
$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
File: I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json)
Hash identifier: WVtHKXlBRKdy0unllcB9+gj3tstljsenXLWkx6hTFn4=
Subject key identifier: F3:C7:87:C8:47:F4:3E:7C:88:5C:80:53:74:E8:24:EC:E0:B8:E7:53
Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
Manifest number: 0124
Signing time: Mon 02 Mar 2026 13:20:54 +0000
Manifest this update: Mon 02 Mar 2026 13:20:53 +0000
Manifest next update: Mon 09 Mar 2026 13:20:53 +0000
Files and hashes: 1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: ADCUF98VCYMHaidroraJqieO/ZJ2BiS6AzgXu4y1uqU=)
2: 43A05F96ABF111F0AF8F880CC4F9AE02.roa (hash: wPYuTSmobZhaRnTY/GjZDyWoVCU3cKsQlUPlALVpkaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:20:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Validity
Not Before: Mar 2 13:20:53 2026 GMT
Not After : Mar 9 13:20:53 2026 GMT
Subject: CN=69a58eb5-514d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:41:8a:c9:21:3e:e7:47:29:9f:98:c2:3d:
20:b0:2c:95:65:62:d1:9d:dd:6a:9a:b2:dd:9b:b8:
f8:d6:bf:ac:dc:ad:6e:b2:18:5c:51:be:16:bc:c7:
88:aa:e1:15:87:0a:56:1e:96:71:09:90:54:f5:41:
ad:d5:40:54:22:aa:3d:d2:89:96:43:44:2a:8d:f3:
c4:a1:a2:58:f6:87:82:26:7e:df:1f:a9:e4:88:8f:
3f:c9:e2:ab:61:fe:62:14:7a:93:bd:ea:85:b7:48:
63:8a:cc:08:b5:72:33:9f:2b:96:ae:ec:fb:82:f1:
8a:ae:92:17:d4:9c:a0:03:ee:2b:1d:bb:40:45:bb:
2a:bf:c0:a1:c1:a8:a1:06:da:9d:31:75:3d:8f:cc:
9a:cf:51:27:3e:d9:13:8e:c0:23:a5:40:ef:87:76:
0f:bf:8b:43:47:59:48:d0:85:50:21:85:78:94:03:
c2:6a:9a:a6:7d:d9:de:e2:63:0b:c7:da:1e:43:73:
c9:a9:3c:30:d0:34:02:02:79:55:96:55:15:c3:17:
a8:8a:4c:cd:e6:47:1a:1d:6c:9a:65:c5:e7:7f:da:
3f:53:bd:79:d7:ca:44:56:d8:cb:13:bc:ab:65:91:
84:19:6b:fe:a7:60:4b:1f:91:19:37:d5:ae:ce:26:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C7:87:C8:47:F4:3E:7C:88:5C:80:53:74:E8:24:EC:E0:B8:E7:53
X509v3 Authority Key Identifier:
keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:37:e5:63:ab:79:cd:cb:13:0f:6f:5f:2a:18:bf:8b:f0:1a:
7e:0a:fa:e0:75:26:bc:4c:09:7b:4a:bd:02:35:08:1c:b8:dc:
3a:50:5e:73:e6:8c:e8:6b:eb:00:9c:10:7f:2d:43:fb:b7:01:
15:7a:d9:d9:98:a1:b9:50:50:cf:eb:85:fa:df:74:0b:05:29:
9b:2b:e8:04:23:c2:e1:31:dd:01:ba:5d:84:cb:90:70:b1:fe:
6c:e4:f3:25:c6:6a:c0:58:52:25:c6:48:23:30:01:36:e8:ac:
61:10:5e:d1:46:cd:82:63:07:95:9f:14:d2:15:ab:de:12:be:
89:a4:86:01:84:07:9d:1b:d5:63:4a:1b:83:7d:4b:7c:64:c0:
b8:60:1b:73:29:fa:2f:43:65:d3:7e:a6:e5:9c:ef:2a:a5:85:
6a:5c:77:99:26:d9:ef:22:76:e5:06:15:57:5f:42:5e:3b:9c:
78:50:db:48:88:91:07:c6:68:b3:95:ff:bd:c8:3c:a9:f8:7a:
9d:a1:ad:cf:1d:d5:5c:84:6d:15:8b:24:8b:e2:7f:bd:6b:32:
95:2e:cb:65:3e:06:af:a9:76:ab:3e:bb:f7:86:92:a5:2e:78:
82:7b:f3:5b:98:eb:f7:5a:c3:32:a2:f5:7b:93:12:84:5b:e4:
ec:26:8f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:57 2026 by rpki-client