
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
File: iWAvTEQ-2KQOCJEYmHawJXdMdow.mft (raw, json)
Hash identifier: hMKve2ucvC93XvZmzT9nAfrnN2Jtxi0gCYnSRCpUgys=
Subject key identifier: 89:E5:08:C7:8D:9E:7C:EA:72:DD:30:7C:00:96:DC:40:83:65:55:7C
Authority key identifier: 89:60:2F:4C:44:3E:D8:A4:0E:08:91:18:98:76:B0:25:77:4C:76:8C
Certificate issuer: /CN=A91E1EC0/serialNumber=89602F4C443ED8A40E0891189876B025774C768C
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWAvTEQ-2KQOCJEYmHawJXdMdow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
Manifest number: 30
Signing time: Mon 21 Sep 2026 08:39:39 +0000
Manifest this update: Mon 21 Sep 2026 08:39:38 +0000
Manifest next update: Mon 28 Sep 2026 08:39:38 +0000
Files and hashes: 1: iWAvTEQ-2KQOCJEYmHawJXdMdow.crl (hash: tmhAR1SLUIsPTsrzXOBMlyxp1/GTSrNB+ztC09Gqbuk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.crl
rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWAvTEQ-2KQOCJEYmHawJXdMdow.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1EC0, serialNumber=89602F4C443ED8A40E0891189876B025774C768C
Validity
Not Before: Sep 21 08:39:38 2026 GMT
Not After : Sep 28 08:39:38 2026 GMT
Subject: CN=6ab0ed4b-8564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3b:34:69:1e:99:52:62:b9:e5:a6:30:93:fd:
d3:ce:d1:04:8a:81:51:53:03:2a:ed:48:f1:cc:cb:
ee:2b:9d:b6:55:92:a2:b6:61:af:58:db:dc:92:05:
b1:a6:29:33:7c:00:cb:65:79:59:84:e5:1f:ae:70:
a0:4d:53:14:ff:9f:95:18:db:ad:32:04:e6:0e:88:
0c:17:8a:5d:3f:7d:0c:28:97:b5:b9:4c:c4:c0:d3:
e3:09:26:0b:74:16:8b:c4:0d:ba:21:ae:2b:02:90:
1b:da:37:d0:36:7c:8c:95:f1:15:ee:1a:c2:e9:c3:
21:0d:9c:e3:d3:7d:00:1e:4d:94:51:45:f1:34:d6:
b9:cd:ab:2c:8e:59:1d:16:1a:7f:c1:df:e6:f3:fe:
fe:09:47:78:e8:b9:ea:c1:e0:ab:fb:1f:37:ee:bb:
28:0d:ff:e4:a5:1d:a6:08:4d:ad:e4:83:0c:65:4f:
31:70:17:3e:42:7b:9e:27:6f:02:26:9a:63:e4:ea:
a6:8b:ad:32:60:5a:fe:66:4f:c5:8e:0f:d4:07:aa:
19:55:c9:14:5b:71:40:87:71:12:92:47:50:cf:f9:
13:2e:8d:b2:62:e0:43:48:10:5e:fd:40:ac:36:58:
d7:0d:bf:cc:b5:4b:fc:1e:bf:17:32:aa:13:38:64:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E5:08:C7:8D:9E:7C:EA:72:DD:30:7C:00:96:DC:40:83:65:55:7C
X509v3 Authority Key Identifier:
keyid:89:60:2F:4C:44:3E:D8:A4:0E:08:91:18:98:76:B0:25:77:4C:76:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWAvTEQ-2KQOCJEYmHawJXdMdow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a1:6c:4e:f9:21:fb:ab:c9:10:34:98:73:5f:9e:a8:fa:fb:
