
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
File: iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft (raw, json)
Hash identifier: hMbtoDSCa/Kr74fimXFsHm+FBynF0CDYpxfdMxoHmk8=
Subject key identifier: 50:EA:6C:38:4A:87:9A:7A:B8:71:AB:F5:79:81:BD:DD:D3:F2:31:41
Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
Certificate issuer: /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
Manifest number: 0217
Signing time: Fri 25 Sep 2026 02:59:32 +0000
Manifest this update: Fri 25 Sep 2026 02:59:31 +0000
Manifest next update: Fri 02 Oct 2026 02:59:31 +0000
Files and hashes: 1: iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl (hash: LCehAynx1NZMZr8i8QEQZHNyH/fnYzlbulEEfXnLKbs=)
2: 51D4585A89B211EE9ADA615EC4F9AE02.roa (hash: Kopjf9ZoJzRg8VCg2Qj9EUxQF2CjA+68cqIxaYzasxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl
rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:59:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919821D, serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Validity
Not Before: Sep 25 02:59:31 2026 GMT
Not After : Oct 2 02:59:31 2026 GMT
Subject: CN=6ab5e394-7fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:21:2b:a9:c7:79:df:ad:f8:7b:09:5d:c9:
35:f6:a2:ce:f6:0f:ad:9d:f2:cc:1a:01:96:82:f3:
93:4c:76:9b:3d:0d:3b:2d:85:d9:a8:0d:1c:b3:37:
72:fc:a8:73:06:37:b8:a9:42:cf:99:d8:9b:96:fd:
d1:b8:c5:e9:1d:8f:09:c8:96:10:6d:72:90:67:aa:
01:a8:30:70:a7:7b:eb:8d:71:5f:d5:55:cc:4e:a9:
4f:21:89:26:4f:7b:56:9c:22:25:ac:cd:7a:4c:c6:
52:8d:ec:af:15:4c:12:d5:06:5c:6e:81:3a:2e:5f:
eb:6b:2e:28:f6:79:53:bc:5e:58:17:14:8d:1c:82:
61:63:f4:cd:72:3d:53:06:7c:98:da:41:b1:ae:a3:
5e:11:f8:a4:ce:48:28:5c:52:c1:e9:ad:fa:ca:25:
80:08:38:ec:bf:5d:f5:69:85:9b:33:7f:d1:de:b7:
2f:93:b6:90:47:09:2b:32:ba:ef:67:81:21:8a:51:
ca:b2:9a:53:5f:4f:6a:c6:a6:12:dd:13:5d:51:84:
65:92:75:bb:56:8b:ba:4e:2e:d2:7e:d2:c9:9c:0b:
05:66:47:e7:f7:7d:ff:00:41:b3:2b:4c:cd:cf:9a:
7e:90:83:db:9e:85:bd:bc:66:68:21:99:da:f8:52:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EA:6C:38:4A:87:9A:7A:B8:71:AB:F5:79:81:BD:DD:D3:F2:31:41
X509v3 Authority Key Identifier:
keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:db:1d:74:d9:01:7b:0f:b3:9f:98:3f:c3:db:9f:86:e1:96:
ef:8d:dc:5a:bc:e6:84:12:86:1e:d7:51:c3:d7:75:d8:fe:d3:
1f:61:e6:a8:74:7d:ca:bb:3c:82:f0:68:f9:15:45:63:1e:a7:
18:e0:41:97:7c:50:b0:b2:8d:5c:7c:0e:df:3d:e6:84:93:6e:
01:ac:0b:27:3b:28:d2:22:00:ba:98:4a:51:bf:17:f9:04:64:
33:a4:38:0a:44:53:7c:93:0a:6a:dd:3b:f5:5d:b0:db:27:d3:
26:b0:49:c4:20:4b:26:33:e3:c8:5b:05:81:12:4b:c9:3e:5d:
0a:40:c6:9b:8b:c8:86:a6:49:12:fc:01:5b:d4:16:d4:bf:70:
c8:70:79:26:e4:20:44:9a:ba:a7:49:9b:10:12:a4:fd:6d:1d:
62:6b:ba:39:1b:95:07:65:a5:0b:a5:97:9e:4f:03:af:b3:3b:
50:0b:db:a9:52:25:4f:bd:42:60:2c:eb:a6:01:77:69:b7:ab:
0a:50:77:0a:91:c1:c2:fa:2f:ba:1d:99:5d:09:8a:a3:5b:d0:
8c:de:86:cf:24:1e:fe:51:88:24:58:1a:55:6a:c8:b9:62:7a:
51:9d:8a:cd:76:61:4f:b1:8d:34:37:cb:37:71:60:1a:18:5b:
f1:26:ca:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:32:11 2026 by rpki-client