
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
File: Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json)
Hash identifier: ZUDxDfZDjBPQl9NZNUjEOToyjD2+an9Yfqxk/zDIHN0=
Subject key identifier: CF:20:77:FC:B0:5F:10:14:AE:45:7B:BD:1A:85:85:09:41:83:F3:D1
Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
Certificate issuer: /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Certificate serial: 0827
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
Manifest number: 0811
Signing time: Sat 26 Sep 2026 21:19:21 +0000
Manifest this update: Sat 26 Sep 2026 21:19:20 +0000
Manifest next update: Sat 03 Oct 2026 21:19:20 +0000
Files and hashes: 1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: O0gwe6EQt0Jdc2/c/nRPiznIL+Q1dd+LRqVkbq+u5Gg=)
2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: yigo59Gar+8S1aiuGB+d0Lm9hAb5K16jebQb9hDYj9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2087 (0x827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Validity
Not Before: Sep 26 21:19:20 2026 GMT
Not After : Oct 3 21:19:20 2026 GMT
Subject: CN=6ab836d9-01cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:07:39:29:ab:21:d7:f4:05:77:5c:e3:76:
a2:07:b6:df:9f:96:97:ec:ae:7d:d7:69:c3:9d:db:
c8:11:40:45:0b:93:1e:39:f9:5e:54:ff:30:1f:b8:
cf:06:f3:b5:ce:d7:68:4d:f5:9c:3a:5d:50:4b:dc:
65:21:fa:12:29:ea:c0:bf:ce:55:cc:90:4e:c8:7a:
87:74:a0:02:37:c3:b8:7c:d5:10:25:83:27:a6:3d:
c2:c0:ad:c5:d6:11:db:f0:6f:11:79:b0:2f:b0:d7:
f6:5a:4b:e2:9c:cb:fe:f7:34:ce:47:6b:0e:30:78:
d8:8c:2d:fa:46:53:c8:cf:e4:c7:54:ab:b9:53:c5:
39:80:26:04:c0:94:83:d1:69:e3:95:68:27:76:90:
9e:1d:4b:8e:85:71:29:e8:d6:3a:b9:c2:60:d1:42:
6b:7e:09:71:64:7f:60:f1:d4:cf:36:92:80:f5:50:
bd:4f:e3:fa:bc:08:06:4b:2f:eb:a7:89:6e:c3:a5:
49:cd:75:51:4d:04:d0:1f:79:56:78:6d:8c:11:c3:
76:62:20:b7:fc:d5:2f:40:89:0c:7a:8c:37:b7:48:
c0:1c:40:65:37:d1:2f:cc:4d:48:f6:e6:2c:11:40:
11:e7:54:ff:cb:d1:82:8c:98:22:6b:fe:a4:44:32:
33:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:20:77:FC:B0:5F:10:14:AE:45:7B:BD:1A:85:85:09:41:83:F3:D1
X509v3 Authority Key Identifier:
keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c3:2b:ce:7f:ac:f5:5e:08:04:ff:17:bd:6a:14:45:7b:fd:
ba:01:39:05:89:1b:ad:67:20:c7:50:5b:13:b4:6e:a0:de:09:
b9:88:83:e4:a7:c0:49:b6:7f:5b:06:4f:90:b6:04:09:8c:e7:
98:42:83:87:bc:ec:c2:c6:0b:70:74:d0:48:07:f1:3d:36:9a:
5a:d1:89:6e:1b:0b:d8:a6:6f:75:c4:93:63:c7:cd:bc:d9:59:
fa:54:b8:2c:30:00:62:36:ff:5d:fc:10:b0:cf:85:83:58:09:
5e:cc:ab:f0:8c:6f:5e:fd:14:d4:79:8b:33:6f:5e:99:71:fb:
3b:80:ae:6c:2a:dc:83:1c:aa:03:a2:b3:5a:7e:b5:f3:cd:6f:
1e:eb:64:19:4e:9b:b4:54:8d:46:68:da:e2:5d:40:75:9b:77:
58:51:5d:96:02:a4:d2:25:2f:f2:8b:41:ad:33:99:e3:c3:5a:
50:60:eb:50:2d:22:76:c8:54:cc:5b:81:86:3a:c2:fa:70:7f:
11:68:5e:32:bf:fa:8f:76:fb:b4:5d:15:4e:1d:05:ab:3f:e1:
11:2d:5e:97:20:54:44:e9:99:97:3e:02:ed:5f:83:81:ee:6e:
24:92:dc:f7:9a:89:64:7b:87:be:36:c1:52:1b:a4:83:87:c7:
f7:cf:37:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:44:48 2026 by rpki-client