
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
File: iU_hE5i2ea6xsRixveZz4Yz26TQ.mft (raw, json)
Hash identifier: rMJAyu5DgCmlouVsQ9P+rHfIL5vPL2/Vvv3E4ahQyhM=
Subject key identifier: F9:E6:E4:BF:36:E3:19:BA:12:41:4D:C9:10:AC:38:5E:FF:50:AC:BC
Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
Certificate issuer: /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Certificate serial: 147F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
Manifest number: 1441
Signing time: Thu 24 Sep 2026 16:53:31 +0000
Manifest this update: Thu 24 Sep 2026 16:53:30 +0000
Manifest next update: Thu 01 Oct 2026 16:53:30 +0000
Files and hashes: 1: iU_hE5i2ea6xsRixveZz4Yz26TQ.crl (hash: F2SZuHjPhQKHUWsUI0+Q5rZmv/BUmhGNFRy59GyWoYo=)
2: qyLwIBj-Wx6AmSM1hxcj9vJ-hvc.asa (hash: 5ab75aSGsxcPedNr8xBXYZisce1dTfJNawoGkCK2fWU=)
3: B2E4A482E4D611EDB15EDE36C4F9AE02.roa (hash: VFVTymwrp8V+E6BLs3C4Cm25rAuqTUZ0SRrvUpgChQk=)
4: AF14F7EC516411F08E03714FC4F9AE02.roa (hash: 388AG09rRUDKvKhyNmxbF15VLGsqHkKaZsreBoM4fr8=)
5: zSE0GmBxc2vuy2NqhgpEC2PZSVM.asa (hash: S0SNtYzstV/TE3XHy8x7+BvtycgWeW73p6rfD0JzYgg=)
6: 1AE4CD843AF511F0B702C741C4F9AE02.roa (hash: WY85OZSDqgP3JecVrbLGH7yASGCrRmcqJRott+5khbE=)
7: 02BFF64EE6A811EFB5943878C4F9AE02.roa (hash: Ip5tGE+xBmZzGbuYsKhlox7o+yVLz36sUIXrRO8cJe8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5247 (0x147f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Validity
Not Before: Sep 24 16:53:30 2026 GMT
Not After : Oct 1 16:53:30 2026 GMT
Subject: CN=6ab5558a-e68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7c:e9:4f:eb:1f:70:68:d1:e3:1a:86:0a:a2:
3f:68:7c:ea:25:cd:58:c8:64:6a:85:c2:d3:fb:1a:
8d:7b:2a:4b:e1:5c:d9:65:e7:c4:0f:a2:64:e8:80:
5a:1f:26:0f:25:a9:b1:04:4b:c6:7f:84:b0:e3:00:
14:c5:63:66:f4:d6:f5:6d:e2:8d:4d:af:b5:79:2d:
6f:86:4a:72:07:4d:3a:43:46:9b:47:1e:02:3c:13:
81:7e:7c:e5:ba:d3:fb:38:77:b1:c4:cf:f0:62:d2:
1b:0d:5e:17:ee:f4:3c:6e:3e:83:87:62:f3:f9:e3:
9a:43:59:b4:05:8d:f3:1a:fb:f9:c4:d0:c7:8e:88:
f0:1e:80:b7:18:77:1b:43:b2:1a:a9:ff:81:03:40:
0a:93:0e:fe:3a:1c:59:27:f6:08:76:73:57:7e:6e:
0d:37:39:f8:8b:b0:9c:62:a3:37:96:61:0a:f1:16:
87:65:a7:31:e3:b3:6e:08:21:db:5f:16:0b:5f:2b:
be:86:87:2f:04:53:ca:6d:41:72:de:b9:8f:74:19:
df:c7:7a:13:98:45:08:07:b9:a5:e1:18:64:3e:be:
18:00:30:d1:d2:de:bb:67:7e:71:77:3e:51:c6:2f:
14:09:de:de:34:90:e9:3a:21:51:25:34:b1:94:00:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E6:E4:BF:36:E3:19:BA:12:41:4D:C9:10:AC:38:5E:FF:50:AC:BC
X509v3 Authority Key Identifier:
keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f2:62:f7:35:7e:4e:f0:15:de:e1:c7:70:1b:bd:21:21:96:
53:20:ce:4a:af:96:87:7d:c8:14:b9:e4:92:30:b9:99:68:d6:
0e:9e:87:59:d6:60:3c:3b:e6:ad:83:79:02:4a:4a:0f:34:69:
ca:31:55:94:51:04:a7:61:6e:17:74:ed:2e:c4:f4:25:03:25:
76:31:c1:9a:14:a7:e5:2c:6a:2f:51:16:e4:85:d4:2b:dd:18:
c1:47:f2:24:63:72:2e:7d:f5:ee:f1:0f:49:5b:32:66:40:3f:
63:27:ba:03:30:bb:6c:4d:a6:88:a2:6e:0e:13:77:58:f4:45:
ab:2d:71:ad:be:45:b1:76:97:44:a2:6e:27:3d:1d:6a:22:12:
9f:a0:be:43:e1:08:28:24:65:69:d9:02:4b:86:5f:20:eb:ea:
70:96:f0:f3:d5:ae:73:2f:1b:af:ae:57:cb:19:6f:7a:a6:ec:
f8:a5:d2:d7:18:eb:ea:81:e5:d1:77:47:06:b3:d7:50:f8:11:
6c:dc:b2:a1:52:8c:52:ec:ff:db:fc:86:c1:1d:43:b9:64:95:
50:cf:95:48:cb:6b:4d:81:b0:24:c8:b0:44:8e:bf:eb:d9:59:
f4:e2:03:0e:a2:2a:ba:22:af:25:c1:cf:05:3f:de:04:07:9e:
19:9f:c5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:30:25 2026 by rpki-client