
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
File: iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json)
Hash identifier: 0SL6WUYk1c+JGi7VCKplNINz2UpimTt2mwuSqNNR68w=
Subject key identifier: 58:D3:56:74:1B:F9:36:D0:88:3E:6B:1E:C2:B8:D4:AA:A9:9F:1B:52
Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Certificate serial: 0240
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
Manifest number: 0236
Signing time: Fri 25 Sep 2026 02:40:12 +0000
Manifest this update: Fri 25 Sep 2026 02:40:11 +0000
Manifest next update: Fri 02 Oct 2026 02:40:11 +0000
Files and hashes: 1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: uqkq6fBqAPWp/jWfhBznpl49EoO33EAA7RMhCA8st/A=)
2: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: 8VCSX3Py1IyN0f9zmOSlchE4nrVyfSkUdTOEL2+Xh+k=)
3: C95DC5F4A27411F1A78F91D46611F970.roa (hash: ORURaqb/tZ2urpCugRZ8/FpqoxngJp0Iv3YmiEfInTM=)
4: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: m4OYQMEnrmC7k1a1yVmKxzd2QvlWXdsaMA1wS2lcsRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Validity
Not Before: Sep 25 02:40:11 2026 GMT
Not After : Oct 2 02:40:11 2026 GMT
Subject: CN=6ab5df0b-76c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:be:89:f8:84:4e:66:7c:8c:73:ad:14:b2:c5:
da:a0:79:d1:5b:ce:81:fc:ea:8a:f2:2f:d1:bd:ae:
cf:6d:dd:62:4e:c3:0e:37:ee:45:99:49:9a:94:51:
57:73:11:5f:31:94:33:74:4b:53:eb:ac:14:fb:5b:
a1:b0:7c:fc:cf:0f:17:32:41:34:83:8a:88:8e:b5:
29:77:9c:97:b7:1c:19:a4:49:fd:c5:48:b2:2c:d9:
b2:16:46:87:4d:1f:3c:39:69:ec:b9:87:3e:b8:e7:
7e:5d:ed:6a:6b:b6:02:8f:6c:0e:ad:54:3c:2e:44:
51:31:94:14:b0:a1:fe:a2:a1:bd:a9:f3:e7:69:0c:
d5:b1:81:e6:2e:fb:b5:8b:1a:0d:c0:b9:37:dc:af:
a8:b1:d5:1b:6c:09:dd:f1:34:73:e5:bf:5a:9a:e6:
c6:cc:e0:be:f9:cd:a7:ef:68:d9:3b:50:1b:cc:f0:
d5:4b:2a:19:a1:9a:f8:55:c0:24:01:13:8d:3b:1e:
da:3f:78:b4:71:57:24:8e:0d:77:e6:36:4b:e1:f8:
cc:fa:34:04:c9:2d:c5:81:5f:8e:f0:5d:29:d9:06:
ac:a3:27:bb:11:38:d9:9b:84:08:2a:51:b1:ce:de:
cf:1f:52:72:e3:3c:5d:38:e0:de:35:74:75:4d:26:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D3:56:74:1B:F9:36:D0:88:3E:6B:1E:C2:B8:D4:AA:A9:9F:1B:52
X509v3 Authority Key Identifier:
keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:cb:94:fe:fb:b9:77:bd:44:0a:99:2b:8a:8d:7b:64:fb:3f:
f8:5b:57:59:03:57:00:d9:bd:62:5c:38:b2:77:21:8f:61:23:
78:4e:d4:17:40:28:9b:b7:ab:48:a0:1f:b8:91:84:a2:7f:6d:
5e:d3:70:af:ad:ec:86:c6:52:42:ec:eb:b5:63:0e:08:63:35:
41:c5:5e:19:da:39:14:92:6c:f7:66:7b:12:88:c0:d5:0a:10:
3e:47:1e:37:2a:de:f1:c4:72:04:4d:af:2c:c0:a7:70:0b:2f:
2d:38:a7:ea:f1:64:25:ed:19:79:ea:7d:65:66:06:be:ef:03:
24:a9:e7:7f:51:6c:66:50:59:50:9a:0f:40:66:a2:a0:f9:56:
09:7d:cf:81:df:af:eb:c3:39:98:02:c8:4a:7e:1b:ae:e8:55:
70:69:a2:33:d7:73:24:ba:1e:6c:80:01:25:27:25:ac:79:bf:
59:0a:ac:40:cd:1f:e6:60:5c:01:71:19:cc:af:5d:74:1d:35:
ca:42:82:ad:8c:53:9d:01:e0:ac:0b:38:99:e5:bc:9e:bf:6a:
15:81:02:ac:20:13:98:34:9f:39:30:1a:bc:7a:8a:c1:a0:d8:
1f:f0:1f:af:8c:59:d2:5c:52:5b:6f:bd:2f:08:f7:28:0f:f8:
84:b4:80:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:40:35 2026 by rpki-client