
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
File: IqsnKH1FJndu9FfIiq4NTcomll8.mft (raw, json)
Hash identifier: evXZAmR0pJZfRbAbwUDA1M+iN64SWqdlr6OxUPe9cvY=
Subject key identifier: 2F:5D:A1:0C:E8:8A:98:01:FF:A7:E1:CA:2E:2A:A1:77:CA:E1:50:FB
Authority key identifier: 22:AB:27:28:7D:45:26:77:6E:F4:57:C8:8A:AE:0D:4D:CA:26:96:5F
Certificate issuer: /CN=A919BF94/serialNumber=22AB27287D4526776EF457C88AAE0D4DCA26965F
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqsnKH1FJndu9FfIiq4NTcomll8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
Manifest number: 3A
Signing time: Sun 27 Sep 2026 09:09:51 +0000
Manifest this update: Sun 27 Sep 2026 09:09:50 +0000
Manifest next update: Sun 04 Oct 2026 09:09:50 +0000
Files and hashes: 1: IqsnKH1FJndu9FfIiq4NTcomll8.crl (hash: TBe/44ydffelb6J57KmUj4Dra8fKHBdqZi8smXlcNpQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.crl
rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqsnKH1FJndu9FfIiq4NTcomll8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BF94, serialNumber=22AB27287D4526776EF457C88AAE0D4DCA26965F
Validity
Not Before: Sep 27 09:09:50 2026 GMT
Not After : Oct 4 09:09:50 2026 GMT
Subject: CN=6ab8dd5f-71c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c3:df:8c:bb:6b:a3:10:44:cf:cc:e5:5d:ce:
1b:ab:aa:4e:ec:e3:61:2d:0c:7e:26:78:c8:bf:3a:
63:35:25:45:12:1c:29:cb:59:57:b1:d1:62:d7:76:
a7:f8:86:49:ef:67:5b:31:68:c1:c3:fd:cb:e0:b4:
35:ae:c3:9b:5a:13:a1:0c:56:a8:a3:29:dc:96:f8:
a6:a1:85:43:5c:08:3c:32:56:95:d3:1c:6a:20:b0:
a9:de:0c:00:df:15:66:5c:d0:a5:c9:64:ef:9b:97:
23:f0:10:89:84:77:f1:2e:7d:71:36:ae:87:9c:ee:
21:ac:90:2c:7d:e5:9d:f1:ee:ef:bd:17:0b:6b:5b:
e7:3f:4d:48:df:53:88:34:07:7a:f3:32:58:de:9c:
07:b7:83:75:3b:fb:22:bc:86:34:3c:31:3b:e3:6f:
91:2d:31:68:64:36:c4:4b:da:f3:ee:12:d0:42:84:
91:5a:ba:57:49:bc:1d:b7:6c:ae:a3:4b:e9:12:10:
b2:dc:8c:d6:0f:5d:46:f6:1c:f9:0b:fb:8b:95:02:
8f:cb:02:fa:68:2b:3a:f6:8f:6f:59:6d:9f:b0:05:
9f:09:4f:d7:cf:92:26:b5:62:00:24:5d:71:53:1d:
3d:47:14:4f:d9:e4:f5:70:9f:9f:57:c0:0f:bd:dd:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:A1:0C:E8:8A:98:01:FF:A7:E1:CA:2E:2A:A1:77:CA:E1:50:FB
X509v3 Authority Key Identifier:
keyid:22:AB:27:28:7D:45:26:77:6E:F4:57:C8:8A:AE:0D:4D:CA:26:96:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqsnKH1FJndu9FfIiq4NTcomll8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:47:1b:6d:63:13:48:86:9b:78:21:e6:9d:37:1a:a1:7f:2e:
18:76:2e:4d:a1:e9:8b:e8:22:1c:71:ee:d4:1e:4b:72:fc:b1:
b6:15:98:e9:1d:df:54:8d:53:47:3c:55:0b:b1:b6:82:68:b4:
5c:fb:7c:73:6d:a1:b8:e9:08:d5:db:f3:e1:33:d0:50:16:38:
79:0f:98:ec:2b:37:cd:d4:3c:05:d4:a9:e0:86:db:e3:e2:75:
82:59:3b:a4:bb:c4:a8:85:3e:ca:d1:38:47:f2:de:cb:b3:2d:
76:e5:2b:5b:1a:9a:45:6c:4f:86:37:94:5b:71:85:05:bb:8e:
22:6a:b4:76:00:a2:00:4b:87:55:5d:d3:14:52:45:00:24:5a:
37:88:d7:41:1a:7b:f6:c8:7a:12:a4:c3:8a:e1:c8:50:11:ea:
f3:1a:6d:dc:87:b6:94:ff:2d:a8:c6:e0:eb:58:61:44:67:ca:
63:1a:9e:8e:ea:66:3a:55:ac:0b:50:c3:70:40:7c:12:92:70:
d4:57:ca:a4:f5:cc:53:e4:df:1f:a6:9a:93:2f:4b:ef:a3:a2:
59:9b:af:ed:bf:9d:73:4a:68:4d:cc:5b:70:9a:cc:9e:24:24:
84:b8:25:5e:69:88:94:81:59:df:c5:a6:ff:bb:67:f1:a6:a9:
9f:14:06:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:05:00 2026 by rpki-client