
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft
File: IRcCLfYdpCG55OG7hIPYXkmCv5E.mft (raw, json)
Hash identifier: WLyNRWqa8zGF1c8f0Z3U631OkCSLlcgrLx3JisN7QIM=
Subject key identifier: E4:FB:D9:C8:13:CB:FA:BC:E9:8D:A1:02:89:7A:58:F3:29:5C:20:08
Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91
Certificate issuer: /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91
Certificate serial: 0582
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft
Manifest number: 056E
Signing time: Mon 02 Mar 2026 01:48:32 +0000
Manifest this update: Mon 02 Mar 2026 01:48:28 +0000
Manifest next update: Mon 09 Mar 2026 01:48:28 +0000
Files and hashes: 1: IRcCLfYdpCG55OG7hIPYXkmCv5E.crl (hash: B76Il+NGQ2AVnwwCcIO8wIRpRArlQfm8mG0gYAAkuYs=)
2: E41BF8841CDC11ECBA794120C4F9AE02.roa (hash: +WJvFTxAonY5wxNQGiwRI3ZI8HmyeaPv5VFRCqzMfWE=)
3: B5D70D9ACE3311EFA7B9B640C4F9AE02.roa (hash: Axsa0uyuPTjbrC5wnPZ4BHAIMgaPThG3uMiLY0ziBzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl
rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1410 (0x582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169382, serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91
Validity
Not Before: Mar 2 01:48:28 2026 GMT
Not After : Mar 9 01:48:28 2026 GMT
Subject: CN=69a4ec6f-0128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:c1:51:b0:46:d5:99:5b:44:f1:64:84:ca:
79:78:b7:ec:47:d1:b6:ba:a1:c6:06:30:ed:bc:c3:
82:94:db:3a:53:5b:ed:3e:63:cb:62:13:7c:f4:88:
40:68:bd:d2:af:36:ce:55:e3:65:9a:1a:a4:ea:c1:
bc:f9:1e:d8:23:88:1f:fe:b1:07:e4:0c:1d:6e:32:
27:e0:bf:88:c1:a9:80:13:86:d9:e6:09:db:68:f3:
df:49:ab:89:9b:cd:c8:ea:59:f4:6e:87:6a:d6:40:
f1:a1:f5:53:17:6a:b4:83:1f:7f:50:3a:92:43:81:
f6:76:f6:d1:00:c6:52:b0:cf:48:37:4d:a4:d0:70:
f6:72:d2:8a:88:0f:d7:9c:e4:63:ca:b5:e9:a3:71:
ed:9d:48:9d:24:1c:3d:6b:0e:3d:70:0f:3f:2d:7f:
86:17:f6:38:f4:69:b4:58:14:d8:07:15:a8:92:ee:
6d:8c:5c:a1:0e:d9:30:37:fe:b0:83:7d:53:73:c4:
e1:2f:b6:b6:bc:f8:99:90:5e:e1:39:85:5a:6c:86:
d1:ae:99:85:6b:d4:47:61:88:cb:90:01:73:86:95:
8e:98:72:4d:99:6e:e6:89:27:17:9f:14:47:18:8e:
b7:29:b6:e7:5f:87:98:8c:e1:3a:b1:0c:32:35:03:
36:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FB:D9:C8:13:CB:FA:BC:E9:8D:A1:02:89:7A:58:F3:29:5C:20:08
X509v3 Authority Key Identifier:
keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:98:ec:ea:79:cd:fb:06:1a:ae:93:f3:90:b5:98:26:ef:65:
91:3b:f9:17:fd:18:1b:fb:99:51:4e:56:24:c4:a9:fa:6e:a3:
9f:5e:d2:32:c7:48:d8:73:05:9b:6b:08:99:a7:70:52:0e:55:
b8:23:8c:52:d0:17:0c:c5:fd:16:db:93:c8:2d:b1:0b:cd:14:
64:7a:2f:7a:83:4d:07:63:98:82:97:28:f9:7e:2b:7e:76:f6:
02:12:f6:7a:b1:72:08:8d:c4:aa:c6:68:c7:3b:8f:89:2c:ca:
4c:c5:a4:73:27:e2:eb:f3:42:fc:42:d7:72:db:37:11:c4:7e:
b3:07:08:3c:09:dd:54:8d:d8:ff:f3:a9:a4:b7:25:b7:7a:03:
8e:c2:ab:5b:08:8e:33:cf:f0:01:d6:71:6f:ba:da:43:23:78:
14:82:be:3f:20:cf:55:d0:92:54:5f:82:71:32:3c:33:e7:fc:
2e:8c:79:53:ac:82:8b:e3:7a:5f:7e:0d:7e:64:74:91:3f:08:
72:0e:c2:98:41:43:89:76:ac:74:eb:8f:f6:de:a0:6e:15:8e:
1c:94:dc:a8:b6:cc:3f:86:59:5a:20:d8:fc:7f:a0:36:f9:f7:
ed:4b:d7:7e:c3:4b:fe:c7:d1:a8:5b:70:77:46:b2:4d:a9:c6:
c3:52:82:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:21:28 2026 by rpki-client