
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
File: IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft (raw, json)
Hash identifier: Qk6EQe0ULlHLYeMtbWv/ou8w0X/nItIzSDjG5bM9e74=
Subject key identifier: FE:64:64:77:D8:CB:5A:11:95:F3:A7:69:8F:95:BA:B7:F0:31:31:76
Authority key identifier: 20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E
Certificate issuer: /CN=A918C2EB/serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
Manifest number: A9
Signing time: Fri 13 Nov 2026 07:26:54 +0000
Manifest this update: Fri 13 Nov 2026 07:26:54 +0000
Manifest next update: Fri 20 Nov 2026 07:26:54 +0000
Files and hashes: 1: IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl (hash: 233fFxJnCkYCfTOgVjhOrz4Cjwx1DI7xL9K7kelDveU=)
2: 9B67FC6CE61511F0BA7CC46D6A6F56BC.roa (hash: RXKHt1MxZAi094IIW7YlJh5giMLTwFT/Xi1lVrRSFcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl
rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 07:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C2EB, serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E
Validity
Not Before: Nov 13 07:26:54 2026 GMT
Not After : Nov 20 07:26:54 2026 GMT
Subject: CN=6af6bbbe-f831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:38:3e:2a:a4:de:5d:b0:16:8b:69:1a:ea:
f2:2f:76:ca:dd:eb:74:6f:73:64:a2:f5:29:0b:f8:
c7:c3:5c:d3:3d:fa:f2:da:70:e4:ca:8c:a1:85:bf:
7d:81:b5:da:df:fb:f3:23:ed:bf:85:68:94:b6:0f:
83:28:60:6a:30:31:cf:2b:07:6d:bd:49:31:6c:d9:
1b:f9:f3:2d:cb:44:d6:73:9f:fd:56:2b:6b:f4:f5:
57:61:2a:3c:3d:4f:16:36:ad:d2:b8:65:c6:8e:aa:
28:d3:32:e2:bc:bf:c4:62:7e:fe:32:12:26:f7:40:
89:38:ff:19:92:dd:14:6b:bc:4d:98:f4:0a:bd:35:
01:4b:d2:a0:cd:37:ec:d6:81:a2:20:a2:65:a6:ae:
5c:1d:1a:3d:4f:6f:77:06:34:4b:d3:43:7e:36:6d:
7f:b5:2e:79:40:95:4f:ce:6e:b0:92:82:4c:22:51:
77:d7:22:b1:94:0c:46:d2:29:60:48:95:02:8f:17:
36:eb:ed:1a:7c:92:30:13:6f:33:2f:5a:c4:9e:0f:
1a:4b:b1:71:43:4b:ce:8c:e3:a0:74:aa:e7:32:b4:
df:ee:c0:ef:7b:fe:0c:74:2d:ad:af:bd:e4:48:3b:
0f:7e:52:f7:fb:39:d1:9d:4c:ea:22:09:35:89:ba:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:64:64:77:D8:CB:5A:11:95:F3:A7:69:8F:95:BA:B7:F0:31:31:76
X509v3 Authority Key Identifier:
keyid:20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:9f:ed:81:3e:d4:96:be:0a:90:7f:35:4f:2e:ff:4b:83:8e:
fb:74:75:35:eb:ca:32:d3:1d:7d:1e:c0:7c:77:2f:08:9f:4b:
c8:bb:4d:c3:5d:e0:88:dc:b3:0a:9f:d0:5c:0b:8c:e7:09:90:
97:70:87:d4:4e:f3:a5:31:86:e5:1c:86:a8:8c:5b:9c:77:e1:
e1:b8:74:3c:0f:bc:57:4d:c1:3d:32:0b:79:77:8f:c2:13:af:
fa:01:23:53:dd:e9:dd:63:46:7a:09:7f:2e:72:7e:1d:9a:7d:
fa:5e:99:0e:41:6a:11:82:e1:19:dc:f5:63:ee:25:67:23:6e:
a3:6f:bf:e9:96:44:b1:23:c2:ad:a6:ef:3a:7b:26:17:e2:80:
bf:b2:34:97:da:0c:54:cd:79:52:ad:3f:ff:a0:a2:41:75:1a:
c0:94:b0:23:c1:f2:1c:9c:18:8d:11:a5:82:24:91:02:37:59:
b4:11:bd:14:0f:b7:e7:99:f4:4c:29:b6:cc:7d:c5:dd:d9:b5:
51:c5:12:5b:79:42:49:e6:22:53:9a:63:cb:d3:90:2e:c8:b6:
b6:b8:04:41:cc:69:af:5f:cd:9e:87:ef:e9:7c:06:8d:f4:03:
09:31:2c:8a:2a:2d:25:17:4f:8c:02:3e:bc:51:9d:3e:1c:12:
1d:f7:ab:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:53:40 2026 by rpki-client