
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft
File: isQ8i2LLoieYw56lRmt0xBihqQc.mft (raw, json)
Hash identifier: RsxMscZ7BptgoVoQpPPCVcy1M7TRh/hVh/7QESX0uyo=
Subject key identifier: 7F:47:BF:30:D0:25:F0:AD:E0:4E:9B:D3:74:FD:8E:68:35:61:39:19
Authority key identifier: 8A:C4:3C:8B:62:CB:A2:27:98:C3:9E:A5:46:6B:74:C4:18:A1:A9:07
Certificate issuer: /CN=A9147A12/serialNumber=8AC43C8B62CBA22798C39EA5466B74C418A1A907
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/isQ8i2LLoieYw56lRmt0xBihqQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft
Manifest number: 36
Signing time: Fri 17 Apr 2026 08:16:30 +0000
Manifest this update: Fri 17 Apr 2026 08:16:30 +0000
Manifest next update: Fri 24 Apr 2026 08:16:30 +0000
Files and hashes: 1: isQ8i2LLoieYw56lRmt0xBihqQc.crl (hash: D/foI+tAOk6Z3Ylz0HbmGR7qpQoVomqvNmtKbiyKbhs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.crl
rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/isQ8i2LLoieYw56lRmt0xBihqQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147A12, serialNumber=8AC43C8B62CBA22798C39EA5466B74C418A1A907
Validity
Not Before: Apr 17 08:16:30 2026 GMT
Not After : Apr 24 08:16:30 2026 GMT
Subject: CN=69e1ec5e-e091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:c0:7a:e3:a5:6e:aa:67:21:42:8b:48:01:
fd:81:9f:51:0b:aa:5f:54:74:78:29:d0:bf:6a:57:
ff:80:b4:7a:9a:8d:76:f1:61:e4:28:2c:40:49:10:
4e:dd:c7:6b:dd:d4:4b:e2:cf:ad:9d:ed:98:fb:30:
6c:7a:06:ef:b4:85:ee:0d:17:34:92:9b:4b:8b:f5:
03:89:73:1b:8a:64:69:6a:bc:47:b1:6a:de:96:43:
20:56:ae:9a:3e:b6:c3:12:6e:3e:cd:c9:e6:ea:6b:
42:d5:92:4f:92:91:a7:5a:87:fa:3a:b3:24:e3:87:
7b:20:e2:56:c4:1b:fd:eb:3a:0e:d0:e7:5a:35:11:
6f:c5:e9:70:fa:26:b9:16:03:6a:73:a9:6a:08:cb:
9c:2d:58:70:6d:15:79:68:53:5e:a4:a2:ed:6d:e5:
dc:af:aa:01:f5:79:40:88:80:48:60:c7:3e:39:0f:
ad:a4:33:de:5d:30:56:39:aa:99:10:a2:c3:f7:05:
0b:f2:88:2d:ec:d1:b2:e4:70:35:51:4c:40:cf:65:
4b:53:9d:81:e7:2f:a3:3e:1d:52:c0:51:37:03:78:
be:98:ed:c5:95:9e:62:63:40:2c:64:51:e1:ef:4e:
56:f6:b6:2a:3d:fb:94:7e:a5:67:8c:52:ef:1e:35:
c5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:47:BF:30:D0:25:F0:AD:E0:4E:9B:D3:74:FD:8E:68:35:61:39:19
X509v3 Authority Key Identifier:
keyid:8A:C4:3C:8B:62:CB:A2:27:98:C3:9E:A5:46:6B:74:C4:18:A1:A9:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/isQ8i2LLoieYw56lRmt0xBihqQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e5:71:6d:47:19:15:bc:4d:47:df:04:18:de:2b:f9:c3:3a:
c4:fe:13:82:9b:e1:37:17:50:97:65:52:91:59:fc:d4:e9:fc:
90:c9:8b:b7:f8:a4:66:2d:87:47:f1:76:3c:e9:52:c8:85:e5:
7c:c6:6f:d2:87:a6:29:be:68:45:36:e0:8c:ea:ee:36:dc:37:
db:c1:69:9e:15:e2:04:d0:9c:62:78:43:3c:f3:fe:b6:e4:17:
cf:24:2b:c4:b2:1a:b5:77:45:a4:f0:1e:8a:b5:3d:5d:0b:32:
1c:91:86:19:a7:16:75:19:1a:6a:14:6b:1e:64:98:4b:85:9d:
cb:06:f1:84:70:a1:ff:ff:21:a4:78:28:fc:4e:ce:d7:8f:21:
e6:9b:15:30:df:4c:2f:64:64:36:23:49:50:49:d2:83:3f:c5:
ce:64:9f:a6:6e:12:ae:2a:3b:4b:8d:50:2a:d2:08:02:6b:26:
aa:74:61:e3:67:46:25:50:30:fa:8a:3f:bb:ff:40:ed:95:da:
1d:50:47:54:f5:69:81:af:34:9f:5f:0e:c2:5d:88:a8:05:70:
e9:46:07:7f:2d:ad:15:ad:4f:6c:cf:0a:43:26:47:ed:96:91:
50:ea:3f:99:22:0c:1a:89:ee:30:2b:ed:e7:de:e3:bc:ca:a5:
17:4f:aa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:13 2026 by rpki-client