
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json)
Hash identifier: mHLZE8uar/x97n+9ja2HtU4BwSEpe5zf0DP6wpADXjM=
Subject key identifier: 4D:4B:6D:22:B0:07:FB:4E:02:E5:E5:3B:84:7A:F4:53:65:AF:CB:D7
Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Certificate serial: 0113
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
Manifest number: 010D
Signing time: Sun 01 Mar 2026 23:54:33 +0000
Manifest this update: Sun 01 Mar 2026 23:54:32 +0000
Manifest next update: Sun 08 Mar 2026 23:54:32 +0000
Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: ZVlc7U3HB5+sy3GGuyP3JTaz+nKWuRqi88yUz9PtIak=)
2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: vQxrD0Wy1epRcIQqGanMT2UEnCUMa40m33Ixwa6rxNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Validity
Not Before: Mar 1 23:54:32 2026 GMT
Not After : Mar 8 23:54:32 2026 GMT
Subject: CN=69a4d1b9-3c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:33:79:7b:42:b0:72:c5:01:c0:a8:fe:40:
51:71:f3:7e:10:97:61:4b:26:56:20:fd:31:bd:2a:
00:6f:7d:38:f6:2f:4c:e7:40:77:1b:06:b7:e2:a8:
20:92:32:dc:1d:c2:ef:9f:b3:ad:b2:17:90:79:48:
98:b7:f5:15:3c:a1:24:3c:81:6a:c3:b4:af:de:33:
07:8f:9e:4c:52:cb:eb:12:f1:91:be:61:b3:c3:26:
f8:8a:da:e2:86:60:15:b2:09:51:c8:52:b9:3a:e2:
b5:ac:d1:e6:86:68:dc:d9:d4:ab:78:96:d9:c7:9e:
bd:37:f2:52:b5:dd:a9:4a:47:88:99:6a:ff:fb:61:
fe:a0:37:8b:e5:0b:9d:d2:f4:f8:0a:36:69:c4:8a:
f4:41:f6:b7:72:e7:75:bb:3c:19:a1:b8:72:7a:e4:
71:ce:17:52:ff:23:52:5b:3f:91:b5:08:00:42:a2:
2d:51:a0:ea:a8:9b:a5:9c:73:f5:80:3c:41:ab:46:
f3:ea:34:df:a5:a0:a1:67:08:93:df:2a:e4:99:63:
03:17:61:fd:7b:30:94:30:36:ed:ef:97:a9:18:80:
c3:ea:dc:a1:bf:7d:66:35:0d:2e:fd:fa:f5:d6:09:
29:04:32:7a:c2:fc:a1:0f:df:d3:77:08:07:28:9f:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4B:6D:22:B0:07:FB:4E:02:E5:E5:3B:84:7A:F4:53:65:AF:CB:D7
X509v3 Authority Key Identifier:
keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:32:d9:cb:13:95:df:4c:6a:ec:6c:97:8d:fb:15:fe:64:37:
2d:46:9a:27:be:e4:27:71:c3:69:26:2b:c2:ad:a8:6f:f9:c3:
41:e8:4a:37:e3:9d:cb:be:ab:bb:98:1a:ad:84:0d:d4:ac:a9:
ff:0f:89:b1:93:d1:e9:d5:93:33:3e:74:93:11:3c:fe:ed:40:
5c:a1:c7:6d:68:f4:7f:d3:8a:8a:29:7d:27:22:18:c7:c5:b3:
a2:c6:84:44:b5:9d:cb:f8:ca:a0:66:02:1b:52:e3:06:ad:60:
6e:3c:0f:ba:20:fc:b5:68:ee:d3:71:d9:a1:0d:0c:f3:64:07:
94:ff:a6:39:a5:16:84:8c:7b:79:19:ee:9b:10:ea:6e:60:1c:
69:b6:96:66:64:f9:26:49:2d:44:da:98:7d:a3:80:31:fc:48:
4c:f4:cc:bf:77:43:f6:b8:62:8d:56:46:9f:c2:86:35:c8:bd:
13:16:fd:55:c2:b0:d0:40:f2:c4:71:13:9b:f4:fe:1e:c0:21:
0d:18:68:a6:73:27:09:e1:79:25:85:39:7f:c0:4b:0a:37:d0:
51:1d:97:dd:87:70:e6:b3:6b:4c:c6:b9:ac:36:ab:20:c2:fc:
0b:d4:52:ec:2f:06:34:81:e1:23:28:54:ef:c8:cd:ed:88:31:
81:98:9b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:42:18 2026 by rpki-client