
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft
File: cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft (raw, json)
Hash identifier: rqFTld5MMQEqG9YCfv5CzVfXf32Q70EW0Xgzc6Dv8vM=
Subject key identifier: DC:C9:16:B2:9C:E0:91:AD:99:D9:21:87:7B:1A:52:D2:32:8F:7A:EF
Authority key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1
Certificate issuer: /CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
Certificate serial: 0989
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft
Manifest number: 094B
Signing time: Sat 28 Feb 2026 20:35:01 +0000
Manifest this update: Sat 28 Feb 2026 20:35:01 +0000
Manifest next update: Sat 07 Mar 2026 20:35:01 +0000
Files and hashes: 1: cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl (hash: zMh3ywXPKgKzCSl8WHRl3qhw1xMoI99OFnIBFTRrh3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl
rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2441 (0x989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CA4B, serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
Validity
Not Before: Feb 28 20:35:01 2026 GMT
Not After : Mar 7 20:35:01 2026 GMT
Subject: CN=69a35175-83d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:e4:c5:63:78:4e:6b:b8:9b:94:04:2e:e2:
7f:73:8f:96:0c:69:7b:67:88:27:4e:2d:22:34:37:
c6:a8:9a:fe:d5:71:4b:db:a4:ca:e3:3d:5d:95:7e:
26:78:f6:5d:07:23:a2:33:46:b0:6e:8a:24:a7:b5:
88:d7:da:75:f2:c9:74:dc:f4:18:36:ac:41:0f:3d:
99:9f:e7:a1:be:a9:b9:a5:a3:a3:b6:ee:f8:27:fd:
24:a4:d7:d9:08:c5:78:9f:51:97:d9:bf:78:f1:77:
71:8d:0a:57:08:0f:8b:51:08:fd:02:b2:74:4b:75:
9e:ac:2f:67:b5:64:35:a1:07:4b:2c:3e:27:d4:42:
2b:52:63:11:27:a1:74:3d:0b:16:7c:9d:3c:ea:0d:
c7:1f:f2:3c:8f:f9:17:0b:43:45:00:ba:72:b9:d8:
11:70:b7:fd:58:24:92:db:5a:22:63:1a:69:73:8e:
99:d9:9b:39:89:53:b4:0b:b3:f3:9f:22:23:7d:41:
72:36:0d:b1:6c:ed:65:13:1e:7c:d2:49:83:83:1f:
c3:c5:9d:96:a6:47:f0:7a:cf:df:61:8c:e8:1b:00:
58:a0:b0:8d:54:15:ad:41:39:4a:e8:3f:07:3a:9b:
23:cb:83:43:4e:da:0d:23:79:8e:02:0b:88:ec:a2:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C9:16:B2:9C:E0:91:AD:99:D9:21:87:7B:1A:52:D2:32:8F:7A:EF
X509v3 Authority Key Identifier:
keyid:70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:22:33:84:7a:77:48:17:e2:7f:a4:1a:89:b3:8c:fc:9b:9a:
93:bc:ec:29:e3:98:84:66:06:cc:8c:90:aa:15:c1:c3:02:ed:
24:c9:74:04:c6:47:4e:56:59:50:db:cc:6b:83:ac:8b:9a:4b:
52:0d:04:37:7c:7c:d3:00:71:8a:3e:81:3e:01:dc:26:3c:e8:
e2:e2:c8:b1:f6:4c:2a:c8:ea:4d:87:e5:4e:9f:00:09:d4:30:
26:8c:e3:fa:49:5d:fa:05:e4:e6:86:65:d9:2b:39:5d:6d:36:
58:dc:82:86:19:01:3a:a9:31:4c:41:f1:ea:43:40:3c:6f:d0:
04:b3:af:55:89:23:11:d7:92:6b:84:3c:c1:d4:36:c0:c9:bc:
32:3b:4c:f2:62:13:7e:d3:75:16:bf:3d:f4:7f:63:c4:2a:97:
19:d1:51:41:3d:4b:67:84:0c:92:94:b6:4e:e9:d1:18:44:cd:
19:ac:87:b3:66:ae:b7:f2:bb:d9:f6:d4:52:1e:2d:85:14:7b:
db:79:82:e7:f9:db:71:d0:30:5d:d4:ff:cd:26:60:05:ac:a1:
80:ff:9c:7e:cf:9f:20:39:63:99:d8:32:73:b6:f7:c7:05:db:
38:07:f1:0f:20:c7:a7:94:50:55:5a:bc:3c:dd:da:d5:4c:74:
c4:cc:5a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:09 2026 by rpki-client