
$ rpki-client -vvf rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
File: IcuqoETeGlZkRp9Bi80Id7ITlzo.mft (raw, json)
Hash identifier: VTAwooK+CTnwjTCV9bgEB8YfcKBuSZOt3OqGqffDFmo=
Subject key identifier: 82:CD:EE:6E:67:55:70:01:FD:0E:4F:F3:54:DB:7F:16:CA:21:0D:1C
Authority key identifier: 21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A
Certificate issuer: /CN=A911393B/serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
Manifest number: 01C9
Signing time: Mon 02 Mar 2026 00:30:38 +0000
Manifest this update: Mon 02 Mar 2026 00:30:36 +0000
Manifest next update: Mon 09 Mar 2026 00:30:36 +0000
Files and hashes: 1: IcuqoETeGlZkRp9Bi80Id7ITlzo.crl (hash: DozNWN0Z1eyCoCKrXHPHKZHDGQJ1IO1LntEuklB4RPc=)
2: 6538D178628E11EEBF375134C4F9AE02.roa (hash: qVMa/Xz0rkX7Diy34qfbgTAPdgO1If06CjZkRcC7AXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl
rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911393B, serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A
Validity
Not Before: Mar 2 00:30:36 2026 GMT
Not After : Mar 9 00:30:36 2026 GMT
Subject: CN=69a4da2e-7e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:12:75:5b:24:1e:be:d5:c7:9f:e1:bd:40:
2a:c2:38:f4:18:91:4f:43:bb:e4:72:bb:01:a1:51:
d1:d7:a8:6e:74:f2:f4:c4:60:b6:22:4b:c1:2c:4e:
3a:1b:4d:ac:3a:e0:9c:23:75:65:b9:83:83:b1:4e:
a3:d4:43:e2:bf:07:8b:8e:f1:e4:80:db:3b:fa:2c:
a5:52:b8:a8:e4:f5:34:94:8f:51:48:b7:ba:c1:ae:
81:aa:0a:a3:f1:46:86:f0:31:ef:40:0c:62:b2:d8:
e4:2e:c9:dc:9a:77:37:de:fc:26:af:d1:17:ff:f3:
48:67:c9:26:27:1c:c1:bc:94:8b:fc:06:7e:8f:8a:
dd:66:df:ba:f8:49:27:24:5a:97:8d:7f:cc:0a:7f:
e9:12:61:26:9c:cc:76:f7:df:06:b5:63:d3:01:8e:
ac:18:36:83:6a:c7:62:01:06:05:5b:33:a8:c1:03:
06:d6:43:62:1a:5a:17:0b:fe:7c:fe:fe:ea:67:5c:
2b:b4:c6:07:4b:02:b1:53:fd:39:cb:eb:00:eb:0e:
28:59:cd:04:49:9c:0c:a0:69:5a:e7:d2:d8:cd:7b:
ef:ac:f0:8a:b5:1e:de:b6:f5:f6:7c:51:01:b9:1b:
21:e5:20:00:8a:90:e5:81:a3:6a:5f:32:32:e0:48:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CD:EE:6E:67:55:70:01:FD:0E:4F:F3:54:DB:7F:16:CA:21:0D:1C
X509v3 Authority Key Identifier:
keyid:21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:3a:e3:a0:3f:f5:f9:b2:1e:13:40:98:46:3e:20:a1:ac:ea:
2a:c0:ff:4b:ad:08:d0:aa:32:67:e0:02:1f:0e:c7:e9:d6:de:
df:d3:97:f4:ac:c0:05:97:55:c6:e4:4e:6d:3a:08:37:68:72:
57:27:27:00:69:b4:26:a2:62:ea:59:49:b5:31:4c:bc:06:da:
9c:2a:e6:b4:ff:53:13:9e:29:80:d8:0a:56:06:10:87:0a:77:
bf:8e:7a:8d:80:14:4a:89:6b:7e:52:65:b2:6e:52:d1:8e:3f:
5e:01:c0:4f:27:4d:df:0b:c1:0a:f7:db:cf:bd:51:11:8f:03:
c7:50:0e:2e:5d:5c:a6:00:bc:a4:0d:08:c4:c5:35:69:f1:55:
19:0b:ee:43:76:cb:52:71:1c:1d:ef:c1:44:01:fb:24:aa:5b:
b3:23:26:1a:40:ed:5b:01:16:4f:28:1f:2c:51:26:12:69:39:
83:3a:56:ed:e7:33:34:9c:2a:55:52:9a:3d:f4:1e:de:bc:08:
6c:e1:98:8a:30:20:eb:64:99:1e:ef:59:37:4b:94:5a:e5:9a:
5b:e6:c8:04:ce:63:37:32:e7:9c:48:e8:55:20:41:8f:15:9e:
8e:d5:e6:5e:5f:37:dc:fb:a7:60:59:3c:ca:32:5a:6d:95:a4:
e3:a7:dd:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTM5M0IxMTAvBgNVBAUTKDIxQ0JBQUEwNDRERTFBNTY2NDQ2OUY0MThCQ0QwODc3
QjIxMzk3M0EwHhcNMjYwMzAyMDAzMDM2WhcNMjYwMzA5MDAzMDM2WjAYMRYwFAYD
VQQDEw02OWE0ZGEyZS03ZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApoISdVskHr7Vx5/hvUAqwjj0GJFPQ7vkcrsBoVHR16hudPL0xGC2IkvBLE46
G02sOuCcI3VluYODsU6j1EPivweLjvHkgNs7+iylUrio5PU0lI9RSLe6wa6Bqgqj
8UaG8DHvQAxistjkLsncmnc33vwmr9EX//NIZ8kmJxzBvJSL/AZ+j4rdZt+6+Ekn
JFqXjX/MCn/pEmEmnMx2998GtWPTAY6sGDaDasdiAQYFWzOowQMG1kNiGloXC/58
/v7qZ1wrtMYHSwKxU/05y+sA6w4oWc0ESZwMoGla59LYzXvvrPCKtR7etvX2fFEB
uRsh5SAAipDlgaNqXzIy4EiaTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILN7m5n
VXAB/Q5P81TbfxbKIQ0cMB8GA1UdIwQYMBaAFCHLqqBE3hpWZEafQYvNCHeyE5c6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzkzQi82N0QwOEJBODYy
OEMxMUVFOTU2NUI1NjlDNEY5QUUwMi9JY3Vxb0VUZUdsWmtScDlCaTgwSWQ3SVRs
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ljdXFvRVRlR2xaa1JwOUJpODBJZDdJVGx6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzkzQi82N0QwOEJBODYyOEMxMUVFOTU2NUI1NjlDNEY5QUUwMi9JY3Vxb0VUZUds
WmtScDlCaTgwSWQ3SVRsem8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyjrjoD/1+bIeE0CYRj4goazqKsD/S60I0KoyZ+ACHw7H6dbe39OX9KzABZdV
xuRObToIN2hyVycnAGm0JqJi6llJtTFMvAbanCrmtP9TE54pgNgKVgYQhwp3v456
jYAUSolrflJlsm5S0Y4/XgHATydN3wvBCvfbz71REY8Dx1AOLl1cpgC8pA0IxMU1
afFVGQvuQ3bLUnEcHe/BRAH7JKpbsyMmGkDtWwEWTygfLFEmEmk5gzpW7eczNJwq
VVKaPfQe3rwIbOGYijAg62SZHu9ZN0uUWuWaW+bIBM5jNzLnnEjoVSBBjxWejtXm
Xl833PunYFk8yjJabZWk46fdnA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:02:11 2026 by rpki-client