
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
File: IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json)
Hash identifier: XyxHKzYkKyGCc65NZZ2hu/2MvARqcy2LYh04n7KHMB0=
Subject key identifier: D4:7F:54:A8:CF:1F:45:CF:EC:25:A3:33:7E:0E:23:A9:F7:C1:4E:B2
Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7
Certificate issuer: /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
Certificate serial: 0C5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
Manifest number: 0C37
Signing time: Thu 08 Oct 2026 18:53:08 +0000
Manifest this update: Thu 08 Oct 2026 18:53:07 +0000
Manifest next update: Thu 15 Oct 2026 18:53:07 +0000
Files and hashes: 1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: etMaP0AUZIcB/B8G806v3N79M/7fS0B7T0nGvxloRUo=)
2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: EolASXb1KltLVGZYGCtQ/6/WNNv9j4lXlevPtfmwzdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl
rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 18:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3166 (0xc5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
Validity
Not Before: Oct 8 18:53:07 2026 GMT
Not After : Oct 15 18:53:07 2026 GMT
Subject: CN=6ac7e693-213d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:50:dc:d7:06:be:fa:78:3a:e3:3c:17:bc:
9b:c5:30:1b:87:c0:cb:ce:fc:9a:bb:c2:8c:2a:b2:
e3:1a:91:49:6d:7d:ea:a2:13:d2:3f:c2:f0:eb:39:
40:fb:92:5a:d5:dc:0f:52:e6:37:55:e4:d5:d1:d0:
3a:99:5b:53:6e:7d:08:a6:9c:cc:d1:60:f0:8d:b3:
fa:89:5d:1f:02:2c:c6:66:84:c4:c0:9c:a7:66:c4:
eb:0c:89:4a:9a:08:ac:5c:1c:fa:38:7d:63:58:c6:
9c:14:b2:78:a6:e9:d5:52:f7:55:b1:d5:4f:01:be:
c7:87:a4:bc:b6:da:2c:ee:5c:28:78:97:15:7f:3c:
b3:92:57:cf:87:38:43:45:c0:20:1a:18:bf:f6:ca:
4a:f7:2e:83:29:dc:88:61:e1:b0:9f:06:de:d2:a7:
43:e3:2b:80:ee:2c:7d:8c:23:73:8f:44:84:e9:41:
f9:ae:f6:3a:2c:36:59:87:2f:6f:2a:72:43:00:25:
14:4f:08:03:82:0c:00:06:cd:73:fb:4e:bd:31:37:
b8:27:f1:f4:1b:00:95:73:3a:ac:74:0d:be:1a:b6:
de:a2:71:51:dc:8e:6f:c1:f1:15:fd:b2:59:bb:87:
b3:ec:be:de:66:c5:63:17:d6:e5:27:b4:ff:5f:68:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7F:54:A8:CF:1F:45:CF:EC:25:A3:33:7E:0E:23:A9:F7:C1:4E:B2
X509v3 Authority Key Identifier:
keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e6:30:08:6b:e0:b0:68:37:19:c4:6c:2a:17:09:0c:55:53:f3:
eb:e0:45:71:ce:2a:57:3a:61:8d:7c:7e:85:87:0c:18:1a:e2:
3c:c1:38:ef:fd:9d:6a:24:2e:40:26:ae:05:ec:f8:6c:c7:df:
d6:46:ff:76:d4:10:83:cd:0a:40:d1:72:b1:2b:5b:22:c9:ae:
15:0f:74:03:c9:89:30:40:36:93:63:40:5f:fe:7a:af:98:9a:
6b:8f:df:f7:6d:d3:cb:07:4d:92:7d:47:ff:a9:10:7b:ad:89:
c2:99:3c:af:cf:a3:25:f9:f9:3c:70:46:04:c6:a8:44:a1:2e:
ae:ae:ed:f6:56:f6:fb:1f:2c:d4:e8:bd:5a:d5:6c:24:ef:df:
1e:7e:7c:bc:97:30:92:49:57:25:4c:d3:2e:ad:8d:08:5d:6c:
12:19:9a:f5:e5:9a:34:15:39:97:09:d0:f5:f4:c4:b3:f1:35:
c4:4a:35:34:32:ec:98:bd:d0:f8:9d:99:df:67:ea:ea:be:f1:
88:59:da:81:37:35:43:a2:1c:dd:2a:8a:b1:9b:d7:8c:1c:c2:
6e:42:d5:69:75:a6:8a:bc:6d:9c:28:b9:ca:a7:88:47:e9:60:
39:7d:e8:aa:d6:ec:f9:08:49:bd:d5:39:44:17:5a:f8:64:87:
1b:07:a9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:33:31 2026 by rpki-client