
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
File: iuWu7yqR89-GYD7cVP6ExbtXnBU.mft (raw, json)
Hash identifier: nplRfT7eRxxRTWamZf1c/a7kGEz45ug2CujE5D55OZk=
Subject key identifier: 84:E8:18:F6:23:83:D4:3E:EE:8D:EF:02:94:B9:99:0A:BA:82:E6:23
Authority key identifier: 8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15
Certificate issuer: /CN=A9167CB5/serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15
Certificate serial: 0197
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
Manifest number: 0192
Signing time: Thu 23 Jul 2026 05:48:02 +0000
Manifest this update: Thu 23 Jul 2026 05:48:01 +0000
Manifest next update: Thu 30 Jul 2026 05:48:01 +0000
Files and hashes: 1: iuWu7yqR89-GYD7cVP6ExbtXnBU.crl (hash: ii0rZI0DZ52157AIajG2bZ/B3UjXnWympcREHPBZAYM=)
2: DC857BE8843111F09719836AC4F9AE02.roa (hash: O+A6fzSJr2TZ+7/KCaZLr98G06DnnuKn1Adew/Owyqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl
rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167CB5, serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15
Validity
Not Before: Jul 23 05:48:01 2026 GMT
Not After : Jul 30 05:48:01 2026 GMT
Subject: CN=6a61ab11-0fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:dd:b3:5a:57:3f:54:73:7b:ca:98:8d:a3:
19:f8:6f:e4:0e:a7:df:a4:fb:c9:f9:15:4d:af:4f:
15:de:97:79:6f:35:8a:0b:27:c6:85:ea:cc:67:bc:
a5:de:5e:23:68:eb:9c:40:eb:7f:de:6e:03:bb:ef:
40:1d:da:48:7f:67:d9:b9:75:06:ef:d3:93:46:e5:
28:51:9c:3f:c6:8a:b3:3b:57:c9:99:2d:ac:55:3b:
09:15:2c:f7:98:ec:31:44:7d:83:a5:90:07:2b:b2:
82:70:ff:80:f5:b8:33:17:a4:16:20:db:49:f5:86:
7a:34:61:ea:0e:d7:26:dd:f2:fe:5c:b9:68:37:0b:
c7:4f:15:ec:57:58:67:f3:0a:78:3e:a7:b6:e9:92:
a1:db:94:6c:b5:74:6e:85:bc:33:30:2d:cd:af:7e:
4e:f1:dd:16:2c:f7:30:f5:19:cc:a8:68:15:0c:b8:
26:14:13:ca:57:51:37:55:e9:14:fe:98:e3:0c:6d:
2f:41:aa:2c:27:d7:4e:55:74:4c:ea:67:13:bf:fd:
83:b5:bf:8e:ff:65:65:1a:0a:70:35:9f:a9:aa:58:
56:f3:ee:cb:99:c9:88:a2:2b:93:44:98:ae:b8:64:
34:b3:4f:9e:4b:0d:a5:48:e6:13:b3:c5:3a:56:6d:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E8:18:F6:23:83:D4:3E:EE:8D:EF:02:94:B9:99:0A:BA:82:E6:23
X509v3 Authority Key Identifier:
keyid:8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5f:3b:7f:5e:39:ef:fb:bf:cc:12:58:8f:fc:a3:e4:fd:93:
0e:d7:83:f6:d7:ba:5c:b0:c4:86:6d:d8:6b:02:51:14:59:33:
06:a9:df:65:30:fa:aa:3d:7e:4b:0c:4e:32:b9:cd:a0:44:d2:
9c:15:5b:14:02:6c:ee:2f:0e:ac:f3:80:fb:44:b7:be:0d:16:
e6:0f:d3:81:b7:59:2c:52:1f:3a:42:9d:f4:d2:c4:34:f4:a2:
22:b2:45:c7:e6:a4:33:b2:c1:80:cd:d5:0a:10:4a:c6:ab:44:
2c:c3:f6:a8:e5:f6:0e:7d:34:4e:96:49:e9:dd:ce:bd:32:0e:
ef:6a:73:34:e9:8e:b4:85:6d:a2:68:28:88:e7:d7:84:58:9e:
10:ab:ce:59:6d:1e:8d:71:b4:bf:5a:46:e8:63:14:4c:5e:3a:
49:04:67:7a:d8:83:c1:47:1c:13:da:df:3a:23:89:1b:ce:d6:
40:13:72:b2:d3:b9:8c:d9:35:0f:75:3a:ab:5c:05:18:8a:6b:
42:01:c9:f9:2e:e7:9e:cd:09:db:b1:5e:03:32:e1:ca:c4:80:
f2:59:5d:c7:98:94:36:8d:dc:f1:b3:b9:28:42:67:b6:5e:c4:
7f:58:0a:59:c7:2f:0d:72:05:c7:f3:02:a3:3d:06:09:1e:68:
50:d3:c7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:31 2026 by rpki-client