
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft
File: IooLm4TrYOtGFVZbAhDVR1xRiKk.mft (raw, json)
Hash identifier: qlgHeA/2nh1NZV/Hwk7Fm0i0khndXd7a73yGouM5Ip8=
Subject key identifier: 3E:5C:2C:18:20:E8:00:49:22:EE:CC:5C:C6:40:9F:23:6F:60:67:3D
Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9
Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9
Certificate serial: 0C12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft
Manifest number: 0C08
Signing time: Wed 22 Jul 2026 19:09:08 +0000
Manifest this update: Wed 22 Jul 2026 19:09:07 +0000
Manifest next update: Wed 29 Jul 2026 19:09:07 +0000
Files and hashes: 1: IooLm4TrYOtGFVZbAhDVR1xRiKk.crl (hash: UAldT+HG2WgfC1/Q2gb9NJpgcEqJJK9SaYcJtteBeqg=)
2: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (hash: g0hHwavKHkMKzW+fUc9yoxIkfZMTCDATCQiZVk5QwDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl
rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3090 (0xc12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BE2F, serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9
Validity
Not Before: Jul 22 19:09:07 2026 GMT
Not After : Jul 29 19:09:07 2026 GMT
Subject: CN=6a611553-171f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8e:aa:a5:18:2e:2c:69:f5:cd:ab:b3:60:d7:
ef:cb:78:a3:64:de:58:30:99:fa:e9:d6:70:49:09:
b0:a7:3c:91:3f:f7:25:08:46:7b:c4:ff:2b:88:59:
b4:e0:4e:fd:dd:93:f9:a3:49:f9:f9:18:cd:6f:a6:
05:65:7f:74:a1:b5:15:18:c3:89:77:1e:41:63:fc:
bb:ea:3a:a9:78:6a:bc:87:54:07:8f:9b:ab:de:eb:
e8:64:39:2d:dd:4b:19:e6:5b:b9:24:b6:a6:0f:04:
cf:92:e1:22:d4:61:2a:d7:01:ad:3c:6c:c1:bb:cc:
93:0e:09:dc:a0:6e:9e:40:30:15:ec:0f:d3:80:35:
24:55:11:89:6a:ed:7b:5c:52:cb:6a:7e:02:bb:d4:
b9:25:7c:f4:0c:06:26:40:18:dc:ed:72:5b:74:1c:
29:45:20:2b:df:e5:2f:d3:ed:fb:3b:e1:9e:a2:26:
cc:3e:f7:41:e6:f6:26:d4:ca:27:5d:9c:47:5e:96:
2e:19:60:4c:06:29:6f:fb:ef:e0:55:f0:ee:d7:86:
b3:09:c2:61:2b:bd:d3:0e:4d:da:d9:fe:9c:98:7a:
6e:65:58:db:53:73:f2:fb:e0:9a:6c:8d:13:9a:e4:
07:ec:6f:71:26:04:ed:f0:f6:4f:eb:5c:cc:ac:b6:
6f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5C:2C:18:20:E8:00:49:22:EE:CC:5C:C6:40:9F:23:6F:60:67:3D
X509v3 Authority Key Identifier:
keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5e:ae:4e:16:cb:fc:f5:fd:fb:9f:06:1a:ad:50:12:0a:5c:
c1:74:8f:4a:4c:89:17:5b:1c:a9:84:77:1f:ba:c3:fa:e3:e9:
42:7d:eb:83:55:a0:b5:1b:0d:e5:fc:c0:dc:d8:99:b8:f1:45:
5c:48:2c:eb:57:81:63:08:3f:e9:04:73:66:a3:33:96:96:6d:
15:1b:a7:01:e1:00:3a:84:dd:80:42:8f:cc:a0:93:60:d8:a3:
1f:6b:8b:a6:31:d4:3f:b3:d5:f3:d2:8e:4e:3d:1e:44:e2:c6:
78:49:3f:0a:e4:e5:5f:53:ea:ed:fa:7c:04:13:c2:52:c9:72:
51:95:a9:2e:d5:86:23:cb:4f:af:71:7a:f2:d3:61:60:e1:68:
3b:f5:cb:25:5e:89:ea:0b:01:4f:00:da:29:fc:63:1c:b6:47:
31:61:8d:ff:a9:9e:d1:df:81:62:8e:ad:46:eb:7e:96:d2:eb:
cf:a4:30:0e:e2:61:df:f9:3d:92:d2:1a:64:21:64:35:c6:0f:
22:04:e8:05:a2:21:7e:8d:c3:45:21:39:99:c5:b8:be:a7:f7:
88:bd:ba:fe:e7:33:eb:1f:2c:7d:75:12:05:a3:2b:83:af:fc:
c9:d6:3f:06:45:f4:1c:47:c7:a6:61:8d:df:0a:0f:64:0a:7a:
62:31:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:55:09 2026 by rpki-client