
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
File: 89pR_oC82pcIdSXiBGIeqfVXQZk.mft (raw, json)
Hash identifier: NGVujzvATe6NlkvAg/eYHg0uFdIcXh659SV3ZxxEwkA=
Subject key identifier: 9E:67:62:34:39:51:14:B5:AF:F6:FF:C0:F4:1D:AD:DF:74:37:C2:B8
Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
Certificate issuer: /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Certificate serial: 0264
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
Manifest number: 0248
Signing time: Fri 17 Apr 2026 02:35:10 +0000
Manifest this update: Fri 17 Apr 2026 02:35:09 +0000
Manifest next update: Fri 24 Apr 2026 02:35:09 +0000
Files and hashes: 1: 89pR_oC82pcIdSXiBGIeqfVXQZk.crl (hash: EKYjbKzkpvu3VYavjNVJacO1oVKt484R/dSmkPggMfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl
rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 612 (0x264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CDA, serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Validity
Not Before: Apr 17 02:35:09 2026 GMT
Not After : Apr 24 02:35:09 2026 GMT
Subject: CN=69e19c5e-1b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:e9:58:04:30:15:94:22:51:32:16:10:9c:
76:e4:06:2f:c2:3e:3c:01:15:d8:93:6e:3e:a4:9c:
59:c0:c9:d6:e0:4f:7b:e1:fb:26:78:4f:55:3c:2f:
f1:8a:ca:13:2d:80:a3:94:6d:be:d0:a1:63:c5:59:
37:5c:16:84:bf:21:46:2a:fd:4a:3b:e4:57:17:23:
4c:aa:54:5f:d1:24:c9:78:b5:2c:36:49:ca:d7:44:
84:67:77:ba:45:04:c9:90:66:ab:de:54:8e:bd:68:
81:76:1b:74:4c:8e:a9:64:4e:de:39:3e:02:d6:86:
63:df:a7:f2:3a:54:15:7f:6a:0d:ce:b8:05:e6:b4:
e7:a9:a5:b9:49:ec:24:39:f8:c4:97:15:c9:32:98:
59:3b:fe:0d:c9:ea:f5:39:62:6a:cd:d7:4c:73:91:
3e:9d:c7:ec:5b:18:09:46:bb:78:ad:9b:05:e4:4d:
25:32:17:e0:d6:3c:43:06:49:1d:b1:15:bc:2c:1a:
5a:dd:34:99:b8:f0:e0:51:d3:dd:a6:95:12:8d:a6:
59:8c:42:21:c8:ac:3b:57:66:7f:cf:74:83:e1:47:
86:0d:bb:d6:33:74:19:4c:54:d4:17:c4:09:7a:77:
b0:a4:13:31:c3:4e:8f:e7:36:90:a8:2b:d9:0d:7e:
5b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:67:62:34:39:51:14:B5:AF:F6:FF:C0:F4:1D:AD:DF:74:37:C2:B8
X509v3 Authority Key Identifier:
keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:4f:dc:c3:6e:7c:06:c5:0a:59:91:82:52:52:48:b6:97:46:
ff:fc:e4:d3:d8:62:4b:21:d9:96:65:4b:3a:98:9b:19:c1:f2:
70:65:84:7c:a0:76:5f:3f:13:7c:33:2c:e1:89:1b:8d:2e:bd:
ca:3f:eb:ac:52:63:a1:19:fd:8a:9b:24:c1:23:e0:a1:93:54:
be:73:08:31:d0:73:41:44:d7:a2:d1:9b:2e:98:95:bc:9b:08:
8d:96:f7:f4:c1:24:d5:ed:c4:3e:86:ec:29:6f:10:1d:13:da:
ba:b5:c1:35:5c:96:fd:b0:dc:5f:81:8c:9b:28:67:b6:27:d1:
c2:b8:ef:b4:d5:4c:66:04:95:32:0c:1d:46:0e:31:b1:d4:9e:
a6:72:78:4f:aa:8d:80:ba:aa:48:de:0a:1f:2d:91:f2:9d:e5:
e5:94:0c:ed:ef:38:ab:f3:89:97:24:2c:07:d9:4d:21:86:67:
36:68:9e:6b:03:b8:13:8c:62:0f:4d:f1:a7:d7:d2:aa:d1:16:
75:43:50:be:00:6a:69:51:20:f1:92:76:4b:84:3c:2b:bf:e2:
22:c1:8e:3f:66:06:43:6b:c1:3d:d0:89:e5:4b:46:e7:40:13:
7c:27:ba:fd:33:41:9b:60:20:43:3a:dd:36:d1:2f:2f:80:db:
2a:a4:82:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:08 2026 by rpki-client