
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
File: Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json)
Hash identifier: RmirnefvockoSYCgZOF84RNKR0assoIx7KU+IcBOzt8=
Subject key identifier: 2E:3D:23:37:6A:6D:3C:79:38:D0:69:42:C8:16:EB:90:30:7A:B9:45
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial: 0514
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
Manifest number: 04C9
Signing time: Thu 16 Apr 2026 23:57:26 +0000
Manifest this update: Thu 16 Apr 2026 23:57:25 +0000
Manifest next update: Thu 23 Apr 2026 23:57:25 +0000
Files and hashes: 1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: PStfJFlSsb8MD4s0F5zZy1Iy5moBdns5zLufX6BUPso=)
2: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: sK7hOQtBbdjqCpDICxDk4yk4JTjSJi8T3sqSf4Lha9w=)
3: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: J/y5zeodGHbN3vp7O7AJhQI6RPkj8TQkWk7gr7sHHCA=)
4: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: 3Nhpzz36VSFEHxJya2rE/6rzHTYaQVksxEeUha/irsc=)
5: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: UCg4wJkvMAwrQhdPO9e6tz9kKiLqe8tkbkp5RwOBI9k=)
6: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: ErPhHuDK3ekByL6ifWQZAzFYI/duFVOlJelFvK4aMbc=)
7: 4B44D6EC0F3C11F1BF24A2AC1C3D8C67.roa (hash: p+BwKAodmJqbLlqXyZtD+mJHN7NUdRLLCP8+RPEq8R4=)
8: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: 2QtjnY/xrXLEykN5W8u+hPxfRcseLCmC+14qCL2SI+w=)
9: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: ddJzWQzhPMRW8RWCPYnqPYLIbALxTv96n4V/wf2N7x8=)
10: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: u+MRGHbFeFUPlLfGYwJEnpOiyClJtJ0KRuVBvJpUNDk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1300 (0x514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Validity
Not Before: Apr 16 23:57:25 2026 GMT
Not After : Apr 23 23:57:25 2026 GMT
Subject: CN=69e17766-6ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:45:bb:2b:77:75:08:e3:5d:f2:7b:0a:2a:
41:c6:5b:ab:88:67:66:9c:90:99:e0:c3:6b:5c:41:
b9:82:e3:9d:32:fd:0c:96:3f:79:09:38:3f:9d:bd:
13:c4:ad:b6:51:12:ca:5f:18:88:76:53:60:16:c9:
64:8b:ac:3d:04:e3:00:5a:0b:61:5e:12:9e:e6:e1:
19:11:c6:0d:cf:de:70:90:f2:c5:45:7b:8d:be:3e:
75:8c:36:eb:f2:9e:f1:51:49:7c:27:25:45:27:31:
b1:21:19:47:6c:6e:30:2d:4d:2d:98:ff:86:75:8b:
a7:b1:aa:cb:0f:38:48:64:3a:47:72:5c:0a:ef:4a:
65:20:02:fd:62:0a:4e:1c:8b:a2:0f:ae:a4:d4:2c:
3f:89:fa:62:9e:14:51:96:a7:c3:29:32:4b:60:67:
3c:01:5e:7e:50:5b:81:fa:67:17:1e:a6:ed:1b:a9:
e4:c0:2e:68:23:8c:1b:db:27:0d:18:58:e8:4f:65:
03:ff:6b:3e:f6:01:04:ca:6f:ff:f3:12:e5:81:1e:
b5:8a:ae:b4:96:81:62:e5:1f:76:35:3d:1f:eb:1b:
ea:b5:18:30:3e:b2:df:42:be:79:76:f9:73:11:6d:
58:6e:76:6c:a8:8e:31:c6:ab:a3:c8:d8:96:e1:0d:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3D:23:37:6A:6D:3C:79:38:D0:69:42:C8:16:EB:90:30:7A:B9:45
X509v3 Authority Key Identifier:
keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:fe:da:f0:a9:e1:ab:94:27:36:57:6e:bf:1c:52:9c:dd:bf:
c5:bc:25:34:c2:ba:14:81:11:f9:e5:f7:23:b3:01:eb:d3:c5:
72:f4:f6:32:cf:c6:e1:75:1d:8b:86:bf:be:8b:61:2a:34:44:
bd:c3:60:3c:df:c1:8c:3a:29:3e:e8:cd:12:38:1c:ef:91:66:
81:19:c5:13:13:3a:14:0e:3c:6f:c7:1b:ea:87:ad:a7:03:d1:
a9:1f:28:00:b7:b7:d2:ff:65:53:5e:d3:bc:bd:1f:2c:77:fc:
b6:bc:96:f7:af:00:e0:51:cc:55:25:7f:d4:7a:ff:3a:99:5b:
e0:a4:b5:c8:53:bc:fc:9a:bb:06:64:32:f8:14:da:5a:24:2f:
e4:ef:19:2a:d4:e7:58:50:fc:23:8a:81:8e:d1:2f:b5:2c:91:
0c:41:87:cb:0e:38:0b:39:06:02:7e:4d:b0:12:d7:69:bd:05:
ec:17:74:1d:f7:f7:90:ab:c9:c0:0f:d7:9b:9f:e3:f4:7b:96:
ad:dd:11:29:9d:f6:1e:04:1f:89:70:87:fd:05:23:28:a5:2a:
3d:e2:e0:e3:87:9d:6d:1a:2f:db:0e:9f:cb:00:56:2e:cd:2b:
ec:f7:40:84:65:55:8a:f7:ee:bc:9b:9d:3a:56:54:18:fb:d5:
a0:72:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:03 2026 by rpki-client