68:ea:d3:b8:6a:d3:8f:54:c6:89:21:60:ac:90:c3:42:52:c2:
3e:16:89:bb:a6:be:fa:08:26:c7:0e:10:59:f9:64:30:01:87:
1e:d2:d2:be:52:5d:fa:28:ba:ab:88:28:8a:c3:22:27:c1:c6:
ca:54:da:6e:fe:48:df:c7:b7:c4:af:24:33:46:7f:d4:c8:62:
89:fd:4b:04:21:c4:8c:15:34:75:ee:9a:10:ca:75:96:d0:d3:
18:06:31:e2:45:55:f1:6d:ce:ec:74:09:31:00:b5:f4:c8:05:
a1:2a:8f:68:df:e5:31:e1:00:1e:95:a2:ae:db:37:81:bb:7b:
e1:c7:cf:75:37:57:1a:21:b2:19:9e:fb:23:f3:67:a5:ea:1f:
42:fa:43:c1:87:de:14:15:b1:c6:e0:56:64:52:92:3a:51:95:
de:86:b9:61:db:6c:4e:ea:64:98:ff:47:3f:27:78:28:59:05:
a6:0d:90:4c:5f:b6:c1:86:3e:0e:99:ab:9e:8f:32:ab:99:f5:
54:14:d6:44:96:e8:27:65:44:3a:57:ed:0c:3c:b3:03:7e:59:
e7:24:79:8b:1d:c6:5a:d2:9a:f0:fd:7b:3f:3b:ce:f3:a7:db:
86:17:10:dc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MUVDMDExMC8GA1UEBRMoODk2MDJGNEM0NDNFRDhBNDBFMDg5MTE4OTg3NkIwMjU3
NzRDNzY4QzAeFw0yNjA5MjEwODM5MzhaFw0yNjA5MjgwODM5MzhaMBgxFjAUBgNV
BAMTDTZhYjBlZDRiLTg1NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDeOzRpHplSYrnlpjCT/dPO0QSKgVFTAyrtSPHMy+4rnbZVkqK2Ya9Y29ySBbGm
KTN8AMtleVmE5R+ucKBNUxT/n5UY260yBOYOiAwXil0/fQwol7W5TMTA0+MJJgt0
FovEDbohrisCkBvaN9A2fIyV8RXuGsLpwyENnOPTfQAeTZRRRfE01rnNqyyOWR0W
Gn/B3+bz/v4JR3jouerB4Kv7HzfuuygN/+SlHaYITa3kgwxlTzFwFz5Ce54nbwIm
mmPk6qaLrTJgWv5mT8WOD9QHqhlVyRRbcUCHcRKSR1DP+RMujbJi4ENIEF79QKw2
WNcNv8y1S/wevxcyqhM4ZDXHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUieUIx42e
fOpy3TB8AJbcQINlVXwwHwYDVR0jBBgwFoAUiWAvTEQ+2KQOCJEYmHawJXdMdoww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRUMwL0YxRTE2NjMwNkRF
NDExRjFBNjJBOTAzQzVCQTMwRkJDL2lXQXZURVEtMktRT0NKRVltSGF3SlhkTWRv
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaVdBdlRFUS0yS1FPQ0pFWW1IYXdKWGRNZG93LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx
RUMwL0YxRTE2NjMwNkRFNDExRjFBNjJBOTAzQzVCQTMwRkJDL2lXQXZURVEtMktR
T0NKRVltSGF3SlhkTWRvdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCMoWxO+SH7q8kQNJhzX56o+vto6tO4atOPVMaJIWCskMNCUsI+Fom7pr76CCbH
DhBZ+WQwAYce0tK+Ul36KLqriCiKwyInwcbKVNpu/kjfx7fEryQzRn/UyGKJ/UsE
IcSMFTR17poQynWW0NMYBjHiRVXxbc7sdAkxALX0yAWhKo9o3+Ux4QAelaKu2zeB
u3vhx891N1caIbIZnvsj82el6h9C+kPBh94UFbHG4FZkUpI6UZXehrlh22xO6mSY
/0c/J3goWQWmDZBMX7bBhj4OmauejzKrmfVUFNZElugnZUQ6V+0MPLMDflnnJHmL
HcZa0prw/Xs/O87zp9uGFxDc
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:34:37 2026 by rpki-client