
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
File: 89pR_oC82pcIdSXiBGIeqfVXQZk.mft (raw, json)
Hash identifier: KAQUtWim5bYCXK7QvSq5aY/PZL8WuNrTRC2SjRpKVrc=
Subject key identifier: B5:80:83:CF:00:49:F3:1E:A3:22:AE:9A:70:CA:31:C4:47:02:CF:42
Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
Certificate issuer: /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Certificate serial: 024B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
Manifest number: 022F
Signing time: Sun 01 Mar 2026 03:50:53 +0000
Manifest this update: Sun 01 Mar 2026 03:50:53 +0000
Manifest next update: Sun 08 Mar 2026 03:50:53 +0000
Files and hashes: 1: 89pR_oC82pcIdSXiBGIeqfVXQZk.crl (hash: Bxj1dC/Na4MvC+tImvxTkAB3FUA3/NynFWG7KsxI92E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl
rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 587 (0x24b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CDA, serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Validity
Not Before: Mar 1 03:50:53 2026 GMT
Not After : Mar 8 03:50:53 2026 GMT
Subject: CN=69a3b79d-7ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:0e:c0:89:ea:ef:c4:f8:d1:2c:fd:4a:d8:
1f:3f:c7:da:3f:b5:9c:26:63:c1:b8:31:75:91:ec:
9d:07:1b:87:20:cd:fe:6f:1c:71:eb:65:27:8c:2d:
1c:c8:69:55:1e:12:b5:1f:58:28:e8:c7:c2:00:59:
7d:db:7c:5b:a7:dd:b6:71:82:4a:3f:ae:92:1e:de:
5e:91:84:a0:ad:dd:2d:cf:4c:7d:1e:2c:be:7b:a7:
d1:32:5d:37:aa:53:de:25:19:13:eb:dc:54:a0:1f:
f7:60:59:9f:ab:04:81:1c:4f:c7:71:e8:b4:d8:ba:
0d:75:3b:14:c8:e5:81:41:09:fb:a0:9f:c9:85:8c:
7b:32:fe:4e:1e:a6:dd:8c:06:9c:e9:05:8b:76:57:
cb:a2:ee:5c:b5:31:51:1a:76:22:6d:11:40:fc:ff:
87:06:58:a6:9b:04:f4:d1:7c:0f:75:2c:4a:2c:16:
05:8d:87:c0:c5:0f:d2:4a:b6:4a:af:39:5e:d3:9b:
7b:f8:70:d5:87:88:8c:ba:e7:a7:47:24:f9:19:e6:
d4:30:d0:91:ac:15:3c:be:7d:97:f4:a8:2a:9a:4d:
61:02:03:ab:c1:c5:e0:f2:6f:2e:ca:67:fb:f7:75:
bf:2d:b9:d7:e9:d3:1b:b0:f0:7a:b4:8d:fc:50:1b:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:80:83:CF:00:49:F3:1E:A3:22:AE:9A:70:CA:31:C4:47:02:CF:42
X509v3 Authority Key Identifier:
keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:e9:5e:d3:3a:db:bc:65:86:c4:f9:53:ef:b3:b3:41:9e:3f:
8f:c8:89:14:2c:1f:48:c7:21:13:95:78:69:12:0e:15:b2:6e:
e3:8d:a0:8d:44:33:2f:4c:70:19:a3:ff:f5:54:c3:d2:b2:c1:
64:99:89:e2:2c:8c:b1:a4:16:3b:4a:74:8f:33:8a:8a:81:e4:
dd:05:a9:26:2d:a5:90:84:27:1a:a3:f7:a5:05:75:9e:c5:5b:
1d:e2:4b:4b:e6:d6:a8:aa:5e:e6:3f:ed:a8:14:e8:b1:23:96:
4f:ff:27:5a:08:fa:96:76:96:27:87:3a:13:24:c9:9b:bb:49:
e8:bf:e6:3f:8a:95:91:68:37:2f:ee:f5:b0:ba:b6:05:4a:2b:
97:55:8e:83:9e:6b:c0:d3:63:f7:41:ce:81:35:3f:9c:4d:09:
3c:91:46:03:04:f0:f1:a5:e2:a7:18:1a:9d:90:37:6f:f9:be:
ff:20:ea:a1:d9:e7:34:97:69:96:5f:35:6a:0e:19:f6:0f:62:
9b:a3:80:3a:8a:e0:33:0b:ce:4f:1d:d2:37:f6:39:32:18:a0:
dd:a1:d1:4a:7b:b8:09:f8:fa:36:f6:56:35:6d:19:e2:72:15:
22:1f:fc:44:59:13:aa:26:be:6d:91:32:ca:2f:46:18:9f:13:
98:f3:d0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:45 2026 by rpki-client