
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
File: iAd3htZlI61ZmNY_aXr0LwOcKqk.mft (raw, json)
Hash identifier: 7FLddyhdN8mJYvZcpoceU/dSvAphNycGOfFEGdLEpFA=
Subject key identifier: 73:8B:D7:03:C6:3D:A3:18:D2:92:6F:10:E5:EB:61:A9:D0:4B:D2:20
Authority key identifier: 88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
Certificate issuer: /CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Certificate serial: 117C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
Manifest number: 1169
Signing time: Wed 30 Sep 2026 17:22:18 +0000
Manifest this update: Wed 30 Sep 2026 17:22:18 +0000
Manifest next update: Wed 07 Oct 2026 17:22:18 +0000
Files and hashes: 1: iAd3htZlI61ZmNY_aXr0LwOcKqk.crl (hash: lCT8D4M5jIs6GyUOIJ9jkFV4zXtxwtFoADtM6vyzU7g=)
2: 744CCD5834F911E98AB73628C4F9AE02.roa (hash: 9W05C1LlPKcEFv9pU3PetAYWB/PzpYrnvZBHnrLu8UQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl
rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 17:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4476 (0x117c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A4E2, serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Validity
Not Before: Sep 30 17:22:18 2026 GMT
Not After : Oct 7 17:22:18 2026 GMT
Subject: CN=6abd454a-6d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:d6:e9:29:8e:f2:32:e1:81:5e:21:10:30:
c0:d4:d0:55:1b:42:55:c8:26:6c:72:3d:74:77:3b:
e2:6f:ff:88:96:77:60:e0:c7:64:42:87:15:3b:97:
95:a2:d6:b8:87:21:ef:96:cb:eb:6f:13:fc:f5:9a:
f8:be:cb:3c:aa:a5:af:b7:18:4e:df:d3:2d:a9:39:
05:06:13:3e:dd:14:82:08:c9:88:fd:0f:95:cd:4e:
9c:01:d3:17:6f:47:2e:70:de:80:ec:85:a1:c1:47:
a7:9d:fe:3a:83:02:04:16:a3:90:a6:c6:81:0c:6d:
a1:b9:6a:63:b9:a1:2d:5b:96:02:64:10:9e:89:36:
3b:86:0f:0d:95:cd:25:de:c7:21:9c:65:e1:f6:09:
e5:10:3b:f6:da:fa:c5:f4:16:82:24:71:5d:a2:c8:
f8:cf:65:ff:ca:ea:69:27:79:14:af:d4:de:ba:95:
fd:66:7e:b0:81:46:9c:cc:a9:9c:0e:07:2f:06:a6:
77:e8:18:d4:41:e4:9f:93:9e:2d:cd:86:fb:68:da:
b8:12:a3:2c:73:40:dc:1e:7d:12:03:2a:ce:66:ea:
30:2b:2e:b1:34:82:37:6a:0a:96:a7:58:a8:09:ac:
8e:3c:6b:b2:57:28:ba:c8:cc:a9:f3:cf:fb:c2:35:
08:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8B:D7:03:C6:3D:A3:18:D2:92:6F:10:E5:EB:61:A9:D0:4B:D2:20
X509v3 Authority Key Identifier:
keyid:88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:30:01:1d:85:59:2c:f3:b8:95:d3:39:4d:29:d1:49:b8:51:
3f:55:aa:d9:1a:ef:1f:0e:b5:f2:94:33:72:0f:5f:cc:02:8d:
48:5f:02:f4:a3:80:a0:79:38:62:8e:20:32:4d:16:22:c1:9a:
53:a5:d2:d1:6b:50:0c:09:cb:e4:a4:46:61:5a:cb:b6:d8:6f:
c5:a5:6e:49:68:79:6c:14:cb:2d:6b:36:0c:8c:3b:7a:d6:f5:
dd:a2:c9:d3:91:4c:84:5b:50:69:ea:c6:87:c0:89:96:3f:c1:
39:24:7a:af:2d:45:d1:50:87:cc:cd:ef:a6:02:21:d0:8b:06:
e1:ba:77:a3:5b:15:1a:ed:0f:ba:f4:18:f4:78:6f:8d:f1:f2:
3b:8e:bb:8b:7b:47:f9:5d:b1:18:cb:af:b2:da:9f:50:13:56:
08:86:6c:cc:11:44:21:f3:ee:46:b8:cb:e9:12:2c:fa:df:0b:
12:56:76:d0:fe:08:70:b7:34:5e:1c:5e:38:44:ba:83:16:e2:
96:42:fa:25:e8:8c:af:30:c4:32:d5:b9:36:7a:78:80:ca:b7:
03:92:0c:7c:1e:ae:a3:fe:f5:b1:b4:8b:0a:6a:f5:38:14:de:
ab:89:08:86:a7:2b:49:27:cd:e5:7f:96:fa:0e:62:b2:c7:8a:
9f:43:b9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 12:57:46 2026 by rpki-client