
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
File: iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json)
Hash identifier: 7E8pkUFt9ZeUWO80KzyUOg7Tu26qtVifrVQ2z+pFF4w=
Subject key identifier: 9D:4F:94:F3:A2:2C:EE:C7:69:47:1B:13:1F:AA:FF:9B:4B:E7:F3:9B
Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
Certificate issuer: /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Certificate serial: 0191
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
Manifest number: 0187
Signing time: Wed 13 May 2026 04:34:48 +0000
Manifest this update: Wed 13 May 2026 04:34:47 +0000
Manifest next update: Wed 20 May 2026 04:34:47 +0000
Files and hashes: 1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: V0ukRNyD6+awIGNK8AV+1xP1KJCkc4p6ePEkaUNmUq0=)
2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: 73ivG8eex7LmjOrNpv37VdMFlLl7/CFLhIGgaTnXkdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Validity
Not Before: May 13 04:34:47 2026 GMT
Not After : May 20 04:34:47 2026 GMT
Subject: CN=6a03ff68-d088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:40:2d:69:f4:dc:9d:ef:55:2c:12:95:ad:
bf:9f:85:55:66:1b:b7:ee:c1:c3:ed:3b:78:69:c2:
33:cc:82:2d:6d:b6:02:c6:aa:1a:b8:88:f7:06:12:
10:aa:7b:e4:f3:fd:48:4c:12:68:b1:54:59:81:a3:
f0:ae:94:e8:09:4d:34:9e:12:4f:44:36:55:81:e8:
07:21:09:4e:42:b3:01:b3:61:69:dc:f8:8e:f3:4a:
23:e4:2f:3c:36:3e:5a:62:58:7e:44:c5:ac:2c:49:
b4:88:b3:2b:2f:fa:b4:ba:59:f3:ce:27:11:de:5e:
7d:6e:98:c4:f0:81:ad:1e:57:73:10:fe:aa:d8:42:
7f:db:71:e0:dd:db:73:f0:ef:6d:4a:d8:a9:f1:ea:
20:33:d6:64:62:f7:d0:e9:7d:05:14:91:65:ef:4f:
cb:83:e4:49:f1:04:1c:70:4d:ae:5d:cd:c1:ba:bc:
10:e5:80:f1:96:5c:b8:da:dd:54:4a:35:42:77:a6:
dd:26:14:ff:8d:a4:f5:52:de:75:a0:64:7a:76:8d:
16:96:0e:4e:1e:07:81:f3:e9:cc:48:56:9d:a8:fe:
b8:d0:1d:a4:1f:d1:c4:fb:20:92:8f:a3:c6:fc:71:
77:e6:7e:d7:cf:b2:e4:67:fc:bc:33:38:0d:78:72:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4F:94:F3:A2:2C:EE:C7:69:47:1B:13:1F:AA:FF:9B:4B:E7:F3:9B
X509v3 Authority Key Identifier:
keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:81:77:27:43:f0:18:6b:d1:45:c2:10:61:22:d5:22:1d:c7:
a2:a7:d5:0b:36:79:cd:6a:8d:3d:14:36:e0:69:c0:8a:be:8a:
29:8e:c3:30:82:7c:4b:96:71:64:bf:f7:ff:8c:7e:82:ce:bb:
d9:9e:13:79:76:8a:f5:fa:f5:9d:bb:05:f6:18:fb:88:c4:00:
92:a3:cb:d1:ae:6d:a8:2e:03:23:8d:20:66:41:f3:7f:55:12:
3e:03:66:a8:51:80:6a:84:05:1a:30:fd:ce:20:18:f2:32:59:
1f:1c:66:03:98:84:27:2a:a2:c2:fd:cc:15:3c:20:3b:c2:58:
a6:87:b7:91:85:a0:33:10:7c:67:f4:22:11:6c:cc:be:00:d0:
10:a0:2d:cc:70:79:8b:73:b4:40:ec:4d:ce:cc:8e:7f:77:6d:
0c:b2:33:fa:58:5b:97:69:49:8b:47:a6:48:e3:6f:0f:aa:db:
13:23:9d:0d:60:c5:10:01:c1:3b:69:05:20:3a:ac:25:75:32:
be:97:7d:25:4c:1a:42:cd:46:af:28:f9:fc:9a:04:73:2e:60:
69:14:2b:92:30:53:87:22:65:a4:b8:e3:04:b6:e9:65:a0:c6:
f0:9e:d3:4a:8a:fc:53:94:55:82:54:90:13:44:0f:c9:94:ff:
a4:0e:09:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:13:53 2026 by rpki-client