
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json)
Hash identifier: auRTK/b2uuMddEwkFrC61ovOwetCQ7dLeW2z36UAmhs=
Subject key identifier: 6B:40:9F:BF:2A:E6:F4:FD:04:96:E9:EB:3B:C3:D1:09:00:3E:20:BD
Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E
Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E
Certificate serial: 0D24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
Manifest number: 0D19
Signing time: Wed 22 Jul 2026 18:28:08 +0000
Manifest this update: Wed 22 Jul 2026 18:28:07 +0000
Manifest next update: Wed 29 Jul 2026 18:28:07 +0000
Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: 0YW5r7ed6ruj0VYZrELbyAJB1JcY8OKDqA6m0QxJ9uw=)
2: 778B8788063711EA981E916CC4F9AE02.roa (hash: lLzLMFvq75P6s11FcUbySa49RP0prDTXCNFomk88MZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl
rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3364 (0xd24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E
Validity
Not Before: Jul 22 18:28:07 2026 GMT
Not After : Jul 29 18:28:07 2026 GMT
Subject: CN=6a610bb7-3e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:e4:d0:dc:ac:d7:17:ce:63:e7:1c:f4:48:
ff:f7:94:1c:8e:7e:e1:a8:3d:ec:da:a9:5c:25:23:
c3:41:db:2e:3d:82:cc:cc:67:50:d1:f4:71:b0:a5:
ee:4a:42:39:6d:20:d8:87:54:10:7f:06:24:c6:c4:
a1:25:04:dc:3e:ad:67:8e:eb:16:51:a8:16:81:82:
91:19:81:b7:fd:6b:7c:ef:b6:ae:24:e0:6d:6d:f0:
8a:71:32:36:95:ec:44:a6:51:c7:75:26:a0:32:5e:
5f:75:da:65:b8:53:17:d4:82:5e:d0:1c:61:81:42:
a2:c3:9a:2b:c4:f8:62:8b:a0:4f:2b:6e:c8:f7:72:
aa:78:df:48:68:22:16:c2:d7:c3:bf:a6:28:fd:f7:
79:c0:6d:b0:c8:29:3e:fb:10:e0:c3:b1:cc:99:76:
6b:bf:64:bb:b7:74:3c:cf:5b:71:80:d6:85:7d:1c:
dc:26:75:73:76:50:64:e2:a1:7b:ea:ab:58:9b:79:
71:6f:e0:d5:40:15:df:aa:d9:2d:bb:23:d2:cd:f0:
57:50:1d:00:c4:62:24:97:4c:16:a9:b7:0e:35:f9:
18:c5:19:42:63:31:d2:c1:ea:2e:4b:c1:ba:95:19:
fd:46:d9:56:16:4a:99:5a:9d:87:01:55:69:6d:98:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:40:9F:BF:2A:E6:F4:FD:04:96:E9:EB:3B:C3:D1:09:00:3E:20:BD
X509v3 Authority Key Identifier:
keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a4:7e:fc:88:aa:2e:df:a4:8b:c5:ed:41:2e:79:5c:1b:95:
fc:65:34:d5:29:2c:33:56:07:2b:2e:98:c7:00:c9:7a:0e:00:
14:82:ce:74:70:7d:f7:12:84:96:20:4c:a5:01:3b:e1:13:90:
0a:67:bf:e7:61:5c:af:60:f2:c0:ca:03:6c:5b:24:e9:9c:78:
5e:08:54:3f:5f:a5:c5:40:81:6c:cf:99:7c:d3:ed:11:a7:3c:
61:70:48:d2:de:34:2f:aa:96:97:55:ea:ca:a7:53:8f:8a:47:
44:81:d6:26:71:6e:3a:fb:5c:61:be:97:10:a1:e4:d7:64:8c:
19:b9:8f:0a:62:04:b2:e3:cd:41:60:5a:7c:92:c8:68:e8:a2:
f4:9a:a4:92:cf:34:e7:55:c8:39:38:86:ea:66:e6:1e:ee:a5:
9e:d0:62:7e:03:ed:c1:67:c0:e6:65:5c:25:24:4c:f1:9b:a5:
67:11:82:2f:b1:a8:81:31:82:c2:66:7d:3d:8f:91:a8:55:00:
df:c9:2e:ea:46:71:7a:e1:96:fe:c9:e6:d5:80:29:b0:09:6f:
ef:41:0c:52:84:54:03:29:2b:24:7a:3d:bd:cc:8b:bd:12:de:
6e:db:f8:10:85:bc:01:f9:ad:9f:9f:19:bf:93:12:b9:54:96:
fb:be:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:53 2026 by rpki-client