
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
File: ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json)
Hash identifier: VkauGSYAC7O2bQkCKJEq7lP/GB4C+5kDG9rTAsf6olc=
Subject key identifier: FA:A8:42:AB:B7:60:A9:74:E3:20:1F:73:6D:83:F0:4E:57:63:83:CB
Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C
Certificate issuer: /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C
Certificate serial: 9C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
Manifest number: 9C
Signing time: Sat 28 Feb 2026 20:09:05 +0000
Manifest this update: Sat 28 Feb 2026 20:09:05 +0000
Manifest next update: Sat 07 Mar 2026 20:09:05 +0000
Files and hashes: 1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: S7iezsDbscCq32Xzit5vtOVw3/11hJ04+BtFV9+ezUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl
rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:09:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C
Validity
Not Before: Feb 28 20:09:05 2026 GMT
Not After : Mar 7 20:09:05 2026 GMT
Subject: CN=69a34b61-e30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:71:64:1c:f4:62:58:d2:91:83:34:c3:04:
b3:0a:e6:50:3c:45:fc:1d:1f:ab:40:e7:7f:eb:b3:
46:89:f5:ea:20:2f:71:29:87:0d:34:90:ca:51:f6:
7a:5a:32:31:68:bc:ea:d9:6e:ff:00:fa:79:3b:bf:
66:23:df:ae:c5:62:29:f0:5b:e9:6d:fe:24:d8:46:
da:04:11:c1:ef:9f:1b:6b:90:d7:d0:2b:0e:26:1d:
a7:61:e6:8d:5d:e4:25:0e:f6:91:81:e6:e7:a7:5f:
d3:24:cf:0a:65:52:30:7c:c7:dc:ad:17:2d:b0:5c:
4d:43:94:9b:3e:2c:18:a4:83:6d:94:6d:18:92:bf:
59:5a:c2:04:0b:2c:b9:09:02:ce:d6:14:94:aa:5c:
26:4d:49:ed:ca:99:c1:9b:1b:7a:c8:d4:d4:41:54:
ef:d1:43:22:a8:e6:d7:4a:c9:68:73:cd:d9:61:4b:
63:ff:4a:72:b6:c7:83:f5:34:04:e7:26:a0:c1:f8:
43:24:2b:25:a2:05:59:a7:4a:f1:88:91:7c:fb:d4:
9b:e2:ae:3d:43:2e:a5:0b:16:d2:d5:9d:2d:b7:db:
02:46:de:70:77:ae:3a:5b:fc:f0:ac:d8:60:b0:28:
bc:09:c5:9e:9b:f1:30:74:d4:e7:14:46:45:55:36:
88:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A8:42:AB:B7:60:A9:74:E3:20:1F:73:6D:83:F0:4E:57:63:83:CB
X509v3 Authority Key Identifier:
keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a6:ff:b3:86:71:47:fc:89:de:99:c8:da:92:1d:da:ec:dc:
74:a9:b1:50:38:4b:e8:6b:91:18:12:4e:8b:5f:39:6c:67:4f:
f9:83:38:97:fe:4d:a5:40:29:84:0d:ea:c0:cb:ad:5b:fd:3c:
27:c9:ff:0e:4d:52:9c:71:2c:ca:d9:ce:fd:6d:96:79:af:35:
50:fe:64:68:99:74:62:16:da:10:9c:63:a4:f3:df:63:04:ac:
74:16:88:37:c0:84:da:da:79:4b:30:d9:33:7a:4d:e7:a9:1d:
53:d9:a1:5a:db:e9:ff:77:eb:37:e9:4b:c1:61:6c:ca:fc:3b:
b1:4c:e8:58:13:8c:f5:ff:96:5b:66:8a:63:2c:1d:ba:52:06:
61:c0:b5:5e:55:ce:c2:60:7b:29:5d:a6:09:bf:85:bc:23:11:
c9:b0:76:96:6b:9c:45:7b:9d:86:51:9f:8a:4e:2e:f1:1a:96:
a3:7c:f1:c9:46:5c:3c:8b:8a:86:8f:df:07:48:a5:41:4b:36:
4d:2d:6d:7f:16:52:9b:b8:ea:75:bb:e6:2f:16:7e:e7:74:00:
8e:4d:a8:b7:88:c6:99:94:69:03:4b:23:a5:9e:ed:82:4a:1b:
0b:f7:2b:88:d3:0e:fc:98:bb:61:e7:72:c0:e2:b8:99:96:44:
16:de:02:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:14 2026 by rpki-client