
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
File: iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json)
Hash identifier: mmEpEAQ3J5JlBeNrWH320vKT4XMOMCSteGhVwOiI38M=
Subject key identifier: DA:34:72:11:97:96:A1:2C:75:1F:E5:CE:85:96:CD:3F:FA:A9:33:4E
Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
Manifest number: ED
Signing time: Mon 02 Mar 2026 14:00:18 +0000
Manifest this update: Mon 02 Mar 2026 14:00:17 +0000
Manifest next update: Mon 09 Mar 2026 14:00:17 +0000
Files and hashes: 1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: TSRYxI2xJIVXdUTzV1Os7TYmziwjjdlhmXyJWAg4pI8=)
2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: lra+qhDRGNXUaND0a9KhE0KK0EaPsUI652BkcyFm2ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl
rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Validity
Not Before: Mar 2 14:00:17 2026 GMT
Not After : Mar 9 14:00:17 2026 GMT
Subject: CN=69a597f2-b3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:7c:a4:8f:eb:b9:b3:7a:f6:02:60:5c:4c:
bc:a0:10:e1:1e:03:a0:59:7e:90:1e:c1:f4:53:25:
70:7e:da:a8:4f:04:d4:43:fc:b1:50:5f:f9:62:08:
23:e8:b5:e0:51:25:94:52:ad:02:e9:b5:ed:46:80:
d4:3f:27:7b:11:46:57:0d:ad:f6:f8:55:20:e2:44:
fc:44:e0:ce:1c:35:e6:25:cd:ff:6e:23:55:04:bd:
3c:3d:6d:31:46:7f:81:0d:02:1a:4b:a1:2a:c9:c1:
92:44:89:6e:3c:81:96:bd:5e:c0:af:91:a2:19:1f:
f9:d5:cf:51:57:c9:fb:18:81:1a:f6:94:64:c2:c9:
08:17:76:6a:1d:fb:ae:cf:28:21:39:16:9f:4e:10:
bc:d8:f6:eb:15:3f:dc:1c:8a:b0:98:2b:3f:7d:55:
2d:cb:f6:76:8f:0e:54:60:06:d5:ba:cb:ae:29:40:
5d:f2:19:0a:80:78:44:1d:90:62:00:b3:49:f6:55:
0a:41:df:c9:1b:0c:f7:0b:72:28:48:52:e4:a7:b3:
f8:18:e6:e3:bb:15:d4:a9:ac:0d:b0:bc:39:75:59:
9e:f3:75:3b:a8:2d:e2:7f:d9:36:28:2c:c7:2d:a2:
60:43:9c:db:c5:a8:48:4e:99:d9:f5:a2:7d:b0:aa:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:34:72:11:97:96:A1:2C:75:1F:E5:CE:85:96:CD:3F:FA:A9:33:4E
X509v3 Authority Key Identifier:
keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c0:08:26:88:26:91:d6:d7:4d:b6:38:1e:2b:fd:b3:b2:27:
29:5e:a9:33:24:ca:23:42:97:49:88:0d:f1:52:b5:21:db:6e:
cf:4e:f7:a4:e9:4c:4e:c2:2c:cd:80:d0:0b:5d:5d:56:30:5f:
62:2d:c1:25:80:d4:68:92:96:a6:05:93:f8:25:ba:b7:8f:b8:
d8:e8:81:15:5a:a8:62:52:3f:ff:7a:fb:a1:26:81:23:50:60:
2f:63:91:d9:03:86:a1:d5:10:dd:1b:f9:ee:52:30:4e:33:b1:
42:80:95:d9:38:26:2b:c4:91:88:f5:bf:ad:6e:8d:6b:b5:67:
c3:6b:4a:8d:d0:d3:66:fa:31:32:b4:24:52:a9:6d:64:66:b3:
17:3e:9a:a1:18:7d:42:33:60:b0:bd:09:b9:63:6d:d0:92:c4:
93:0f:0a:6d:1b:e3:ac:ab:08:81:ec:42:79:89:47:29:4b:f7:
20:b0:1e:c3:7b:cf:9e:b3:e7:b2:d1:e4:e0:f1:d3:a2:7c:2c:
6e:0b:b7:83:96:2c:be:93:c3:c9:99:a9:82:16:c0:07:04:be:
1c:50:2b:ab:d5:ae:aa:ea:c5:19:30:b8:1c:43:43:28:e2:e7:
0e:5d:c1:12:b8:81:ff:d9:4d:2b:03:c9:26:b4:f2:28:2a:79:
62:8f:dd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:50 2026 by rpki-client