
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
File: iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json)
Hash identifier: NCQyEvcKonaFjT3sO8l9jRBredV4KigBZUuh62CJGBs=
Subject key identifier: 85:C7:A2:EF:F1:38:01:D6:61:32:3D:D4:D7:25:3F:9C:4E:6D:92:CF
Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
Certificate issuer: /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
Manifest number: 01CD
Signing time: Tue 29 Sep 2026 04:11:22 +0000
Manifest this update: Tue 29 Sep 2026 04:11:21 +0000
Manifest next update: Tue 06 Oct 2026 04:11:21 +0000
Files and hashes: 1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: WXqZh9xesMhDWtc+1991I9OjdytSh4QDOEceSOU1+Cw=)
2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: 73ivG8eex7LmjOrNpv37VdMFlLl7/CFLhIGgaTnXkdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 04:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Validity
Not Before: Sep 29 04:11:21 2026 GMT
Not After : Oct 6 04:11:21 2026 GMT
Subject: CN=6abb3a6a-ab0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:99:94:bd:08:f5:4d:56:16:ca:a1:41:7d:
d4:f0:ab:95:e3:5b:2c:40:06:5e:12:bd:e3:ac:c1:
0f:6f:ac:10:73:cf:45:a9:c4:da:00:5f:76:84:92:
cd:89:26:d3:15:d7:04:81:db:b9:d9:f0:fa:fe:7a:
c2:80:01:ad:d8:44:a8:5d:8b:21:48:30:30:72:55:
09:40:58:23:cb:cb:72:5e:f8:dc:bb:52:9e:5b:8c:
b6:c4:25:03:98:8c:6e:12:4c:7c:06:ae:7d:8a:93:
6c:16:7a:46:ff:8d:da:b4:51:04:14:20:c8:7e:e2:
7b:5a:d5:4e:4a:37:d3:a7:03:ab:5c:7b:b5:92:fe:
a6:2e:ce:2f:6a:cb:dc:c6:fa:34:ba:26:67:da:16:
50:31:51:13:95:2d:1a:c2:4a:c0:79:9d:3f:43:04:
fd:e8:65:8a:9e:50:6b:63:9d:cb:b5:96:0e:d5:c3:
87:8b:e5:45:27:9c:bd:c0:51:63:ec:33:02:14:f4:
84:d6:b0:7d:5a:23:f4:f4:2a:24:13:21:b4:f1:03:
6c:fc:20:18:dd:8c:ee:74:35:e3:f8:67:b3:fc:9d:
37:80:60:25:c5:3b:de:45:58:df:78:86:4d:f8:c6:
60:7c:c2:3a:d3:44:1b:d9:88:9b:51:e6:b0:bb:e5:
9d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C7:A2:EF:F1:38:01:D6:61:32:3D:D4:D7:25:3F:9C:4E:6D:92:CF
X509v3 Authority Key Identifier:
keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:2f:48:b0:a7:27:9a:47:25:0c:72:2c:9c:8c:5d:e5:21:1f:
a1:49:aa:6f:15:0d:ac:9f:4f:cf:ce:1f:06:39:9d:b7:4b:17:
b8:f0:3e:c9:d8:d9:85:1d:43:77:77:ed:52:70:e0:ae:74:3f:
5b:f4:24:3d:3f:86:2a:af:41:55:09:ef:99:d6:ce:94:b8:ca:
e4:c9:a6:bf:83:d9:5a:88:c3:a9:2a:50:a4:af:04:8c:ea:23:
c4:d7:bc:dd:eb:2f:ed:3d:7c:e0:2e:f5:c6:b3:67:24:c7:d1:
46:02:ca:39:f6:d5:f4:c6:16:f5:93:73:d9:71:d9:47:e3:22:
34:b0:a9:68:97:fb:a2:ae:36:d6:ef:a1:70:f0:43:dd:8a:73:
a4:0d:54:df:55:a5:7f:2c:e9:a4:0b:06:d2:c9:5f:f7:de:fe:
ce:fb:8a:14:34:29:64:11:1e:70:4e:d8:63:15:a1:65:6e:f8:
86:b9:d7:23:02:2a:2d:77:48:64:a5:31:eb:0a:03:d8:e4:98:
7a:a1:c9:c6:74:7c:71:52:d0:d8:38:a5:a7:ec:a1:11:15:4f:
76:f7:de:ab:a0:93:35:33:9a:b0:04:eb:85:5b:cf:ac:54:7c:
b4:5c:0b:06:0a:4e:c4:a1:28:61:f5:a1:59:4a:45:39:c6:f3:
b0:ef:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:38:47 2026 by rpki-client