
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File: iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier: 5HRlvo+HkP8AV6CMCeqpES/pAqL6W2kio+9jZRNfC0Y=
Subject key identifier: BD:99:74:91:4E:7C:C3:4F:71:EB:20:F2:BB:94:34:A8:7D:20:91:37
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer: /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial: 1019
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number: 1000
Signing time: Sun 01 Mar 2026 23:07:21 +0000
Manifest this update: Sun 01 Mar 2026 23:07:20 +0000
Manifest next update: Sun 08 Mar 2026 23:07:20 +0000
Files and hashes: 1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: Jmvb+IxNXoKdc0CIERWs/TiV1YKcamMBP5ibfl6eriY=)
2: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: rWIdUt0QV7XE1Z1Db6/TzOZnervJxxEdviXAUMODu4s=)
3: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: QCuDILdrzkvIxZmj1iyxDFhjLdsSBcMetxYoHDCi4D0=)
4: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: 4tcTWtdYNVrFzyHxN1+sODGXpMdP8UrLT8P96A9YCSI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4121 (0x1019)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Validity
Not Before: Mar 1 23:07:20 2026 GMT
Not After : Mar 8 23:07:20 2026 GMT
Subject: CN=69a4c6a8-c972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:95:6e:5e:bd:ea:aa:27:d5:25:9c:70:8b:
6f:ea:a2:ac:c5:b0:13:a8:e8:64:12:85:bb:40:b8:
80:9d:16:0a:32:27:45:52:c5:bf:ca:13:6f:06:2d:
93:23:e2:2a:78:d5:52:c2:38:1f:53:8b:b6:a4:e4:
1e:30:2c:53:f6:57:b7:19:35:b2:f0:91:bf:13:b7:
e9:63:5b:2a:95:45:38:4b:34:38:7f:da:1e:a2:3e:
85:34:24:68:bb:25:c6:33:1f:e9:be:24:0b:1c:ef:
f1:05:a8:1b:c9:a3:35:97:d8:e9:a9:ff:bc:9c:cc:
80:12:61:60:59:42:22:1b:48:c2:42:ad:35:13:91:
e6:f5:bc:39:30:05:62:c5:8c:d8:fd:97:28:cb:4e:
81:8e:4e:66:0b:df:54:aa:d6:55:7c:ca:46:9a:4a:
2b:f4:62:50:1c:d1:95:df:7d:3c:b7:1c:bd:c1:6d:
f6:61:d0:c9:17:1d:54:8f:9c:f9:d1:53:ba:1f:b5:
ca:5c:a2:bb:e0:4e:a2:5b:be:88:13:40:92:45:0a:
20:a0:4e:43:41:66:d7:c9:ab:fe:6b:59:63:9d:78:
42:eb:9d:0b:37:a3:0d:7b:ef:f1:22:22:08:e2:6d:
14:ca:40:71:dd:81:e0:4b:9d:d2:51:d6:77:32:db:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:99:74:91:4E:7C:C3:4F:71:EB:20:F2:BB:94:34:A8:7D:20:91:37
X509v3 Authority Key Identifier:
keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:6b:4b:b7:2e:5d:dd:41:15:a5:1e:45:8e:72:a8:e1:cd:4d:
8e:0b:79:fe:1b:c2:91:29:70:fd:87:ad:d9:66:bf:e9:cd:68:
68:8b:42:11:c3:19:0e:12:ed:b1:1c:8c:aa:b7:59:c0:14:20:
a6:73:49:55:a4:60:75:ea:ef:46:d0:0a:3a:f9:35:ba:f4:1c:
ba:47:c0:e4:3f:95:3b:5b:c6:62:00:8e:87:2e:b5:95:3c:d8:
14:db:35:c5:93:ab:82:77:f9:1b:40:4b:1f:fe:a9:36:c9:b8:
a1:f3:c5:a0:30:2e:fb:2b:51:d9:f8:f7:7f:ed:23:f5:cd:14:
19:60:97:7d:5c:fe:d0:14:92:b8:bf:dd:bd:b2:5f:da:96:22:
59:82:a0:1d:a4:c3:94:94:66:e7:75:41:98:7a:cf:d6:1f:5b:
2c:f2:96:c5:9f:ea:ba:a8:04:86:34:95:d0:9f:71:a8:65:75:
b5:1b:af:72:d1:59:34:56:6f:a1:85:c9:37:2b:66:c9:36:1c:
89:16:47:b6:ca:5c:cd:34:43:0a:38:b0:0b:fd:69:fb:95:20:
1e:ce:ff:1a:59:91:cc:18:d5:90:4c:01:f0:63:a3:e4:99:14:
37:e3:22:c7:a9:76:08:82:c7:70:fe:c1:04:45:29:ab:b9:29:
36:47:55:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:07 2026 by rpki-client