
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
File: izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json)
Hash identifier: RNX5Kluaf+Wkw0mAfauiAS4YcfnHFMWAYpfcum91zTc=
Subject key identifier: 9C:71:5F:EA:55:84:02:D2:22:C0:B3:B7:5C:90:31:B7:3B:F1:05:9F
Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79
Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
Manifest number: DB
Signing time: Sun 01 Mar 2026 07:44:23 +0000
Manifest this update: Sun 01 Mar 2026 07:44:23 +0000
Manifest next update: Sun 08 Mar 2026 07:44:23 +0000
Files and hashes: 1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: Ho4htHPRWRcffv71oUcf8kjk3x8t8u8vK3jlH9KiCJY=)
2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: JeIvajlxzjQj5CfJDRwUxxGvNaX9uDFrrx5zQ5EFSS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl
rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179
Validity
Not Before: Mar 1 07:44:23 2026 GMT
Not After : Mar 8 07:44:23 2026 GMT
Subject: CN=69a3ee57-e3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c9:dc:65:49:bd:17:3e:8c:07:70:92:8c:37:
25:97:9f:64:52:26:6f:13:39:fa:55:2b:82:67:95:
3d:15:f5:de:95:72:66:04:73:3f:47:73:e1:df:1d:
93:1e:ab:d0:26:3d:70:46:ff:59:6b:65:ed:2a:74:
d0:6e:91:54:c7:e0:42:4c:19:48:7c:c8:03:2c:f0:
d3:36:c5:cb:86:9f:6b:13:72:b1:d7:77:69:75:f2:
3c:a1:1b:b6:10:23:0d:f7:64:f0:46:e4:2f:c9:7f:
80:27:97:05:7a:9d:fc:6b:72:1f:a7:1c:78:50:2d:
be:bc:a3:26:df:e5:d7:1d:01:79:db:0b:f6:58:42:
82:2f:3e:21:94:e5:39:1f:e3:37:95:ea:58:65:e4:
3c:89:1c:c7:75:7b:a8:30:60:44:7d:ce:aa:6b:6f:
1a:93:b0:87:08:88:f2:bd:ba:48:7f:b4:e4:43:11:
bb:10:2a:3e:86:8f:a9:c1:51:80:2e:fa:95:27:c3:
86:a8:fe:df:67:04:cc:f2:5d:b4:7c:da:5c:72:7e:
86:22:57:9f:02:d6:58:d2:aa:f2:0d:6e:5c:3a:c4:
7f:24:4f:84:b8:1c:af:8b:9d:4d:e5:95:a6:fe:1b:
69:2d:c6:31:49:bb:c6:b4:8c:cb:4a:39:bd:5b:28:
6c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:71:5F:EA:55:84:02:D2:22:C0:B3:B7:5C:90:31:B7:3B:F1:05:9F
X509v3 Authority Key Identifier:
keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:ab:bd:24:dc:63:c4:e2:ce:d8:e8:e7:06:da:ae:1b:13:fc:
58:ec:da:9a:14:75:c7:5d:39:5c:3e:f2:eb:7b:7f:5f:14:65:
2f:06:ce:1a:b8:61:df:93:93:39:ad:32:59:eb:fa:ad:59:8c:
00:8b:25:ae:da:5a:6c:f2:e0:d0:36:f1:cc:20:0e:18:bb:d1:
78:15:d6:17:90:1b:36:64:fc:66:75:fd:a2:3c:80:71:63:31:
c3:4d:6c:14:79:8f:38:33:e9:7b:65:5d:90:bb:5a:c8:52:50:
99:fc:78:4d:41:73:01:4f:07:1a:69:b9:56:1e:39:f6:d5:8c:
22:b1:c8:85:88:ba:a5:14:62:9d:fb:64:05:d7:91:70:c5:ed:
5e:7d:a3:eb:fe:8e:bc:93:c0:a0:f6:05:47:2a:35:01:13:0f:
42:e0:60:3e:48:4e:20:db:14:a0:ba:e3:74:71:97:fe:16:86:
6e:93:2f:66:59:d2:a6:53:1d:fb:e7:e5:ac:d0:8c:bc:b9:77:
6d:6e:53:93:0c:8d:4b:f0:7c:43:4a:79:f1:11:c6:7d:08:cc:
ef:34:87:12:93:16:15:5f:30:63:73:fd:cf:37:ef:84:b5:b7:
d6:96:ce:7b:1f:a0:85:ae:7a:16:5a:2f:c1:09:e4:80:1a:18:
79:70:02:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:10 2026 by rpki-client