dc:b1:34:34:ca:d7:f1:73:b4:e3:c6:69:db:c8:8e:
fe:02:9c:be:2b:af:a1:9c:c7:e7:b3:e5:34:a3:60:b9:b9:23:
58:2a:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:52 2026 by rpki-client