
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
File: iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json)
Hash identifier: BFKTEjMHu26Kfjg0EichewVvX9FFmBl5TG0F4dOrGM8=
Subject key identifier: 04:4F:31:52:89:7F:AB:B9:D3:6E:22:BE:7D:45:F3:2A:62:82:04:B3
Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
Manifest number: 0214
Signing time: Thu 23 Jul 2026 04:12:10 +0000
Manifest this update: Thu 23 Jul 2026 04:12:09 +0000
Manifest next update: Thu 30 Jul 2026 04:12:09 +0000
Files and hashes: 1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: 7bXBLeMqXgclZe8vymGc7h8yDsTidCHvY/NsNqF8mLI=)
2: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: 8VCSX3Py1IyN0f9zmOSlchE4nrVyfSkUdTOEL2+Xh+k=)
3: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: m4OYQMEnrmC7k1a1yVmKxzd2QvlWXdsaMA1wS2lcsRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Validity
Not Before: Jul 23 04:12:09 2026 GMT
Not After : Jul 30 04:12:09 2026 GMT
Subject: CN=6a619499-e2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:22:16:4b:d0:a1:19:ca:39:6c:91:4d:37:
95:17:cf:b9:a3:08:ed:92:fd:a1:f0:67:a0:fd:07:
69:e7:37:0a:1e:6f:68:df:0d:e1:8d:e0:cf:2c:5c:
d4:d0:d4:f6:c2:b1:58:a9:f8:e7:6f:08:26:80:d5:
5a:74:27:07:d5:08:db:37:c6:38:22:d0:d0:da:fc:
6c:57:36:f9:8b:82:0a:44:fa:2f:dd:32:f0:30:27:
4b:07:a1:35:aa:13:ce:c4:9b:0c:63:41:b5:5c:7b:
b0:1c:3b:16:4b:bd:e3:9d:e3:ad:a4:97:60:8e:8b:
80:3c:66:27:ab:ed:5a:eb:64:4c:83:c3:25:7a:d2:
0b:b8:ba:d0:ca:84:97:6a:b0:ff:11:7d:22:6d:5f:
40:b7:ff:67:76:0e:09:90:b6:2c:81:5a:ae:9f:38:
49:5e:fd:d8:b2:55:aa:2e:25:13:15:c2:f6:07:59:
c7:fa:81:af:7e:14:fa:1a:2e:9d:4b:6c:cf:a3:a7:
15:2f:d8:97:7e:83:74:c9:db:71:24:12:0d:0c:79:
ed:b6:17:2b:37:1e:eb:8e:5e:a2:b9:09:ad:dd:56:
b9:91:f6:c5:d9:8e:90:80:62:21:b0:9e:db:b7:de:
a6:46:8f:cb:80:e2:8d:aa:19:4a:61:23:60:0f:0d:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4F:31:52:89:7F:AB:B9:D3:6E:22:BE:7D:45:F3:2A:62:82:04:B3
X509v3 Authority Key Identifier:
keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:88:bb:e6:7a:4d:64:ed:b4:41:e6:5f:fa:7b:d8:55:3b:e4:
6b:0f:b0:13:41:91:a8:89:35:7c:b5:ec:fc:07:1c:52:23:af:
69:14:8b:eb:f6:c0:94:f5:80:57:11:32:fa:63:63:62:35:6d:
b0:da:48:e7:df:0c:ff:38:c7:b0:c9:da:86:31:78:0c:e8:55:
4d:e6:53:d6:ef:36:1c:05:10:6f:15:3f:3e:1b:3f:46:98:f1:
ee:c1:4a:ac:e7:97:26:9d:06:95:9b:c1:76:02:93:a7:28:ea:
06:0f:63:c5:45:65:9f:4d:4e:25:84:f8:fe:fe:c0:b8:81:b5:
85:e1:f6:fe:af:9c:bc:7f:6c:1c:41:8d:c4:8b:b6:11:6b:4a:
ee:aa:6b:cf:48:c3:20:ab:53:bd:ef:8a:b4:7d:83:8e:6d:94:
8b:f4:22:bd:ea:c2:ed:1a:1d:41:0b:39:41:5f:c7:4f:98:93:
91:3b:2e:7a:4d:ed:58:1c:a1:91:91:d2:56:0d:55:9d:f0:31:
22:37:ad:3b:36:02:05:df:06:d9:a0:25:4a:fa:48:fe:ad:31:
fb:d0:e5:71:61:e3:56:5c:c6:84:f3:4c:59:7d:eb:ae:c5:65:
c5:64:76:6a:a8:0c:10:3a:c2:d4:bc:b8:30:0b:c8:25:4f:f1:
1d:bf:e7:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY5MzcxMTAvBgNVBAUTKDg4QTJDQjQ2MjQ4MDFCQzlDN0FEQTIyMzgzOUZDM0M1
MzZDN0ZCMjYwHhcNMjYwNzIzMDQxMjA5WhcNMjYwNzMwMDQxMjA5WjAYMRYwFAYD
VQQDEw02YTYxOTQ5OS1lMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsPAiFkvQoRnKOWyRTTeVF8+5owjtkv2h8Geg/Qdp5zcKHm9o3w3hjeDPLFzU
0NT2wrFYqfjnbwgmgNVadCcH1QjbN8Y4ItDQ2vxsVzb5i4IKRPov3TLwMCdLB6E1
qhPOxJsMY0G1XHuwHDsWS73jneOtpJdgjouAPGYnq+1a62RMg8MletILuLrQyoSX
arD/EX0ibV9At/9ndg4JkLYsgVqunzhJXv3YslWqLiUTFcL2B1nH+oGvfhT6Gi6d
S2zPo6cVL9iXfoN0ydtxJBINDHntthcrNx7rjl6iuQmt3Va5kfbF2Y6QgGIhsJ7b
t96mRo/LgOKNqhlKYSNgDw2DzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFARPMVKJ
f6u5024ivn1F8ypiggSzMB8GA1UdIwQYMBaAFIiiy0YkgBvJx62iI4Ofw8U2x/sm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yNkI0OTgxRTVC
MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4bkhyYUlqZzVfRHhUYkgt
eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lLTExSaVNBRzhuSHJhSWpnNV9EeFRiSC15WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjkzNy8yNkI0OTgxRTVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4
bkhyYUlqZzVfRHhUYkgteVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXYi75npNZO20QeZf+nvYVTvkaw+wE0GRqIk1fLXs/AccUiOvaRSL6/bAlPWA
VxEy+mNjYjVtsNpI598M/zjHsMnahjF4DOhVTeZT1u82HAUQbxU/Phs/Rpjx7sFK
rOeXJp0GlZvBdgKTpyjqBg9jxUVln01OJYT4/v7AuIG1heH2/q+cvH9sHEGNxIu2
EWtK7qprz0jDIKtTve+KtH2Djm2Ui/QiverC7RodQQs5QV/HT5iTkTsuek3tWByh
kZHSVg1VnfAxIjetOzYCBd8G2aAlSvpI/q0x+9DlcWHjVlzGhPNMWX3rrsVlxWR2
aqgMEDrC1Ly4MAvIJU/xHb/n3g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:14:12 2026 by rpki-client