
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
File: iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft (raw, json)
Hash identifier: gRDGBnGcvIV2aU2V0iH0B/Km7tTfBIL+OpSwtAHtEmM=
Subject key identifier: BD:5B:AC:E9:63:94:50:3C:46:58:8F:CF:9A:78:6A:19:8C:D0:66:23
Authority key identifier: 88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF
Certificate issuer: /CN=A913AD90/serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
Manifest number: 01CB
Signing time: Sat 03 Oct 2026 04:28:41 +0000
Manifest this update: Sat 03 Oct 2026 04:28:40 +0000
Manifest next update: Sat 10 Oct 2026 04:28:40 +0000
Files and hashes: 1: iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl (hash: iQaXPUHI0QXjuhN2AwDqs/yu9sbn5trR6SF1iNS+q10=)
2: 5DB3B5AA145C11EFAE012A55C4F9AE02.roa (hash: nKLqD5SzhJ1Mfs2O1Z2CmjuJ0ck/K6EqtpaF3LvWYq0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl
rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AD90, serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF
Validity
Not Before: Oct 3 04:28:40 2026 GMT
Not After : Oct 10 04:28:40 2026 GMT
Subject: CN=6ac08479-1e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:88:ce:82:14:8f:bd:d3:7a:82:67:88:8b:a0:
67:f0:d8:22:f4:8b:14:5f:37:bd:78:52:b4:9a:b2:
07:4b:4f:13:f0:a8:b8:12:a7:8d:50:06:e8:d2:9c:
39:54:0a:92:94:9d:14:0d:4a:02:67:bb:0d:15:da:
8f:5a:13:15:4f:67:b2:65:47:ff:7a:43:12:cc:33:
3f:8e:80:c1:84:e9:1b:aa:da:1e:44:73:13:94:37:
9c:f4:7c:aa:41:da:8e:45:db:45:e9:e3:de:8d:a4:
e6:d4:86:07:dd:b4:18:f1:01:c6:07:cc:17:64:82:
d2:35:b0:16:04:9a:c2:2d:81:b9:8e:81:e4:7a:74:
d5:98:97:f6:85:c1:bc:4f:0e:82:77:d2:dd:d7:24:
93:0c:67:96:10:ba:03:29:23:d1:88:95:95:d7:1f:
a1:7f:ab:62:d8:b1:03:7e:92:6b:6a:5d:32:ca:4c:
e9:50:16:b3:36:3f:59:5f:3e:4b:21:d4:2a:d3:4a:
c7:c5:a9:c6:0c:18:a2:be:14:be:37:71:7c:c0:c8:
be:58:18:57:85:59:ce:18:5f:67:74:99:19:f9:74:
d2:e2:3c:79:66:6c:48:bd:9d:e9:32:09:2d:7f:7c:
d6:39:ba:9e:16:7b:9f:00:21:7d:44:1a:b2:f9:e5:
9d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5B:AC:E9:63:94:50:3C:46:58:8F:CF:9A:78:6A:19:8C:D0:66:23
X509v3 Authority Key Identifier:
keyid:88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:58:3d:1b:b0:95:d3:29:a0:72:bd:ac:5a:c6:48:16:0c:86:
18:fd:aa:53:5e:38:e9:d7:3a:d6:5b:a4:24:91:32:8b:7c:0d:
6b:7e:5e:e4:27:12:18:50:a2:f7:f8:0b:da:0f:bf:c8:f6:71:
a5:42:44:2e:73:0d:de:7d:07:62:fe:56:db:b2:64:a8:b4:e9:
3e:f9:fd:4a:0d:92:b4:61:32:7a:d5:42:e4:d5:ad:2e:e2:72:
23:54:15:b6:44:8d:98:32:ad:6b:56:8a:a3:92:61:0c:14:8e:
4d:fe:e4:41:2d:d5:03:59:94:56:b4:bc:f3:8e:00:c1:4e:10:
e4:90:7f:8f:2b:d3:f8:c1:b9:cb:ae:d5:ef:60:e2:7d:9e:08:
aa:07:87:da:f3:51:57:19:3d:c7:20:c7:57:bb:58:9f:b2:ad:
cc:0b:4d:7d:d4:09:02:8b:0a:5a:2d:38:dc:93:f5:89:5d:ea:
a5:da:0d:f3:7e:33:71:81:6a:66:78:7e:5a:17:cd:24:70:3a:
f7:b5:ed:f4:ca:4d:43:d0:2f:a7:39:85:91:02:ff:77:d8:8a:
45:ef:2b:09:da:65:0b:29:c1:b9:dc:75:70:0f:03:30:c9:94:
4e:a6:4d:85:68:e3:af:f4:b8:b1:8a:0c:17:d4:8c:4c:b1:4a:
84:11:7e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:23:47 2026 by rpki-client