
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
File: IW4UMOXDDg0jp10HDbeJi5CEl5k.mft (raw, json)
Hash identifier: RJ3Cdi5lDatV0C+clv49SbX32Ee4rowhVJZgVRijRkY=
Subject key identifier: E2:01:C0:BE:2E:6F:AC:17:C9:FE:D8:D5:A0:E6:4C:5A:55:F7:A0:0E
Authority key identifier: 21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
Certificate issuer: /CN=A919A5B5/serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
Certificate serial: 0891
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
Manifest number: 0883
Signing time: Wed 22 Jul 2026 21:14:18 +0000
Manifest this update: Wed 22 Jul 2026 21:14:17 +0000
Manifest next update: Wed 29 Jul 2026 21:14:17 +0000
Files and hashes: 1: IW4UMOXDDg0jp10HDbeJi5CEl5k.crl (hash: G3jYizfyTHGrq3YXJ+wo34mc+p2/Jve/QAfx2kL3PNc=)
2: ACD444282EC911EB99EC263DC4F9AE02.roa (hash: rCKXyCh+EMd4ulOOsHCpQ92EvtiU4kyrN3RmnguBNlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl
rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:14:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2193 (0x891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A5B5, serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
Validity
Not Before: Jul 22 21:14:17 2026 GMT
Not After : Jul 29 21:14:17 2026 GMT
Subject: CN=6a6132aa-0776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:fb:7f:5e:0b:00:0e:eb:c3:c3:92:e4:77:
97:5e:62:a5:34:b9:1c:84:22:e1:eb:8b:10:3c:d7:
12:c4:5b:27:9c:33:d9:4a:52:50:2a:4c:fa:dc:14:
df:dd:35:1a:dd:65:69:28:b6:ce:ec:c6:a3:61:6f:
69:30:24:7e:6a:0f:f5:68:04:3e:99:db:f8:bc:85:
89:64:6e:99:05:05:e4:35:bd:5d:93:3f:79:83:85:
9c:63:88:ff:a2:2d:d5:7f:1d:c3:2d:da:f7:64:13:
e0:45:36:c5:ce:40:47:e4:c4:3c:43:99:8c:fc:53:
ee:8f:e3:cd:9b:00:0f:6c:95:ee:00:d6:93:56:ea:
9d:3c:44:a4:66:85:76:fd:c6:fb:01:c8:fc:6c:a5:
35:4d:a4:a8:f9:42:35:6d:d5:c6:da:7d:55:88:8f:
73:17:a8:dd:ec:d3:07:29:f8:0f:f2:2e:be:fe:44:
45:85:60:d3:23:40:07:b8:88:1b:63:ab:10:42:64:
02:1c:bf:04:32:b1:48:43:46:9b:74:87:e1:2d:ca:
58:9b:a5:2e:76:1e:10:d1:73:43:71:b1:5c:39:fb:
63:55:2b:62:02:a8:5b:74:1e:f8:1b:43:87:f2:03:
e0:be:2a:fa:fa:7f:ff:7c:52:c6:fb:58:c4:bd:c3:
cd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:01:C0:BE:2E:6F:AC:17:C9:FE:D8:D5:A0:E6:4C:5A:55:F7:A0:0E
X509v3 Authority Key Identifier:
keyid:21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:73:35:8e:c3:bf:98:80:96:24:41:0c:2f:30:3d:31:64:6e:
aa:82:bc:71:44:a3:87:40:9c:48:99:33:70:e2:b6:e6:ff:96:
7c:bf:4f:83:d4:c5:ea:96:93:a2:8b:4b:39:d3:35:72:61:7c:
1a:0e:49:c4:e2:bc:6d:a5:eb:c0:4a:47:0b:88:75:51:d0:60:
d9:1d:0c:5e:3d:43:3c:13:62:6e:aa:90:68:d9:e9:52:ad:38:
5f:e6:77:16:5a:64:04:98:d5:35:07:2d:2c:64:82:f1:28:3d:
60:09:ee:4d:8a:9d:2e:79:8e:90:e5:84:0d:d5:36:2b:aa:55:
28:4a:3d:f8:7d:7d:af:98:da:ba:51:65:4a:5f:3c:75:45:64:
ee:54:d6:66:0c:ac:08:64:31:99:2c:57:55:e6:10:cd:54:95:
c0:b7:5b:04:01:92:d0:46:fe:f8:a0:6e:f4:75:e7:8c:32:34:
a3:8f:aa:b3:df:39:31:2b:8a:74:64:1a:b6:0c:2d:d9:78:92:
2f:b1:ea:86:ee:39:88:64:3e:17:45:0d:e8:f2:4f:b4:02:a5:
52:16:c9:0e:87:d4:22:bb:87:34:65:94:6e:7d:6b:1e:e4:ae:
bd:53:2f:3b:d2:ea:e3:ea:1c:e8:fd:7c:7f:0c:b6:82:e0:49:
fe:5a:69:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:39 2026 by rpki-client