
$ rpki-client -vvf rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft
File: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft (raw, json)
Hash identifier: 8QjAovwXCNJctqhVglSmjIZ2YJRnSzInMSyoh/q0V1k=
Subject key identifier: D6:2C:86:F2:43:0B:A5:0D:A1:C6:12:28:48:BB:B5:BC:3C:85:1E:16
Authority key identifier: FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03
Certificate issuer: /CN=A91226E9/serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503
Certificate serial: 08C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft
Manifest number: 08BB
Signing time: Mon 02 Mar 2026 02:35:32 +0000
Manifest this update: Mon 02 Mar 2026 02:35:29 +0000
Manifest next update: Mon 09 Mar 2026 02:35:29 +0000
Files and hashes: 1: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl (hash: +9Sfo81VeK2TnOZWiR6kEPGUalyExgeudQ0hobDHDJ4=)
2: 22FDFFE88DF511EFB5AC9269C4F9AE02.roa (hash: aH5SgttT3yBxPoJZcOUIaaeUL8JdCzJhMaUjR/JZqLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl
rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2249 (0x8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91226E9, serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503
Validity
Not Before: Mar 2 02:35:29 2026 GMT
Not After : Mar 9 02:35:29 2026 GMT
Subject: CN=69a4f773-4283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:20:0f:a0:9b:b5:74:47:d3:89:b0:22:63:
96:9d:42:1c:29:17:a9:69:1a:6c:e9:86:3f:9c:41:
b4:9e:17:f7:b7:20:db:c0:e3:0c:72:27:d6:89:a2:
25:3f:84:54:4e:fc:4c:6a:b9:53:fc:72:63:42:23:
b0:a1:96:af:8e:af:05:78:16:a6:26:ef:ac:80:2e:
42:da:75:5e:96:e1:f3:82:f0:0d:cf:be:12:b3:b0:
af:7a:e9:ab:a3:a6:09:e8:d7:4d:b0:70:bc:9f:53:
47:e8:f1:ca:db:8e:77:45:82:2e:8d:5c:39:62:f7:
f0:b3:62:a0:4f:47:c1:73:9d:05:ad:0b:a6:33:f1:
32:79:d6:67:5e:f0:dd:df:7d:65:24:08:3c:49:c2:
b5:93:fc:68:ab:d6:40:9f:b2:9b:d1:44:65:72:5a:
8e:23:58:04:a0:7f:be:8f:0c:3d:f5:1c:d4:dc:c2:
00:67:0e:11:89:30:f8:3f:d2:1f:e1:8a:40:b9:22:
18:03:85:29:3b:ec:f7:c1:2e:6d:47:a2:38:00:64:
ed:c7:06:be:58:58:8d:78:eb:f5:c9:bd:26:07:09:
ee:18:e8:2e:fa:cf:1b:70:e9:34:06:ef:83:d6:11:
4c:cf:26:00:36:9c:f6:a1:04:6c:b4:6c:c0:dc:e2:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2C:86:F2:43:0B:A5:0D:A1:C6:12:28:48:BB:B5:BC:3C:85:1E:16
X509v3 Authority Key Identifier:
keyid:FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:7d:ee:4b:26:af:94:c9:b0:a7:72:97:e2:db:39:c3:bb:fd:
fe:8b:53:31:3b:7c:e6:27:4e:8c:56:f1:63:6b:81:cc:55:00:
bd:11:ca:5f:91:d7:69:0a:0a:11:ad:bd:c4:5b:e6:46:c1:5f:
82:db:6d:f2:c3:c8:5e:71:26:67:bb:ba:b0:30:71:a7:3b:c4:
cf:1b:e8:9a:06:2c:47:75:c2:3a:97:6b:46:1d:ee:8b:7c:8c:
17:5a:09:6b:27:ed:05:62:b5:6e:1b:69:ef:75:bb:98:92:b7:
bc:ec:09:62:c5:57:57:5a:8f:9a:15:b5:8f:91:6b:2e:1c:d0:
44:ce:d0:cd:52:be:2f:c7:f5:36:d4:44:ed:17:2d:f6:86:8d:
4a:73:b8:88:26:00:de:5e:e5:a4:59:6f:35:aa:5f:cf:6d:c6:
5a:d4:7d:cd:ef:c0:02:dd:8f:29:1b:14:eb:8d:3d:8c:53:3f:
95:12:6e:bc:b1:53:93:14:4d:56:c3:3f:2d:68:b6:32:33:16:
4b:60:5c:0e:2f:d2:f5:10:9e:45:1c:00:aa:02:84:31:38:6d:
53:92:1b:00:dc:c8:36:48:23:a1:51:ad:b0:3c:96:35:70:a3:
a3:98:75:6b:46:ec:e1:b6:8f:5a:05:d6:ab:25:0a:97:61:65:
04:63:74:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:16 2026 by rpki-client