
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
File: iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json)
Hash identifier: Vgzm6igyC8/PiowNrU6We/9zZRq67jXYF/zOSi2zMro=
Subject key identifier: D2:B2:1B:79:9C:50:9B:59:AC:7F:EB:45:14:F7:CF:1D:66:64:58:7E
Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Certificate serial: 03E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
Manifest number: 03D5
Signing time: Fri 17 Apr 2026 00:28:05 +0000
Manifest this update: Fri 17 Apr 2026 00:28:04 +0000
Manifest next update: Fri 24 Apr 2026 00:28:04 +0000
Files and hashes: 1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: 33ihahQrspyWj0AOTNFgKqBvkqWB1NOFRIGzSgZzF7E=)
2: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: g/y6tyH2Gsq/YIingTE3FmjJMzDHLagvffaKtJeyX2M=)
3: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: PKziXo5JwfLo2oKzhtquW/s14RITw4Gju81cfabKo1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 994 (0x3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Validity
Not Before: Apr 17 00:28:04 2026 GMT
Not After : Apr 24 00:28:04 2026 GMT
Subject: CN=69e17e94-ed08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:0e:d1:99:86:d0:8a:f5:89:41:42:69:e2:
b2:38:5f:4c:08:59:29:35:5b:12:f6:fd:75:19:39:
7c:34:4f:9b:99:08:e8:15:68:93:26:a7:87:82:90:
62:49:f5:d9:09:2d:d0:36:69:63:7d:ae:30:84:88:
2f:3c:42:72:c7:e6:72:58:e9:f6:0d:af:56:35:86:
32:03:df:41:b0:0a:f9:87:f1:d9:30:de:04:1b:ee:
17:f1:8f:c8:f5:3d:57:a1:b1:18:f1:a9:2d:e2:4d:
ad:48:87:a7:6f:45:4f:2b:b4:8d:64:e9:99:26:67:
bc:2a:ff:aa:d1:dc:e6:8c:b5:f2:ee:20:6b:ab:d2:
fc:27:d5:4f:58:d8:b9:69:31:39:14:a6:43:71:47:
73:00:eb:26:e6:51:a0:a8:d1:63:2c:03:fe:5b:5a:
37:fd:37:5c:cf:95:d5:52:4f:a5:b5:62:9d:be:d9:
98:c2:3c:78:9d:8f:81:30:ed:21:a7:f9:24:a5:94:
c1:cc:6c:75:98:5b:10:fd:e5:2d:7e:48:b7:e9:bb:
69:3e:7e:e7:22:05:21:9e:4a:8d:d0:dc:32:bd:e5:
fd:6d:cc:25:e9:de:f7:f0:cd:01:cf:47:70:70:97:
ce:53:cc:bc:ac:2e:cd:8d:82:e7:39:cc:02:b1:fd:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B2:1B:79:9C:50:9B:59:AC:7F:EB:45:14:F7:CF:1D:66:64:58:7E
X509v3 Authority Key Identifier:
keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:f4:d1:0f:2f:eb:d7:14:06:c9:67:84:37:58:05:e0:58:1d:
9a:06:aa:9d:da:09:ef:da:9f:81:2c:76:37:36:f5:3c:7c:92:
69:e8:81:44:8d:2c:e3:a6:97:75:49:40:0c:51:ed:a7:0f:38:
40:dc:d7:28:dd:4f:1a:9d:9c:a9:bb:73:5b:6a:8c:b7:da:d6:
35:ea:ac:e5:50:26:65:89:2e:62:28:42:0d:ff:b1:ab:85:ae:
9f:5e:76:61:9b:df:3e:a7:c3:e9:93:33:29:a5:88:e1:74:c2:
61:32:6f:b0:da:b6:c4:0c:62:21:2d:39:91:13:90:79:96:ff:
0e:3f:31:d0:54:9e:49:ed:7f:bd:9b:00:40:2d:6e:bb:ce:6a:
41:cc:9e:00:c0:72:26:a9:1c:f3:6b:dc:14:3e:1b:89:8b:a4:
13:5e:14:69:af:1e:13:a1:dc:44:e3:dd:bf:92:a7:8f:8d:06:
0a:8f:22:b7:95:be:ef:f2:a8:d5:6c:8c:e4:e0:07:a1:d7:92:
d4:14:f9:cc:b2:21:96:41:02:77:fa:f5:1c:a2:02:d8:79:db:
c6:a5:94:64:9d:60:78:68:e4:38:11:ec:da:db:6b:38:62:b9:
d8:48:ea:23:e9:b3:95:ee:95:38:fe:ba:3d:f2:43:bd:ee:c4:
fd:58:6d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:30:51 2026 by rpki-client