
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
File: IqsnKH1FJndu9FfIiq4NTcomll8.mft (raw, json)
Hash identifier: MbH2FtPCod6QO5Xl9pDa3zotnabI2/hk5cy0Jqc7NOc=
Subject key identifier: 90:30:B0:7D:94:B3:8B:F5:31:80:17:8D:C9:9F:DF:E0:6A:E0:44:47
Authority key identifier: 22:AB:27:28:7D:45:26:77:6E:F4:57:C8:8A:AE:0D:4D:CA:26:96:5F
Certificate issuer: /CN=A919BF94/serialNumber=22AB27287D4526776EF457C88AAE0D4DCA26965F
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqsnKH1FJndu9FfIiq4NTcomll8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
Manifest number: 18
Signing time: Thu 23 Jul 2026 11:04:06 +0000
Manifest this update: Thu 23 Jul 2026 11:04:05 +0000
Manifest next update: Thu 30 Jul 2026 11:04:05 +0000
Files and hashes: 1: IqsnKH1FJndu9FfIiq4NTcomll8.crl (hash: Nk82tEMnRtJMv/iNeWym8DWvlXAuZBY6erdVA1njrtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.crl
rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqsnKH1FJndu9FfIiq4NTcomll8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BF94, serialNumber=22AB27287D4526776EF457C88AAE0D4DCA26965F
Validity
Not Before: Jul 23 11:04:05 2026 GMT
Not After : Jul 30 11:04:05 2026 GMT
Subject: CN=6a61f526-5604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:01:8c:33:71:d3:81:3a:a7:60:e3:bc:dd:71:
f7:34:fa:84:71:1c:30:81:3b:3d:78:3c:36:4d:e9:
1a:68:19:ba:55:46:01:66:4a:10:0e:f6:f0:2e:08:
84:06:19:10:36:e4:48:8d:18:6e:ce:12:8b:57:c8:
cd:ed:3b:95:8e:cd:3a:4d:c0:3e:83:fa:cf:e0:bf:
00:03:ee:81:95:88:55:80:58:42:49:07:72:6c:27:
79:72:fb:df:fd:d7:b1:72:3f:98:72:a9:b2:83:43:
4e:d7:0a:a5:48:a3:ed:e1:df:d2:1a:7c:fc:af:78:
7f:36:06:7d:2c:c1:56:5f:d9:0c:db:70:8c:58:fa:
8c:89:08:07:58:c1:b8:e1:e3:7d:eb:2a:50:89:f6:
d3:8e:41:5b:fd:f9:28:70:35:c2:98:f3:a0:4f:03:
c8:c6:dd:ea:35:66:cd:be:03:06:ab:38:b9:9c:da:
9c:25:22:33:68:8d:4c:42:98:bd:f2:c5:c1:2d:a7:
a5:7e:be:95:c2:54:d5:81:89:41:c2:91:78:c2:c6:
df:85:52:98:2c:1a:64:92:66:81:78:49:d0:99:fd:
90:ae:15:62:9b:ab:7e:07:88:1e:48:bb:3d:3c:d3:
90:de:2a:6e:f8:fe:ba:48:98:69:6c:59:38:e2:89:
ba:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:30:B0:7D:94:B3:8B:F5:31:80:17:8D:C9:9F:DF:E0:6A:E0:44:47
X509v3 Authority Key Identifier:
keyid:22:AB:27:28:7D:45:26:77:6E:F4:57:C8:8A:AE:0D:4D:CA:26:96:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqsnKH1FJndu9FfIiq4NTcomll8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8e:fd:90:89:44:5f:ef:83:ee:5f:3b:8b:89:ee:43:fc:96:
a9:61:27:6f:21:73:3f:33:d1:08:4d:75:ae:75:2a:09:7b:79:
86:c5:f8:5b:c4:5b:c1:a7:86:3b:98:77:b6:05:23:d9:08:41:
72:1c:1f:af:d2:c6:da:34:58:8f:35:50:f6:31:3e:49:a9:a4:
83:ed:df:0f:28:68:bb:38:8d:f7:9f:f0:1d:5a:76:47:8d:10:
f5:88:5d:4b:fb:bf:f7:62:e2:7c:2e:2d:89:68:33:7c:e5:dd:
1e:71:65:88:07:dc:82:cc:af:e4:72:d1:d4:37:42:ac:7f:02:
aa:0b:6f:ec:30:e1:a2:7b:a5:f8:bf:bc:ac:bd:64:f7:ed:e0:
94:a4:6b:c7:43:4e:3b:79:12:6f:61:b8:e2:1d:df:86:2f:4d:
22:04:7a:2c:7f:8e:0e:15:c1:6e:b0:4c:43:67:5b:98:cd:71:
1a:37:e6:0a:1b:65:00:4b:1c:60:04:39:ba:68:bb:7d:4f:37:
10:24:66:ed:00:a3:b1:2b:2f:cb:ca:74:7c:05:e7:8b:46:21:
08:f5:de:ba:2b:b7:07:fe:0b:3f:a7:49:8c:8a:9a:10:1d:e4:
35:6d:fe:2c:15:ab:33:db:ce:00:a4:f4:fc:34:02:80:71:e3:
3c:b4:11:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:12 2026 by rpki-client